FPR4125-NGFW-K9 – 80G NGFW Firewall – 45G NGFW – 800GB SSD
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR4125-NGFW-K9 Description
The FPR4125-NGFW-K9 is a Cisco Secure Firewall 4100 Series 1RU Threat Defense firewall appliance for data center and service provider edge security. The appliance delivers 45 Gbps of FW + AVC + IPS throughput, 25 million concurrent sessions with AVC and 19 Gbps of IPsec VPN throughput, with eight fixed SFP+ ports and two network module bays. The appliance runs Threat Defense rather than ASA software, and the FPR-4125 is the only 4100 model with NEBS operating conditions.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR4125-NGFW-K9 |
|
Product type |
Cisco Firepower 4125 NGFW appliance |
|
Firewall model |
FPR-4125 |
|
Security software role |
Cisco Secure Firewall Threat Defense / NGFW |
|
Form factor |
1RU |
|
Memory |
192 GB |
|
On-chassis data ports |
8 x 1/10 Gigabit Ethernet SFP+ |
|
Firewall performance summary |
80 Gbps |
|
FW + AVC throughput |
45 Gbps |
|
FW + AVC + IPS throughput |
45 Gbps |
|
IPsec VPN throughput |
19 Gbps |
|
Default power supply |
Two FPR4K-PWR-AC-1100 1100W AC supplies |
|
Fan modules |
6 hot-swappable fans |
Product Performance
Key Features
The appliance handles 45 Gbps for both FW + AVC and FW + AVC + IPS on the Threat Defense image, with TLS hardware decryption at 8.5 Gbps.
Maximum concurrent sessions with AVC reach 25 million, against 15 million on the 4115, and new connections per second with AVC reach 269K.
The 4125 is the only 4100 model with NEBS operating conditions. Long-term operation is 0 to 45 °C up to 6,000 ft and 0 to 35 °C from 6,000 to 13,000 ft.
Two 1100W AC supplies are installed in the chassis on 100 to 240 VAC input, giving 1+1 redundancy without adding a second module.
Eight SFP+ data ports sit on the supervisor, and the two network module bays take 1G, 10G, 40G and 100G modules or hardware bypass modules, up to 4 x 100G in total.
The 800 GB SSD in slot 1 hosts the logical device instance, and the 192 GB of memory matches the 4115. Slot 2 accepts only the optional MSP, and RAID is not supported.
Application Scenarios
A telecom central office or other controlled-environment site can use the appliance because the FPR-4125 is the only 4100 model with NEBS operating conditions, which cover 0 to 45 °C long term up to 6,000 ft.
A large data center perimeter can run Threat Defense on the appliance for up to 25 million concurrent sessions with AVC and 269K new connections per second, with SFP+ ports on the chassis and 100G modules for uplinks.
A headquarters or service provider site that terminates many remote tunnels can aggregate them on the appliance, which supports 19 Gbps of IPsec throughput and 20,000 VPN peers.
Product Comparison
|
Parameter |
FPR4125-NGFW-K9 | ||
|---|---|---|---|
|
Throughput: FW + AVC |
45 Gbps |
33 Gbps |
53 Gbps |
|
Throughput: NGIPS |
45 Gbps |
33 Gbps |
55 Gbps |
|
Maximum concurrent sessions |
25 million |
15 million |
30 million |
|
Maximum new connections per second |
269K |
210K |
365K |
|
Maximum VPN peers |
20,000 |
15,000 |
20,000 |
|
Memory |
192 GB |
192 GB |
384 GB |
|
Storage |
800 GB |
400 GB |
800 GB |
|
Power supply configuration |
Dual 1100W AC |
Single 1100W AC; dual optional; single or dual 950W DC optional |
Dual 1100W AC |
|
NEBS operation |
Certified |
Not certified |
Not certified |
FPR4125-NGFW-K9 sits between two siblings: against FPR4115-NGFW-K9 it lists 45G NGFW performance instead of 33G, 25 million AVC sessions instead of 15 million, 800 GB storage instead of 400 GB, and dual 1100W AC supplies by default. It is also the only model of the three listed as the FPR-4125 NEBS model. A site with smaller session and VPN needs, up to 15000 peers, can use FPR4115-NGFW-K9, which has a single 1100W AC supply with a second supply optional. A site that needs 384 GB memory, 53G NGFW performance and 365K new connections per second moves to FPR4145-NGFW-K9.
