FPR4112-ASA-K9 – 40G ASA Firewall – 8x10G SFP+ – 2 NM Bays
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR4112-ASA-K9 Description
The FPR4112-ASA-K9 is a Cisco Secure Firewall 4100 Series Firepower 4112 ASA appliance for internet-edge and data center perimeters. The 1RU appliance delivers 40 Gbps of stateful inspection throughput, 10 million concurrent connections and 9 Gbps of IPsec VPN, with eight fixed 1G/10G SFP+ ports and two network module bays. Active/active failover needs multiple-context mode, and the appliance includes 10 security contexts with a maximum of 250.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR4112-ASA-K9 |
|
Product type |
Cisco Firepower 4112 ASA appliance |
|
Form factor |
1RU |
|
On-chassis data ports |
8 x 10 Gigabit Ethernet SFP+ |
|
Network module bays |
2 |
|
Stateful inspection firewall throughput |
40 Gbps |
|
Multiprotocol firewall throughput |
30 Gbps |
|
Concurrent firewall connections |
10 million |
|
New connections per second |
400000 |
|
IPsec VPN throughput |
9 Gbps |
|
Power supply configuration |
Single 1100W AC; dual optional; single or dual 950W DC optional |
|
Fan modules |
6 hot-swappable fans |
Product Performance
Key Features
The appliance terminates 9 Gbps of IPsec VPN (450B UDP, site-to-site) for up to 10,000 peers, which sets how many remote sites and users one unit can serve.
Ten virtual firewalls are included and the limit is 250. Each context carries its own policy, so separate tenants or business units share one chassis.
ASA runs active/standby failover, or active/active when multiple-context mode is on. Clustering joins up to 16 appliances into one logical firewall.
Eight fixed SFP+ ports run at 1G or 10G. The two bays take 8x10G, 4x40G or 2x100G modules, up to 24 10G ports or four 100G ports in total, and the 2x100G module needs ASA 9.18.1 or later.
Two 1+1 power slots hold 1100W AC or 950W DC supplies, and the unit ships with one AC supply. Six hot-swappable fans keep airflow front to rear and tolerate a single fan failure.
The 400 GB SSD in slot 1 hosts the ASA logical device and must stay installed. Slot 2 is limited to the optional MSP, and RAID is not supported.
Application Scenarios
At a campus or headquarters internet edge, the appliance enforces ASA policy at 40 Gbps of stateful inspection and terminates remote-access and site-to-site IPsec tunnels for up to 10,000 VPN peers.
A data center perimeter shared by several business units can split policy into security contexts, with 10 included and up to 250 supported on the same appliance.
Where one firewall is not enough, up to 16 appliances can run as an ASA cluster, with the fixed SFP+ ports facing 10G switches and the two module bays adding 40G or 100G links.
Product Comparison
|
Parameter |
FPR4112-ASA-K9 | ||
|---|---|---|---|
|
Stateful inspection firewall throughput |
40 Gbps |
40 Gbps |
80 Gbps |
|
Throughput: FW + AVC + IPS |
Not applicable |
19 Gbps |
Not applicable |
|
Maximum concurrent sessions |
10 million |
10 million |
15 million |
|
IPsec VPN throughput |
9 Gbps |
8.5 Gbps |
15 Gbps |
|
Maximum VPN peers |
10,000 |
10,000 |
15,000 |
|
Network module slots |
2 |
2 |
2 |
|
Memory |
96 GB |
96 GB |
192 GB |
|
Storage |
400 GB |
400 GB |
400 GB |
|
Power supply |
Single 1100W AC; dual optional; single or dual 950W DC optional |
Single 1100W AC; dual optional; single or dual 950W DC optional |
Single 1100W AC; dual optional; single or dual 950W DC optional |
FPR4112-ASA-K9 and FPR4112-NGFW-K9 share the same 1RU chassis, eight SFP+ ports, two network module bays and 400 GB SSD, and the PID decides the software: the ASA appliance is rated at 40 Gbps of stateful inspection and 9 Gbps of IPsec VPN, while FPR4112-NGFW-K9 runs Threat Defense at 19 Gbps with application inspection and IPS. Sites that want IPS, malware or URL filtering subscriptions on this hardware should order the NGFW PID. Where ASA sessions must pass 10 million connections or IPsec must pass 9 Gbps, FPR4115-ASA-K9 lists 15 million connections, 15 Gbps and 80 Gbps of firewall throughput on 192 GB of memory instead of 96 GB, with the same single 1100W AC supply by default.
Ordering Checklist
- ASA licenses: Order the Base license L-FPR4100-ASA=, the free encryption license L-FPR4K-ENC-K9=, and L-FPR4K-ASASC-10= for each extra block of 10 security contexts. ASA models run on Smart Licensing, and the 10 contexts included stop at that count unless more are ordered.
