FPR4112-NGFW-K9 – 40G NGFW Firewall – 8x10G SFP+ – 2 NM Bays
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR4112-NGFW-K9 Description
The FPR4112-NGFW-K9 is a Cisco Secure Firewall 4100 Series Firepower 4112 NGFW appliance for internet-edge and data center perimeters that run Threat Defense. The 1RU appliance delivers 19 Gbps of FW + AVC + IPS throughput, 10 million concurrent sessions and 4.5 Gbps of hardware TLS decryption, with eight fixed 1G/10G SFP+ ports and two network module bays. Threat Defense high availability is active/standby, and clustering reaches 16 appliances.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR4112-NGFW-K9 |
|
Product type |
Cisco Firepower 4112 NGFW appliance |
|
Firewall model |
FPR-4112 |
|
Security software role |
Cisco Secure Firewall Threat Defense / NGFW |
|
Form factor |
1RU |
|
On-chassis data ports |
8 x 10 Gigabit Ethernet SFP+ |
|
Network module bays |
2 |
|
Firewall throughput |
40 Gbps |
|
NGFW throughput |
19 Gbps |
|
IPS throughput |
19 Gbps |
|
TLS throughput |
4.5 Gbps |
|
Power supply configuration |
Single 1100W AC; dual optional; single or dual 950W DC optional |
|
Fan modules |
6 hot-swappable fans |
Product Performance
Key Features
Threat Defense passes 19 Gbps with FW + AVC and the same 19 Gbps with FW + AVC + IPS (1024B). NGIPS throughput is also 19 Gbps, so enabling IPS does not lower the rated figure.
Decryption runs in hardware at 4.5 Gbps, measured with 50% TLS 1.2 AES256-SHA and RSA 2048 traffic. Encrypted flows can be inspected without moving the work onto the main CPUs.
The appliance holds 10 million concurrent sessions and sets up 98,000 new connections per second with AVC. IPsec VPN reaches 8.5 Gbps for up to 10,000 peers.
Multi-Instance runs separate Threat Defense instances on one chassis, and clusters scale to 16 appliances or 16 instances. Standalone high availability is active/standby.
Eight fixed SFP+ ports run at 1G or 10G. The two bays take 8x10G, 4x40G or 2x100G modules, up to 24 10G ports or four 100G ports in total.
Two 1+1 power slots hold 1100W AC or 950W DC supplies, and the unit ships with one AC supply. Six hot-swappable fans cool the chassis front to rear.
Application Scenarios
At an enterprise internet edge, the appliance applies application visibility and IPS to traffic at 19 Gbps, with 4.5 Gbps of that inspection able to look inside TLS sessions in hardware.
A data center border can place the appliance between the core and the upstream routers, using the fixed SFP+ ports at 10G and the module bays for 40G uplinks.
An organization that separates business units or compliance zones can run several Threat Defense instances on one chassis, or cluster up to 16 appliances as capacity grows.
Product Comparison
|
Parameter |
FPR4112-NGFW-K9 | ||
|---|---|---|---|
|
Stateful inspection firewall throughput |
40 Gbps |
40 Gbps |
80 Gbps |
|
Throughput: FW + AVC |
19 Gbps |
Not applicable |
33 Gbps |
|
Throughput: FW + AVC + IPS |
19 Gbps |
Not applicable |
33 Gbps |
|
Maximum concurrent sessions |
10 million |
10 million |
15 million |
|
Network module slots |
2 |
2 |
2 |
|
Memory |
96 GB |
96 GB |
192 GB |
|
Storage |
400 GB |
400 GB |
400 GB |
|
Power supply |
Single 1100W AC; dual optional; single or dual 950W DC optional |
Single 1100W AC; dual optional; single or dual 950W DC optional |
Single 1100W AC; dual optional; single or dual 950W DC optional |
FPR4112-NGFW-K9 runs Threat Defense on the same 1RU chassis as FPR4112-ASA-K9 and is rated at 19 Gbps with application inspection and IPS, where the ASA appliance is rated at 40 Gbps of stateful inspection, so the choice follows the software rather than the hardware. Sites that must stay on Cisco ASA, with up to 250 security contexts and active/active failover, should order FPR4112-ASA-K9. Where Threat Defense must pass 19 Gbps, FPR4115-NGFW-K9 lists 33 Gbps of NGFW and IPS throughput on 192 GB of memory instead of 96 GB, with the same 400 GB SSD and single 1100W AC supply by default.
Ordering Checklist
- Threat subscription: Order one of L-FPR4112T-T=, -TC=, -TM=, -TMC=, -AMP= or -URL=, plus the term suffix -1Y, -3Y or -5Y, such as L-FPR4112T-TMC-3Y. Threat (T) is the prerequisite for Malware and URL Filtering, and the 5-year term carries the largest discount.