Optional Add-ons
|
Model |
Description |
|---|---|
|
FPR4K-NM-8X10G |
8-port 10-Gbps SFP+ network module |
|
FPR4K-NM-4X40G |
4-port 40-Gbps QSFP+ network module |
|
FPR4K-NM-2X100G |
2-port 100-Gbps single-wide network module |
|
FPR4K-NM-8X1G-F |
8-port 1-Gbps copper hardware bypass network module |
|
FPR4K-NM-6X1SX-F |
6-port 1-Gbps SX fiber hardware bypass network module |
|
FPR4K-NM-6X10SR-F |
6-port 10-Gbps SR hardware bypass network module |
|
FPR4K-NM-6X10LR-F |
6-port 10-Gbps LR hardware bypass network module |
|
FPR4K-NM-2X40G-F |
2-port 40-Gbps SR hardware bypass network module |
|
FPR4K-PWR-AC-1100 |
1100-W AC power supply module |
|
FPR4K-PWR-DC-950 |
950-W DC power supply module |
|
FPR4K-SSD800 |
800-GB SSD for Firepower 4125 and 4145 |
|
FPR4K-S-FAN |
Firepower 4100 fan module |
|
FPR4K-RACK-MNT |
Rack-mount kit |
|
FPR4K-CBL-MGMT |
Cable management brackets |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR4125-NGFW-K9 | Product type | Cisco Firepower 4125 NGFW appliance |
| Firewall model | FPR-4125 | Security software role | Cisco Secure Firewall Threat Defense / NGFW |
| Rack units | 1RU | Memory | 192 GB |
| Storage | 800 GB | Dimensions | 1.75 x 16.89 x 29.7 in. (4.4 x 42.9 x 75.4 cm) |
| Weight | 17.87 kg (39.4 lb) with 2 power supplies, 2 network modules, and 6 fans | On-chassis data ports | 8 x 1/10 Gigabit Ethernet SFP+ |
| Network module bays | 2 | Maximum interface expansion | Up to 4 x 100GE QSFP28, 24 x 10GE SFP+, 8 x 40GE QSFP+, or 24 x 1GE ports with network modules and fixed ports |
| Management port | 1 Gigabit Ethernet SFP port | Management optics | Supports 1Gbps fiber or copper optical modules |
| Serial port | 1 x RJ-45 console | USB port | 1 x USB 2.0 |
| Airflow | Front to rear | Firewall performance summary | 80 Gbps |
| FW + AVC throughput | 45 Gbps | FW + AVC + IPS throughput | 45 Gbps |
| NGIPS throughput | 45 Gbps | Maximum concurrent sessions with AVC | 25 million |
| New connections per second with AVC | 269K | TLS throughput | 8.5 Gbps |
| IPsec VPN throughput | 19 Gbps | Maximum VPN peers | 20000 |
| Multi-Instance capable | Yes | High availability | Active/Standby with Threat Defense HA configuration |
| Clustering | Up to 16 appliances with Threat Defense clustering | Centralized management | Management Center or Cisco Defense Orchestrator |
| Fixed port transceiver support | 1G and 10G SFP/SFP+ options listed for Secure Firewall 4100 fixed ports | Power supply configuration | Dual 1100W AC |
| Power redundancy | 1+1 | AC input voltage | 100 to 240V AC |
| AC maximum output power | 1100W | DC input voltage | -40V to -60VDC |
| DC maximum output power | 950W | Fan modules | 6 hot-swappable fans |
| Fan redundancy | 5+1 | Mounting | 4-post EIA-310-D rack mount rails included |
| NEBS operation | Supported on FPR-4125 platform | Operating temperature | 32 to 104F (0 to 40C) or NEBS operation profile for FPR-4125 |
| Operating humidity | 5 to 95% noncondensing | Operating altitude | 10000 ft maximum; 13000 ft maximum under FPR-4125 NEBS operation |
| Noise | 63 dBA typical; 74 dBA maximum | Supported SSD | FPR4K-SSD800 for Firepower 4125 and 4145 |
| Supported power cord rule | Only approved power cords or jumper power cords provided with the security appliance are supported |
Get More Information
Need pricing, stock, or shipping details for the FPR4125-NGFW-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email [email protected] for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
Which FXOS release does FPR4K-NM-2X100G need in FPR4125-NGFW-K9?
-
Which slots take network modules in FPR4125-NGFW-K9, and how are empty slots covered?
-
How do I order a high-availability pair for FPR4125-NGFW-K9?
-
What AC input does the 1100W supply in FPR4125-NGFW-K9 need?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
The manufacturer’s QR code scanned correctly to the official registry.
Trust your gut and try Layer23. We did and it worked out.
Best price among the vendors we evaluated. Same product everywhere.