FPR4145-NGFW-K9 – 80G NGFW Firewall – 53G NGFW – 384GB Memory
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR4145-NGFW-K9 Description
The FPR4145-NGFW-K9 is a Cisco Secure Firewall 4100 Series 1RU Threat Defense appliance for data center and high-capacity network edge deployments. It delivers 53 Gbps of FW + AVC + IPS throughput and 24 Gbps of IPsec VPN throughput, with 8 x 1/10G SFP+ data ports, two network module bays, 20000 VPN peers and 384 GB of memory. The appliance runs Threat Defense only and is managed from Management Center or Cisco Defense Orchestrator.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR4145-NGFW-K9 |
|
Product type |
Cisco Firepower 4145 NGFW appliance |
|
Firewall model |
FPR-4145 |
|
Security software role |
Cisco Secure Firewall Threat Defense / NGFW |
|
Form factor |
1RU |
|
Memory |
384 GB |
|
On-chassis data ports |
8 x 1/10 Gigabit Ethernet SFP+ |
|
Firewall performance summary |
80 Gbps |
|
NGFW performance summary |
53 Gbps |
|
IPS performance summary |
55 Gbps |
|
FW + AVC + IPS throughput |
53 Gbps |
|
IPsec VPN throughput |
24 Gbps |
|
Power supply configuration |
Dual 1100W AC |
Product Performance
Key Features
FW + AVC and FW + AVC + IPS both run at 53 Gbps, and NGIPS throughput reaches 55 Gbps against an 80 Gbps firewall-only summary figure. That 53 Gbps is the number to size inspected traffic against.
The 4145 carries the largest memory in the 4112, 4115, 4125 and 4145 group, which supports its higher session and connection tables.
The appliance holds 30 million concurrent sessions with AVC and sets up 365K new connections per second with AVC. TLS hardware decryption runs at 10 Gbps.
Eight 1/10G SFP+ ports are fixed on the chassis, and two bays take 1G, 10G, 40G or 100G network modules, including hardware-bypass types, for up to 4 x 100GE QSFP28 in total. The 2-port 100G module needs Threat Defense 7.3.1 or later.
Two 1100W AC supplies ship by default on 100 to 240V AC input, and 950W DC supplies are available for DC-powered sites. Either supply carries the load if the other fails.
Threat Defense runs Active/Standby high availability and clusters up to 16 appliances or instances, all managed through Management Center or Cisco Defense Orchestrator. VPN capacity is 20000 peers with 24 Gbps of IPsec throughput.
Application Scenarios
A 1RU Threat Defense firewall at the data center boundary inspects north-south traffic from 10G server and core uplinks on the eight fixed SFP+ ports, holding 53 Gbps with FW + AVC + IPS enabled.
Headquarters and large campus internet edges use the 30 million concurrent sessions with AVC and 365K new connections per second to carry user traffic, with 24 Gbps of IPsec VPN throughput for site-to-site and remote-access tunnels.
Teams that split one security platform across business units run Multi-Instance Threat Defense on the appliance, or cluster up to 16 appliances or instances under Management Center for added capacity.
Product Comparison
|
Parameter |
FPR4145-NGFW-K9 | ||
|---|---|---|---|
|
Throughput: FW + AVC + IPS |
53 Gbps |
45 Gbps |
33 Gbps |
|
Maximum concurrent sessions with AVC |
30 million |
25 million |
15 million |
|
IPsec VPN throughput |
24 Gbps |
19 Gbps |
12.5 Gbps |
|
Maximum VPN peers |
20000 |
20000 |
15000 |
|
On-chassis interfaces |
8 x 1/10G SFP+ |
8 x 1/10G SFP+ |
8 x 1/10G SFP+ |
|
Network module bays |
2 |
2 |
2 |
|
Memory |
384 GB |
192 GB |
192 GB |
|
Storage |
800 GB |
800 GB |
400 GB |
|
Power supply configuration |
Dual 1100W AC |
Dual 1100W AC |
Single 1100W AC; dual optional; single or dual 950W DC optional |
FPR4145-NGFW-K9 is the largest of the three Threat Defense appliances in this group: it delivers 53 Gbps of FW + AVC + IPS throughput on 384 GB of memory, against 45 Gbps on 192 GB for FPR4125-NGFW-K9 and 33 Gbps on 192 GB for FPR4115-NGFW-K9. Designs that need more than 45 Gbps of inspected traffic, 30 million concurrent sessions with AVC or 24 Gbps of IPsec VPN throughput need FPR4145-NGFW-K9, while FPR4125-NGFW-K9 covers up to 25 million sessions and 19 Gbps of IPsec. Sites that stay under 33 Gbps and 15 million sessions can order FPR4115-NGFW-K9, which has 400 GB of storage and a single 1100W AC supply by default, with a second supply or 950W DC supplies optional, where the other two models have 800 GB and dual 1100W AC.