- Smart Software Licensing account: Set up an account for the end customer, or link the existing account to the order. The account is required before the order is placed, so the licenses have nowhere to be deposited otherwise.
- Bundle or single PID: Choose FPR4112-BUN for the master bundle, FPR4112-FTD-HA-BUN for a two-unit HA pair, or the single FPR4112-NGFW-K9. The bundle PID is advised unless there is a specific reason, because it brings every required component on one order.
- Network modules: Decide which of FPR4K-NM-8X10G, FPR4K-NM-4X40G or FPR4K-NM-2X100G goes in the two bays; FPR4K-NM-2X100G needs Threat Defense 7.3.1 or later. The bays ship empty of modules beyond the eight fixed SFP+ ports, and an unsupported release cannot use the 100G module.
- Power supplies: The unit ships with one FPR4K-PWR-AC-1100; add a second one, or choose FPR4K-PWR-DC-950 where the site feeds DC. The second slot is 1+1 redundancy; DC and blank-panel choices are separate PIDs.
- Power cords: Order one cord per supply in the destination country’s standard; orders to Argentina, Brazil and Japan must include the matching cord. Those destinations cannot be shipped without the cord ordered on the system.
Optional Add-ons
|
Model |
Description |
|---|---|
|
FPR4K-NM-8X10G |
8-port 10-Gbps SFP+ network module |
|
FPR4K-NM-4X40G |
4-port 40-Gbps QSFP+ network module |
|
FPR4K-NM-2X100G |
2-port 100-Gbps single-wide network module |
|
FPR4K-NM-8X1G-F |
8-port 1-Gbps copper hardware bypass network module |
|
FPR4K-NM-6X10SR-F |
6-port 10-Gbps SR hardware bypass network module |
|
FPR4K-NM-6X10LR-F |
6-port 10-Gbps LR hardware bypass network module |
|
FPR4K-NM-2X40G-F |
2-port 40-Gbps SR hardware bypass network module |
|
FPR4K-PWR-AC-1100 |
1100-W AC power supply module |
|
FPR4K-PWR-DC-950 |
950-W DC power supply module |
|
FPR4K-SSD400 |
400-GB SSD for Firepower 4112 and 4115 |
|
FPR4K-RACK-MNT |
Rack-mount kit |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR4112-NGFW-K9 | Product type | Cisco Firepower 4112 NGFW appliance |
| Firewall model | FPR-4112 | Security software role | Cisco Secure Firewall Threat Defense / NGFW |
| Rack units | 1RU | Dimensions | 1.75 x 16.89 x 29.7 in. (4.4 x 42.9 x 75.4 cm) |
| On-chassis data ports | 8 x 10 Gigabit Ethernet SFP+ | Network module bays | 2 |
| Maximum interface expansion | Up to 4 x 100GE QSFP28, 24 x 10GE SFP+, 8 x 40GE QSFP+, or 24 x 1GE ports with network modules and fixed ports | Management port | 1 Gigabit Ethernet SFP port |
| Serial port | 1 x RJ-45 console | USB port | 1 x USB 2.0 |
| Storage | 400 GB | Fan modules | 6 hot-swappable fans |
| Power supply configuration | Single 1100W AC; dual optional; single or dual 950W DC optional | Power redundancy | 1+1 |
| AC input voltage | 100 to 240V AC | AC maximum output power | 1100W |
| DC input voltage | -40V to -60VDC | DC maximum output power | 950W |
| Firewall throughput | 40 Gbps | NGFW throughput | 19 Gbps |
| IPS throughput | 19 Gbps | Maximum concurrent connections | 10 million |
| New connections per second | 98000 with AVC | TLS throughput | 4.5 Gbps |
| Fixed port transceiver support | 1G and 10G SFP/SFP+ options listed for Firepower 4112 fixed ports | Fixed port first supported release | Threat Defense 6.6 / ASA 9.14 |
| Mounting | 4-post EIA-310-D rack mount rails included | Weight | 17.87 kg (39.4 lb) with 2 power supplies, 2 network modules, and 6 fans |
| Operating temperature | 32 to 104F (0 to 40C) | Operating humidity | 5 to 95% noncondensing |
| Operating altitude | 10000 ft maximum |
Get More Information
Need pricing, stock, or shipping details for the FPR4112-NGFW-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email [email protected] for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
Which FXOS release does FPR4K-NM-2X100G need in FPR4112-NGFW-K9?
-
Which slots take network modules in FPR4112-NGFW-K9, and how are empty slots covered?
-
Which PIDs cover a spare fan, an empty power slot and the rack kit for FPR4112-NGFW-K9?
-
Which Threat Defense releases can run on FPR4112-NGFW-K9 with FXOS 2.18?
-
Which subscription PIDs and terms are available for FPR4112-NGFW-K9?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
Their post-sale care made me confident about placing future orders.
Verified the serial number — came back clean. Genuine product.
Just placed our fourth order. Every unit has been genuine and performed perfectly.