FPR4225-NGFW-K9 – 80G NGFW – 8x25G SFP28 Data + 2x25G SFP28 Mgmt – 4200 – NGFW Firewall
Shop Expert-Recommended Accessories for the FPR4225-NGFW-K9
Explore optics, stacking accessories, modules, and power supplies—all verified by our engineers for use with this model.-
SFP-10G-SR-S
10GBASE-SR SFP+ - S-Class - 400m OM4 MMFOriginal price was: $853.95.$52.00Current price is: $52.00. -
SFP-10G-LR-S
10GBASE-LR SFP+ - S-Class - 10km SMFOriginal price was: $2,439.88.$150.00Current price is: $150.00. -
SFP-25G-SR-S
25GBASE-SR SFP28 - 850nm MMF - 100m OM4Original price was: $1,213.85.$258.00Current price is: $258.00. -
SFP-10/25G-CSR-S
10/25GBASE-CSR SFP28 - 850nm MMF - 300 m OM3 / 400 m OM4 - 0 to 70°COriginal price was: $1,335.84.$95.30Current price is: $95.30. -
SFP-10/25G-LR-S
10/25GBASE-LR SFP28 - 10 km G.652 SMF - 0 to 70°C Commercial TemperatureOriginal price was: $2,787.19.$431.00Current price is: $431.00. -
GLC-LH-SMD
1000BASE-LX/LH SFP - 10km SMF / 550m MMF - DOMOriginal price was: $1,260.58.$95.80Current price is: $95.80. -
GLC-TE
1000BASE-T SFP - RJ-45 Cat5 Copper - 100m ReachOriginal price was: $570.10.$70.00Current price is: $70.00. -
GLC-SX-MMD
1000BASE-SX SFP - MMF 850nm - DOMOriginal price was: $633.46.$59.00Current price is: $59.00.
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR4225-NGFW-K9 Description
The FPR4225-NGFW-K9 is a Cisco Secure Firewall 4200 Series 1RU next-generation firewall that runs Threat Defense at internet edge and data center perimeters. The appliance has eight fixed 1/10/25G SFP28 data ports, two 1/10/25G SFP28 management ports, two network module slots, 512 GB of memory and 80 Gbps of FW + AVC + IPS throughput. Threat Defense on the 4200 Series is managed from Firewall Management Center or Cisco Defense Orchestrator, because device manager is not supported.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR4225-NGFW-K9 |
|
Product type |
Cisco Secure Firewall 4225 NGFW appliance |
|
Firewall model |
Secure Firewall 4225 |
|
Security software role |
Cisco Secure Firewall Threat Defense / NGFW |
|
Minimum Threat Defense release |
7.4.0 introduction for Secure Firewall 4215, 4225, and 4245 |
|
Management model |
Firewall Management Center or Cisco Defense Orchestrator |
|
Form factor |
1RU |
|
DRAM |
512 GB |
|
Fixed data ports |
8 x 1/10/25G SFP28 fixed fiber ports |
|
Management port |
2 x 1/10/25G SFP28 ports |
|
Network module slots |
2 hot-swappable slots |
|
FW + AVC + IPS throughput |
80 Gbps |
|
IPsec VPN throughput |
80 Gbps |
Product Performance
Key Features
FW + AVC + IPS runs at 80 Gbps, with 30 million concurrent sessions and 600K new connections per second under AVC. That places the firewall between the 65 Gbps and 140 Gbps models in the 4200 Series.
Eight SFP28 ports accept 1G, 10G or 25G optics, so the base appliance connects to mixed-speed switching without a module. Two further SFP28 ports are reserved for management.
Modules add 1G, 10G, 25G, 40G, 100G, 200G or 400G ports, as well as hardware-bypass options. Replacing a module with the same type needs no reboot.
Active/standby pairs and clusters of up to 16 chassis scale throughput or add redundancy. Multi-instance mode splits one chassis into as many as 15 logical firewalls.
Hardware decryption handles 30 Gbps of TLS traffic. Inspecting encrypted flows therefore does not draw down the general inspection budget.