- Smart Software Licensing account: Set up an account for the end customer, or link the existing account to the order. The account is required before the order is placed, so the licenses have nowhere to be deposited otherwise.
- Network modules: Decide which of FPR4K-NM-8X10G, FPR4K-NM-4X40G or FPR4K-NM-2X100G goes in the two bays; FPR4K-NM-2X100G needs ASA 9.18.1 or later. The bays ship empty of modules beyond the eight fixed SFP+ ports, and an unsupported release cannot use the 100G module.
- Power supplies: The unit ships with one FPR4K-PWR-AC-1100; add a second one, or choose FPR4K-PWR-DC-950 where the site feeds DC. The second slot is 1+1 redundancy; DC and blank-panel choices are separate PIDs.
- Power cords: Order one cord per supply in the destination country’s standard; orders to Argentina, Brazil and Japan must include the matching cord. Those destinations cannot be shipped without the cord ordered on the system.
Optional Add-ons
|
Model |
Description |
|---|---|
|
FPR4K-NM-8X10G |
8-port 10-Gbps SFP+ network module |
|
FPR4K-NM-4X40G |
4-port 40-Gbps QSFP+ network module |
|
FPR4K-NM-2X100G |
2-port 100-Gbps single-wide network module |
|
FPR4K-NM-8X1G-F |
8-port 1-Gbps copper hardware bypass network module |
|
FPR4K-NM-6X10SR-F |
6-port 10-Gbps SR hardware bypass network module |
|
FPR4K-NM-6X10LR-F |
6-port 10-Gbps LR hardware bypass network module |
|
FPR4K-NM-2X40G-F |
2-port 40-Gbps SR hardware bypass network module |
|
FPR4K-PWR-AC-1100 |
1100-W AC power supply module |
|
FPR4K-PWR-DC-950 |
950-W DC power supply module |
|
FPR4K-SSD400 |
400-GB SSD for Firepower 4112 and 4115 |
|
FPR4K-RACK-MNT |
Rack-mount kit |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR4112-ASA-K9 | Product type | Cisco Firepower 4112 ASA appliance |
| Firewall model | FPR-4112 | Rack units | 1RU |
| Dimensions | 1.75 x 16.89 x 29.7 in. (4.4 x 42.9 x 75.4 cm) | On-chassis data ports | 8 x 10 Gigabit Ethernet SFP+ |
| Network module bays | 2 | Maximum interface expansion | Up to 4 x 100GE QSFP28, 24 x 10GE SFP+, 8 x 40GE QSFP+, or 24 x 1GE ports with network modules and fixed ports |
| Management port | 1 Gigabit Ethernet SFP port | Serial port | 1 x RJ-45 console |
| USB port | 1 x USB 2.0 | Storage | 400 GB |
| Fan modules | 6 hot-swappable fans | Power supply configuration | Single 1100W AC; dual optional; single or dual 950W DC optional |
| Power redundancy | 1+1 | AC input voltage | 100 to 240V AC |
| AC maximum output power | 1100W | DC input voltage | -40V to -60VDC |
| DC maximum output power | 950W | Stateful inspection firewall throughput | 40 Gbps |
| Multiprotocol firewall throughput | 30 Gbps | Concurrent firewall connections | 10 million |
| New connections per second | 400000 | Firewall latency | 3.5 microseconds with UDP 64B test traffic |
| IPsec VPN throughput | 9 Gbps | Maximum VPN peers | 10000 |
| Security contexts | 10 included; 250 maximum | High availability | Active/active or active/standby |
| Clustering | Up to 16 appliances | Fixed port transceiver support | 1G and 10G SFP/SFP+ options listed for Firepower 4112 fixed ports |
| Fixed port first supported release | Threat Defense 6.6 / ASA 9.14 | Mounting | 4-post EIA-310-D rack mount rails included |
| Weight | 17.87 kg (39.4 lb) with 2 power supplies, 2 network modules, and 6 fans | Operating temperature | 32 to 104F (0 to 40C) |
| Operating humidity | 5 to 95% noncondensing | Operating altitude | 10000 ft maximum |
| Noise | 63 dBA typical; 74 dBA maximum |
Get More Information
Need pricing, stock, or shipping details for the FPR4112-ASA-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email [email protected] for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
Which FXOS release does FPR4K-NM-2X100G need in FPR4112-ASA-K9?
-
Which slots take network modules in FPR4112-ASA-K9, and how are empty slots covered?
-
Which PIDs cover a spare fan, an empty power slot and the rack kit for FPR4112-ASA-K9?
-
What is the maximum VLAN count on FPR4112-ASA-K9?
-
Which ASA releases can run on FPR4112-ASA-K9 with FXOS 2.18?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
I was overprepared for issues. None came up. Just a clean transaction.
We’ve built a multi-year purchasing history with Layer23. Took a little longer to clear customs than expected, otherwise excellent.
Good product, good price, good service.