FPR4225-ASA-K9 – 95G ASA – 8x25G SFP28 Data + 2x25G SFP28 Mgmt – 4200 – ASA Firewall
Shop Expert-Recommended Accessories for the FPR4225-ASA-K9
Explore optics, stacking accessories, modules, and power supplies—all verified by our engineers for use with this model.-
SFP-10G-SR-S
10GBASE-SR SFP+ - S-Class - 400m OM4 MMFOriginal price was: $853.95.$52.00Current price is: $52.00. -
SFP-10G-LR-S
10GBASE-LR SFP+ - S-Class - 10km SMFOriginal price was: $2,439.88.$150.00Current price is: $150.00. -
SFP-25G-SR-S
25GBASE-SR SFP28 - 850nm MMF - 100m OM4Original price was: $1,213.85.$258.00Current price is: $258.00. -
SFP-10/25G-CSR-S
10/25GBASE-CSR SFP28 - 850nm MMF - 300 m OM3 / 400 m OM4 - 0 to 70°COriginal price was: $1,335.84.$95.30Current price is: $95.30. -
SFP-10/25G-LR-S
10/25GBASE-LR SFP28 - 10 km G.652 SMF - 0 to 70°C Commercial TemperatureOriginal price was: $2,787.19.$431.00Current price is: $431.00. -
GLC-LH-SMD
1000BASE-LX/LH SFP - 10km SMF / 550m MMF - DOMOriginal price was: $1,260.58.$95.80Current price is: $95.80. -
GLC-TE
1000BASE-T SFP - RJ-45 Cat5 Copper - 100m ReachOriginal price was: $570.10.$70.00Current price is: $70.00. -
GLC-SX-MMD
1000BASE-SX SFP - MMF 850nm - DOMOriginal price was: $633.46.$59.00Current price is: $59.00.
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR4225-ASA-K9 Description
The FPR4225-ASA-K9 is a Cisco Secure Firewall 4200 Series 1RU ASA firewall for edge, data center and VPN deployments. It provides 95 Gbps of stateful inspection firewall throughput, 85 Gbps of multiprotocol firewall throughput, 90 million concurrent firewall connections and 60 Gbps of IPsec VPN throughput, with 512 GB of system memory. Eight fixed 1/10/25G SFP28 data ports, two 1/10/25G SFP28 management ports and two hot-swappable network module slots make up the interface layout.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR4225-ASA-K9 |
|
Product type |
Cisco Secure Firewall 4225 ASA appliance |
|
Firewall model |
Secure Firewall 4225 |
|
Security software role |
Cisco Secure ASA |
|
Form factor |
1RU |
|
DRAM |
512 GB |
|
Fixed data ports |
8 x 1/10/25G SFP28 fixed fiber ports |
|
Management port |
2 x 1/10/25G SFP28 ports |
|
Network module slots |
2 hot-swappable slots |
|
Stateful inspection firewall throughput |
95 Gbps |
|
Multiprotocol firewall throughput |
85 Gbps |
|
Concurrent firewall connections |
90 million |
|
IPsec VPN throughput |
60 Gbps |
Product Performance
Key Features
Stateful inspection firewall throughput is 95 Gbps and multiprotocol firewall throughput is 85 Gbps. The gap to the 4215 ASA appliance is largest on multiprotocol traffic, at 85 Gbps against 65 Gbps.
The connection table holds 90 million concurrent firewall connections and sets up 1.7 million new connections per second, with 512 GB of system memory behind it.
IPsec VPN throughput is 60 Gbps with 25000 VPN peers, which suits a central site that terminates many branch and remote-access tunnels.
Eight 1/10/25G SFP28 data ports are fixed on the chassis. Two hot-swappable slots take network modules from 1G to 400G, and replacing a module with a different type needs a reboot.
Dual 1900W power supplies run at 220V AC, or 1200W each at 110V AC, in a 1+1 arrangement. Maximum AC input power is 870W.
Two security contexts are included and the platform scales to 250. High availability runs Active/Active or Active/Standby, and clustering supports 16 units.
Application Scenarios
Large enterprise internet edges that stay on Cisco Secure ASA use the 95 Gbps stateful inspection throughput and 90 million concurrent connections, with up to 250 security contexts for separate policy domains.
Data center boundaries start on the eight fixed SFP28 ports at 10G or 25G and add network modules in the two slots for 40G, 100G, 200G or 400G links as the interface plan grows.
Remote workforce and branch tunnels terminate on one appliance with 60 Gbps of IPsec VPN throughput and 25000 VPN peers, managed with ASDM or Cisco Security Manager.
Product Comparison
|
Parameter |
FPR4225-ASA-K9 | ||
|---|---|---|---|
|
Stateful inspection firewall throughput |
95 Gbps |
90 Gbps |
180 Gbps |
|
Multiprotocol firewall throughput |
85 Gbps |
65 Gbps |
100 Gbps |
|
Concurrent firewall connections |
90 million |
40 million |
180 million |
|
IPsec VPN throughput |
60 Gbps |
50 Gbps |
70 Gbps |
|
Maximum VPN peers |
25000 |
20000 |
30000 |
|
DRAM |
512 GB |
256 GB |
1 TB |
|
Fixed data ports |
8 x 1/10/25G SFP28 |
8 x 1/10/25G SFP28 |
8 x 1/10/25G SFP28 |
|
Network module slots |
2 |
2 |
2 |
|
AC maximum input power |
870W |
770W |
1380W |
FPR4225-ASA-K9 sits in the middle of the three ASA appliances here: it provides 512 GB of memory, 95 Gbps of stateful inspection, 85 Gbps of multiprotocol throughput, 90 million concurrent connections and 60 Gbps of IPsec VPN, against 256 GB, 90 Gbps, 65 Gbps, 40 million and 50 Gbps on FPR4215-ASA-K9. Sites that stay under 65 Gbps of multiprotocol throughput and 40 million connections can order FPR4215-ASA-K9, which also draws less AC input power at 770W against 870W. Designs that need 100 Gbps of multiprotocol throughput, 180 Gbps of stateful inspection, 180 million connections or 30000 VPN peers move to FPR4245-ASA-K9, which has 1 TB of memory and 1380W of maximum AC input.
