FPR4125-ASA-K9 – 80G ASA Firewall – 45G Multiprotocol – 800GB SSD
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR4125-ASA-K9 Description
The FPR4125-ASA-K9 is a Cisco Secure Firewall 4100 Series Firepower 4125 ASA appliance for large internet-edge and data center perimeters. The 1RU appliance delivers 80 Gbps of stateful inspection throughput, 25 million concurrent connections and 19 Gbps of IPsec VPN, and it ships with dual 1100W AC supplies and an 800 GB SSD. The 4125 is the only 4100 Series model certified for NEBS operation.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR4125-ASA-K9 |
|
Product type |
Cisco Firepower 4125 ASA appliance |
|
Firewall model |
FPR-4125 |
|
Security software role |
Cisco Secure Firewall ASA |
|
Form factor |
1RU |
|
Memory |
192 GB |
|
On-chassis data ports |
8 x 1/10 Gigabit Ethernet SFP+ |
|
Network module bays |
2 |
|
Stateful inspection firewall throughput |
80 Gbps |
|
Multiprotocol firewall throughput |
45 Gbps |
|
Concurrent firewall connections |
25 million |
|
IPsec VPN throughput |
19 Gbps |
|
Default power supply |
Two FPR4K-PWR-AC-1100 1100W AC supplies |
Product Performance
Key Features
The 4125 is the only 4100 Series model certified for NEBS. Its profile allows 0 to 45 C up to 6,000 ft, 0 to 35 C from 6,000 to 13,000 ft, and short-term excursions from -5 to 50 C.
Stateful inspection is rated at 80 Gbps and multiprotocol traffic at 45 Gbps, which is the figure that tracks mixed real-world application traffic more closely.
The appliance holds 25 million concurrent connections and sets up 1.1 million new connections per second, which matters for edges that see many short-lived flows.
IPsec VPN reaches 19 Gbps with up to 20,000 peers, enough headroom for a large remote-access population plus site-to-site tunnels on one unit.
Both 1+1 power slots arrive filled with 1100W AC supplies, so redundancy needs no extra module. A 950W DC supply remains an option for DC-fed sites.
192 GB of memory pairs with an 800 GB primary SSD in slot 1, which hosts the ASA logical device and must stay installed.
Application Scenarios
In a central office or carrier facility that follows NEBS requirements, the appliance runs ASA policy at the site edge and operates at altitudes up to 13,000 ft under its NEBS profile.
A headquarters that terminates site-to-site and remote-access tunnels can use the appliance as the IPsec endpoint, with 19 Gbps of VPN throughput and capacity for 20,000 peers.
A data center edge that fronts web and application farms can hold 25 million concurrent connections and set up 1.1 million new connections per second behind the upstream routers.
Product Comparison
|
Parameter |
FPR4125-ASA-K9 | ||
|---|---|---|---|
|
Stateful inspection firewall throughput |
80 Gbps |
80 Gbps |
80 Gbps |
|
Multiprotocol firewall throughput |
45 Gbps |
40 Gbps |
50 Gbps |
|
Maximum concurrent sessions |
25 million |
15 million |
40 million |
|
IPsec VPN throughput |
19 Gbps |
15 Gbps |
23 Gbps |
|
Maximum VPN peers |
20,000 |
15,000 |
20,000 |
|
Memory |
192 GB |
192 GB |
384 GB |
|
Storage |
800 GB |
400 GB |
800 GB |
|
Power supply |
Dual 1100W AC |
Single 1100W AC; dual optional; single or dual 950W DC optional |
Dual 1100W AC |
|
NEBS |
Certified |
Not certified |
Not certified |
FPR4125-ASA-K9 and FPR4115-ASA-K9 both list 80 Gbps of stateful inspection, but FPR4125-ASA-K9 raises multiprotocol throughput from 40 to 45 Gbps, connections from 15 to 25 million and IPsec VPN from 15 to 19 Gbps, and ships with an 800 GB SSD and two 1100W AC supplies instead of 400 GB and one. A site that needs NEBS operation must use FPR4125-ASA-K9, the only certified model in the Firepower 4100 Series. Beyond 25 million connections or 19 Gbps of IPsec, FPR4145-ASA-K9 lists 40 million connections, 23 Gbps and 50 Gbps of multiprotocol throughput on 384 GB of memory. Sites that run Threat Defense instead of ASA order FPR4125-NGFW-K9, which lists 45 Gbps of firewall and IPS throughput.
Ordering Checklist
- ASA licenses: Order the Base license L-FPR4100-ASA=, the free encryption license L-FPR4K-ENC-K9=, and L-FPR4K-ASASC-10= for each extra block of 10 security contexts. ASA models run on Smart Licensing, and the 10 contexts included stop at that count unless more are ordered.
- Smart Software Licensing account: Set up an account for the end customer, or link the existing account to the order. The account is required before the order is placed, so the licenses have nowhere to be deposited otherwise.
- Network modules: Decide which of FPR4K-NM-8X10G, FPR4K-NM-4X40G or FPR4K-NM-2X100G goes in the two bays; FPR4K-NM-2X100G needs ASA 9.18.1 or later. The bays ship empty of modules beyond the eight fixed SFP+ ports, and an unsupported release cannot use the 100G module.