Dual 1900W supplies run 1+1 and accept 100 to 120 VAC or 200 to 240 VAC. A 4225 draws at most 870 W, so it fits low-line racks that the 4245 cannot use.
Application Scenarios
At the internet edge of a large campus, the firewall runs AVC and IPS over 80 Gbps of inspected traffic and terminates site-to-site and remote-access VPN from up to 25000 peers.
A data center perimeter can land 25G uplinks on the eight fixed SFP28 ports, and the two network module slots add 40G or 100G links when core connections outgrow them.
On a plant or campus segment that must keep passing traffic through a power loss, a fail-to-wire network module in one slot lets the firewall sit inline without becoming a single point of failure.
Product Comparison
|
Parameter |
FPR4225-NGFW-K9 | |||
|---|---|---|---|---|
|
Form factor |
1RU |
1RU |
1RU |
1RU |
|
DRAM |
512 GB |
256 GB |
1 TB |
512 GB |
|
Fixed data ports |
8 x 1/10/25G SFP28 |
8 x 1/10/25G SFP28 |
8 x 1/10/25G SFP28 |
8 x 1/10/25G SFP28 |
|
Throughput: FW + AVC + IPS |
80 Gbps |
65 Gbps |
140 Gbps |
Not applicable |
|
Maximum concurrent sessions, with AVC |
30 million |
15 million |
60 million |
Not applicable |
|
Maximum new connections per second, with AVC |
600K |
350K |
800K |
Not applicable |
|
IPsec VPN throughput |
80 Gbps |
45 Gbps |
140 Gbps |
60 Gbps |
|
Maximum VPN peers |
25000 |
20000 |
30000 |
25000 |
|
Power supplies |
Two 1900W AC |
One 1900W AC, second optional |
Two 1900W AC |
Two 1900W AC |
|
Management model |
Firewall Management Center or Cisco Defense Orchestrator |
Firewall Management Center or Cisco Defense Orchestrator |
Firewall Management Center or Cisco Defense Orchestrator |
Cisco Security Manager, ASDM, or Cisco Defense Orchestrator |
FPR4225-NGFW-K9 runs Threat Defense at 80 Gbps FW + AVC + IPS with 512 GB of memory, 30 million AVC sessions and 600K new connections per second, while FPR4215-NGFW-K9 on the same 1RU layout delivers 65 Gbps, 256 GB, 15 million sessions and 350K connections, and ships with one 1900W AC supply with a second optional for redundancy. Designs that need 140 Gbps, 60 million sessions or 140 Gbps of IPsec VPN move to FPR4245-NGFW-K9 with 1 TB of memory. Sites that run Cisco Secure ASA instead of Threat Defense use FPR4225-ASA-K9, which has the same 512 GB and 25000 VPN peers but 60 Gbps of IPsec under the ASA table, and is managed through Cisco Security Manager, ASDM or Cisco Defense Orchestrator.
Optional Add-ons
|
Model |
Description |
|---|---|
|
FPR4K-XNM-8X10G |
8-port 1/10-Gbps SFP+ network module |
|
FPR4K-XNM-8X25G |
8-port 1/10/25-Gbps network module |
|
FPR4K-XNM-4X40G |
4-port 40-Gbps QSFP/QSFP+ network module |
|
FPR4K-XNM-2X100G |
2-port 100-Gbps QSFP56/QSFP28/QSFP network module |
|
FPR4K-XNM-4X200G |
4-port 40/100/200-Gbps QSFP28/QSFP network module |
|
FPR4K-XNM-2X400G |
2-port 200/400-Gbps QSFP-DD network module |
|
FPR4K-XNM-8X1GF |
8-port 1000Base-T hardware bypass network module |
|
FPR4K-XNM-6X10SRF |
6-port 10-Gbps SFP SR multimode hardware bypass network module |
|
FPR4K-XNM-6X10LRF |
6-port 10-Gbps SFP LR single-mode hardware bypass network module |
|
FPR4K-XNM-6X25SRF |
6-port 25-Gbps SFP SR multimode hardware bypass network module |
|
FPR4K-XNM-6X25LRF |
6-port 25-Gbps SFP LR single-mode hardware bypass network module |
|
FPR4200-PWR-AC |
Cisco Secure Firewall 4200 Series AC power supply |
|
FPR4200-SSD1800 |
Cisco Secure Firewall 4200 Series 1.8 TB SSD |
|
FPR4200-FAN |
Dual fan module |
|