Optional Add-ons
|
Model |
Description |
|---|---|
|
FPR4K-NM-8X10G |
8-port 10-Gbps SFP+ network module |
|
FPR4K-NM-4X40G |
4-port 40-Gbps QSFP+ network module |
|
FPR4K-NM-2X100G |
2-port 100-Gbps single-wide network module |
|
FPR4K-NM-8X1G-F |
8-port 1-Gbps copper hardware bypass network module |
|
FPR4K-NM-6X1SX-F |
6-port 1-Gbps SX fiber hardware bypass network module |
|
FPR4K-NM-6X10SR-F |
6-port 10-Gbps SR hardware bypass network module |
|
FPR4K-NM-6X10LR-F |
6-port 10-Gbps LR hardware bypass network module |
|
FPR4K-NM-2X40G-F |
2-port 40-Gbps SR hardware bypass network module |
|
FPR4K-PWR-AC-1100 |
1100-W AC power supply module |
|
FPR4K-PWR-DC-950 |
950-W DC power supply module |
|
FPR4K-SSD800 |
800-GB SSD for Firepower 4125 and 4145 |
|
FPR4K-S-FAN |
Firepower 4100 fan module |
|
FPR4K-RACK-MNT |
Rack-mount kit |
|
FPR4K-CBL-MGMT |
Cable management brackets |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR4145-NGFW-K9 | Product type | Cisco Firepower 4145 NGFW appliance |
| Firewall model | FPR-4145 | Security software role | Cisco Secure Firewall Threat Defense / NGFW |
| Rack units | 1RU | Memory | 384 GB |
| Storage | 800 GB | Dimensions | 1.75 x 16.89 x 29.7 in. (4.4 x 42.9 x 75.4 cm) |
| Weight | 17.87 kg (39.4 lb) with 2 power supplies, 2 network modules, and 6 fans | On-chassis data ports | 8 x 1/10 Gigabit Ethernet SFP+ |
| Network module bays | 2 | Maximum interface expansion | Up to 4 x 100GE QSFP28, 24 x 10GE SFP+, 8 x 40GE QSFP+, or 24 x 1GE ports with network modules and fixed ports |
| Management port | 1 Gigabit Ethernet SFP port | Management optics | Supports 1Gbps fiber or copper optical modules |
| Serial port | 1 x RJ-45 console | USB port | 1 x USB 2.0 |
| Airflow | Front to rear | Firewall performance summary | 80 Gbps |
| NGFW performance summary | 53 Gbps | IPS performance summary | 55 Gbps |
| FW + AVC throughput | 53 Gbps | FW + AVC + IPS throughput | 53 Gbps |
| NGIPS throughput | 55 Gbps | Maximum concurrent sessions with AVC | 30 million |
| New connections per second with AVC | 365K | TLS hardware decryption throughput | 10 Gbps |
| IPsec VPN throughput | 24 Gbps | Maximum VPN peers | 20000 |
| Multi-Instance capable | Yes | High availability | Active/Standby with Threat Defense HA configuration |
| Clustering | Up to 16 appliances or instances with Threat Defense clustering | Centralized management | Management Center or Cisco Defense Orchestrator |
| Trust anchor technologies | Included on Cisco Secure Firewall 4100 Series platforms | Minimum 100G module software | FPR4K-NM-2X100G first supported in Threat Defense 7.3.1 and ASA 9.18.1 |
| Supported 100G module | FPR4K-NM-2X100G 2-port 100-Gbps single-wide network module | Power supply configuration | Dual 1100W AC |
| Power redundancy | 1+1 | AC input voltage | 100 to 240V AC |
| AC maximum output power | 1100W | DC input voltage | -40V to -60VDC |
| DC maximum output power | 950W | Fan modules | 6 hot-swappable fans |
| Mounting | 4-post EIA-310-D rack mount rails included | Operating temperature | 32 to 104F (0 to 40C) at sea level |
| Operating humidity | 5 to 95% noncondensing | Operating altitude | 10000 ft maximum |
| Noise | 63 dBA typical; 74 dBA maximum | Supported SSD | FPR4K-SSD800 for Firepower 4125 and 4145 |
| Power cord rule | Appropriate regional power cord selection is required when an optional cord is not ordered with the system |
Get More Information
Need pricing, stock, or shipping details for the FPR4145-NGFW-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email [email protected] for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
Does FPR4145-NGFW-K9 support RAID on its two SSD slots?
-
What software does the FPR4K-NM-2X100G module need in FPR4145-NGFW-K9?
-
Which FXOS release do the hardware bypass modules need in FPR4145-NGFW-K9?
-
What fills an empty network module bay in FPR4145-NGFW-K9?
-
Is there a bundle PID that includes FPR4145-NGFW-K9?
-
What current does each AC supply in FPR4145-NGFW-K9 draw?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:












Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
When I asked complex questions, they brought in the right person to answer.
Followed up with a thank-you when our project went live. Received a genuine response.
Tried several resellers before settling on Layer23. Best combination of price and reliability.