Optional Add-ons
|
Model |
Description |
|---|---|
|
FPR4K-XNM-8X10G |
8-port 1/10-Gbps SFP+ network module |
|
FPR4K-XNM-8X25G |
8-port 1/10/25-Gbps SFP28 network module |
|
FPR4K-XNM-4X40G |
4-port 40-Gbps QSFP/QSFP+ network module |
|
FPR4K-XNM-2X100G |
2-port 100-Gbps QSFP56/QSFP28/QSFP network module |
|
FPR4K-XNM-4X200G |
4-port 40/100/200-Gbps QSFP28/QSFP network module |
|
FPR4K-XNM-2X400G |
2-port 200/400-Gbps QSFP-DD network module |
|
FPR4K-XNM-8X1GF |
8-port 1000Base-T hardware bypass network module |
|
FPR4K-XNM-6X10SRF |
6-port 10-Gbps SFP SR multimode hardware bypass network module |
|
FPR4K-XNM-6X10LRF |
6-port 10-Gbps SFP LR single-mode hardware bypass network module |
|
FPR4K-XNM-6X25SRF |
6-port 25-Gbps SFP SR multimode hardware bypass network module |
|
FPR4K-XNM-6X25LRF |
6-port 25-Gbps SFP LR single-mode hardware bypass network module |
|
FPR4200-PWR-AC |
1900-W AC power supply module |
|
FPR4200-SSD1800 |
1800 GB SSD |
|
FPR4200-FAN |
Dual fan module |
|
FPR4200-SLD-RAILS |
Slide rail kit |
|
FPR4200-CBL-MGMT |
Cable management brackets |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR4225-ASA-K9 | Product type | Cisco Secure Firewall 4225 ASA appliance |
| Firewall model | Secure Firewall 4225 | Security software role | Cisco Secure ASA |
| Rack units | 1RU | Mounting | 4-post EIA-310-D rack with slide rails |
| Airflow | Front to rear; I/O side to non-I/O side | DRAM | 512 GB |
| SSD storage | Two 1.8 TB SSDs | Fixed data ports | 8 x 1/10/25-Gbps SFP28 fixed fiber ports |
| Fixed port names | Ethernet 1/1 through Ethernet 1/8 | Management port | 2 x 1/10/25-Gbps SFP28 ports |
| ASA management port names | Management 1/1 and Management 1/2 | Network module slots | 2 hot-swappable slots |
| Supported module speeds | 1G 10G 25G 40G 100G 200G and 400G module options | Console port | 1 x RJ-45 serial port |
| USB port | 1 x USB 3.0 Type A port | Stateful inspection firewall throughput | 95 Gbps |
| Multiprotocol firewall throughput | 85 Gbps | Concurrent firewall connections | 90 million |
| New connections per second | 1.7 million | IPsec VPN throughput | 60 Gbps |
| Maximum VPN peers | 25000 | Security contexts | 2 included; 250 maximum |
| High availability | Active/active and active/standby | Clustering | 16 |
| ASA centralized management | Cisco Security Manager or Cisco Defense Orchestrator | Local management | Adaptive Security Device Manager |
| Network module replacement | Hot-swap supported for same module type; reboot required when replacing with a different supported module type | Power supplies | Dual 1900W for 220 AC or 1200W for 110 AC |
| Power redundancy | 1+1 | AC input voltage | 100 to 120 VAC low line or 200 to 240 VAC high line |
| AC input frequency | 50/60 Hz nominal | AC maximum input power | 870 W for 4225 |
| AC efficiency | More than 90 percent Platinum | Fan modules | Three dual fan modules; hot-swappable |
| Weight | 19.5 kg (43 lb) with 2 power supplies, 2 network modules, and 3 fan modules | Dimensions | 1.73 x 16.89 x 32.0 in. (4.39 x 42.9 x 81.28 cm) |
| Operating temperature | 32 to 104F (0 to 40C) | Operating humidity | 5 to 90% noncondensing |
| Operating altitude | 0 to 10000 ft (0 to 3048 m) | Sound pressure | <=78 dBA typical; <=84 dBA maximum |
| Sound power | <=87 dB typical; <=92 dB maximum |
Get More Information
Need pricing, stock, or shipping details for the FPR4225-ASA-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email [email protected] for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
What console settings does FPR4225-ASA-K9 use?
-
What USB media does FPR4225-ASA-K9 accept?
-
Which cable types connect to the management ports on FPR4225-ASA-K9?
-
Where is the power switch on FPR4225-ASA-K9 and what does OFF do?
-
Does swapping a network module in FPR4225-ASA-K9 need a reboot?
-
How much does FPR4225-ASA-K9 weigh empty and fully populated?
-
Which ASA release first supports FPR4225-ASA-K9?
-
How many TLS proxy sessions can FPR4225-ASA-K9 handle?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
Looked it up in the supplier database. Listed as a current production unit.
The after-purchase experience solidified our decision to make Layer23 a primary vendor. Shipping took a couple extra days, but product itself is perfect.
First-time buyers can order with full confidence. Layer23 is the real thing.