FPR4200-SLD-RAILS |
Slide rail kit |
|
FPR4200-CBL-MGMT |
Cable management brackets |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR4225-NGFW-K9 | Product type | Cisco Secure Firewall 4225 NGFW appliance |
| Firewall model | Secure Firewall 4225 | Security software role | Cisco Secure Firewall Threat Defense / NGFW |
| Minimum Threat Defense release | 7.4.0 introduction for Secure Firewall 4215, 4225, and 4245 | Management model | Firewall Management Center or Cisco Defense Orchestrator |
| Device manager support | Not supported for Secure Firewall 4200 Threat Defense | Rack units | 1RU |
| Mounting | 4-post EIA-310-D rack with slide rails | Airflow | Front to rear; I/O side to non-I/O side |
| DRAM | 512 GB | SSD storage | Two 1.8 TB NVMe SSD slots; ships with two 1.8 TB SSDs in RAID1 |
| Fixed data ports | 8 x 1/10/25-Gbps SFP28 fixed fiber ports | Fixed port names | Ethernet 1/1 through Ethernet 1/8 |
| Management port | 2 x 1/10/25-Gbps SFP28 ports | Threat Defense management port names | Management 0 and Management 1 |
| Network module slots | 2 hot-swappable slots | Supported module speeds | 1G 10G 25G 40G 100G 200G and 400G module options |
| Console port | 1 x RJ-45 serial port | FW + AVC throughput | 80 Gbps |
| FW + AVC + IPS throughput | 80 Gbps | NGIPS throughput | 80 Gbps |
| Maximum concurrent sessions with AVC | 30 million | New connections per second with AVC | 600K |
| TLS hardware decryption throughput | 30 Gbps | IPsec VPN throughput | 80 Gbps |
| Maximum VPN peers | 25000 | Multi-Instance count | 15 |
| High availability | Active/active with clustering and active/standby | Clustering | Up to 16 chassis |
| AVC support | Standard; supports more than 4000 applications | Cisco Secure IPS | Available |
| Cisco malware Defense | Available | URL filtering categories | More than 120 |
| URL filtering database | More than 280 million categorized URLs | Power supplies | Dual 1900W for 220 AC or 1200W for 110 AC |
| Power redundancy | 1+1 | AC input voltage | 100 to 120 VAC low line or 200 to 240 VAC high line |
| AC input frequency | 50/60 Hz nominal | AC maximum input power | 870 W for 4225 |
| AC efficiency | More than 90 percent Platinum | Fan modules | Three dual fan modules; hot-swappable |
| Weight | 19.5 kg (43 lb) with 2 power supplies, 2 network modules, and 3 fan modules | Dimensions | 1.73 x 16.89 x 32.0 in. (4.39 x 42.9 x 81.28 cm) |
| Operating temperature | 32 to 104F (0 to 40C) | Operating humidity | 5 to 95% noncondensing |
| Operating altitude | 10000 ft maximum | Sound pressure | <=78 dBA typical; <=84 dBA maximum |
| Sound power | <=87 dB typical; <=92 dB maximum |
Get More Information
Need pricing, stock, or shipping details for the FPR4225-NGFW-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email [email protected] for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
What console settings does FPR4225-NGFW-K9 use?
-
What USB media does FPR4225-NGFW-K9 accept?
-
Which cable types connect to the management ports on FPR4225-NGFW-K9?
-
Where is the power switch on FPR4225-NGFW-K9 and what does OFF do?
-
Does swapping a network module in FPR4225-NGFW-K9 need a reboot?
-
How much does FPR4225-NGFW-K9 weigh empty and fully populated?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
Verified the serial number — came back clean. Genuine product.
Layer23 doesn’t cut corners on shipping protection.
Layer23 products consistently install smoothly in our environment.