- Power supplies: Two FPR4K-PWR-AC-1100 supplies ship by default; choose FPR4K-PWR-DC-950 only where the site feeds DC. The second slot is 1+1 redundancy; DC and blank-panel choices are separate PIDs.
- Power cords: Order one cord per supply in the destination country’s standard; orders to Argentina, Brazil and Japan must include the matching cord. Those destinations cannot be shipped without the cord ordered on the system.
Optional Add-ons
|
Model |
Description |
|---|---|
|
FPR4K-NM-8X10G |
8-port 10-Gbps SFP+ network module |
|
FPR4K-NM-4X40G |
4-port 40-Gbps QSFP+ network module |
|
FPR4K-NM-2X100G |
2-port 100-Gbps single-wide network module |
|
FPR4K-NM-8X1G-F |
8-port 1-Gbps copper hardware bypass network module |
|
FPR4K-NM-6X1SX-F |
6-port 1-Gbps SX fiber hardware bypass network module |
|
FPR4K-NM-6X10SR-F |
6-port 10-Gbps SR hardware bypass network module |
|
FPR4K-NM-6X10LR-F |
6-port 10-Gbps LR hardware bypass network module |
|
FPR4K-NM-2X40G-F |
2-port 40-Gbps SR hardware bypass network module |
|
FPR4K-PWR-AC-1100 |
1100-W AC power supply module |
|
FPR4K-PWR-DC-950 |
950-W DC power supply module |
|
FPR4K-SSD800 |
800-GB SSD for Firepower 4125 and 4145 |
|
FPR4K-S-FAN |
Firepower 4100 fan module |
|
FPR4K-RACK-MNT |
Rack-mount kit |
|
FPR4K-CBL-MGMT |
Cable management brackets |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR4125-ASA-K9 | Product type | Cisco Firepower 4125 ASA appliance |
| Firewall model | FPR-4125 | Security software role | Cisco Secure Firewall ASA |
| Rack units | 1RU | Memory | 192 GB |
| Storage | 800 GB | Dimensions | 1.75 x 16.89 x 29.7 in. (4.4 x 42.9 x 75.4 cm) |
| Weight | 17.87 kg (39.4 lb) with 2 power supplies, 2 network modules, and 6 fans | On-chassis data ports | 8 x 1/10 Gigabit Ethernet SFP+ |
| Network module bays | 2 | Maximum interface expansion | Up to 4 x 100GE QSFP28, 24 x 10GE SFP+, 8 x 40GE QSFP+, or 24 x 1GE ports with network modules and fixed ports |
| Management port | 1 Gigabit Ethernet SFP port | Management optics | Supports 1Gbps fiber or copper optical modules |
| Serial port | 1 x RJ-45 console | USB port | 1 x USB 2.0 |
| Airflow | Front to rear | Stateful inspection firewall throughput | 80 Gbps |
| Multiprotocol firewall throughput | 45 Gbps | Concurrent firewall connections | 25 million |
| New connections per second | 1.1 million | Firewall latency | 3.5 microseconds with UDP 64B test traffic |
| IPsec VPN throughput | 19 Gbps | Maximum VPN peers | 20000 |
| Security contexts | 10 included; 250 maximum | High availability | Active/active or active/standby |
| Clustering | Up to 16 appliances | Centralized management | Cisco Security Manager or Cisco Defense Orchestrator |
| Local management | Adaptive Security Device Manager | Minimum 100G module software | FPR4K-NM-2X100G first supported in FTD 7.2 and ASA 9.18 |
| 100G module FXOS support | FPR4K-NM-2X100G supported on Firepower 4100 series with FXOS 2.13 and later | Power supply configuration | Dual 1100W AC |
| Power redundancy | 1+1 | AC input voltage | 100 to 240V AC |
| AC maximum output power | 1100W | DC input voltage | -40V to -60VDC |
| DC maximum output power | 950W | Fan modules | 6 hot-swappable fans |
| Fan redundancy | 5+1 | Mounting | 4-post EIA-310-D rack mount rails included |
| NEBS operation | Supported on FPR-4125 platform | Operating temperature | 32 to 104F (0 to 40C) or NEBS operation profile for FPR-4125 |
| Operating humidity | 5 to 95% noncondensing | Operating altitude | 10000 ft maximum; 13000 ft maximum under FPR-4125 NEBS operation |
| Noise | 63 dBA typical; 74 dBA maximum | Supported SSD | FPR4K-SSD800 for Firepower 4125 and 4145 |
| Supported power cord rule | Only approved power cords or jumper power cords provided with the security appliance are supported |
Get More Information
Need pricing, stock, or shipping details for the FPR4125-ASA-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email [email protected] for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
Which FXOS release does FPR4K-NM-2X100G need in FPR4125-ASA-K9?
-
Which slots take network modules in FPR4125-ASA-K9, and how are empty slots covered?
-
What is the maximum VLAN count on FPR4125-ASA-K9?
-
How deep and how heavy is FPR4125-ASA-K9 with two power supplies and two network modules?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
Our receiving inspection found zero defects. Clean product.
Reached out about a future order — they remembered us and made the new quote easy. Shipping took a couple extra days, but product itself is perfect.
We got premium product without the premium pricing markup.