FPR4245-ASA-K9 – 180G ASA – 8x25G SFP28 Data + 2x25G SFP28 Mgmt – 4200 – ASA Firewall
Shop Expert-Recommended Accessories for the FPR4245-ASA-K9
Explore optics, stacking accessories, modules, and power supplies—all verified by our engineers for use with this model.-
SFP-10G-SR-S
10GBASE-SR SFP+ - S-Class - 400m OM4 MMFOriginal price was: $853.95.$52.00Current price is: $52.00. -
SFP-10G-LR-S
10GBASE-LR SFP+ - S-Class - 10km SMFOriginal price was: $2,439.88.$150.00Current price is: $150.00. -
SFP-25G-SR-S
25GBASE-SR SFP28 - 850nm MMF - 100m OM4Original price was: $1,213.85.$258.00Current price is: $258.00. -
SFP-10/25G-CSR-S
10/25GBASE-CSR SFP28 - 850nm MMF - 300 m OM3 / 400 m OM4 - 0 to 70°COriginal price was: $1,335.84.$95.30Current price is: $95.30. -
SFP-10/25G-LR-S
10/25GBASE-LR SFP28 - 10 km G.652 SMF - 0 to 70°C Commercial TemperatureOriginal price was: $2,787.19.$431.00Current price is: $431.00. -
GLC-LH-SMD
1000BASE-LX/LH SFP - 10km SMF / 550m MMF - DOMOriginal price was: $1,260.58.$95.80Current price is: $95.80. -
GLC-TE
1000BASE-T SFP - RJ-45 Cat5 Copper - 100m ReachOriginal price was: $570.10.$70.00Current price is: $70.00. -
GLC-SX-MMD
1000BASE-SX SFP - MMF 850nm - DOMOriginal price was: $633.46.$59.00Current price is: $59.00.
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR4245-ASA-K9 Description
The FPR4245-ASA-K9 is a Cisco Secure Firewall 4200 Series 1RU ASA firewall for large data center and enterprise edge perimeters. The appliance delivers 180 Gbps of stateful inspection throughput, 100 Gbps of multiprotocol firewall throughput, 180 million concurrent connections and 30000 VPN peers, with 1 TB of memory, eight fixed 1/10/25G SFP28 ports and two network module slots. The appliance runs Cisco Secure ASA software, so Threat Defense and Firewall Management Center are not part of its management model.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR4245-ASA-K9 |
|
Product type |
Cisco Secure Firewall 4245 ASA appliance |
|
Firewall model |
Secure Firewall 4245 |
|
Security software role |
Cisco Secure ASA |
|
Form factor |
1RU |
|
DRAM |
1 TB |
|
Fixed data ports |
8 x 1/10/25-Gbps SFP28 fixed fiber ports |
|
Management port |
2 x 1/10/25-Gbps SFP28 ports |
|
Network module slots |
2 hot-swappable slots |
|
Stateful inspection firewall throughput |
180 Gbps |
|
Multiprotocol firewall throughput |
100 Gbps |
|
IPsec VPN throughput |
70 Gbps |
|
Power input |
Dual 1900 W AC modules; 200 to 240 VAC high-line input for 4245 |
Product Performance
Key Features
ASA stateful inspection runs at 180 Gbps, with 100 Gbps measured for multiprotocol traffic. These are the highest ASA figures among the 4215, 4225 and 4245 chassis.
Connection scale reaches 180 million with 2.0 million new connections per second. Large NAT-heavy or session-dense edges stay within the table.
Two contexts are included and up to 250 are supported, so one chassis can serve several tenants or policy domains with separate rule sets.
The chassis carries 1 TB of memory and two 1.8 TB SSDs. Memory is double that of the 4225 ASA model.
Network module support depends on the ASA version, and 200G and 400G modules need later releases than 1G to 100G modules. The release plan should be settled before module speeds.
Dual 1900W modules run 1+1 on 200 to 240 VAC only, drawing up to 1380 W. Racks fed from 100 to 120 VAC circuits cannot power this chassis.
Application Scenarios
A data center edge that already runs Cisco Secure ASA policy can stay on that software model with 180 Gbps of stateful inspection and 180 million concurrent connections.
As the VPN headend for a distributed enterprise, the firewall terminates up to 30000 peers and carries 70 Gbps of IPsec VPN traffic.
A hosting provider or multi-division network can split the firewall into security contexts, with 2 included and up to 250 supported, and pair two chassis in an active/active or active/standby failover design.
Product Comparison
|
Parameter |
FPR4245-ASA-K9 | ||
|---|---|---|---|
|
DRAM |
1 TB |
512 GB |
1 TB |
|
Stateful inspection firewall throughput |
180 Gbps |
95 Gbps |
Not applicable |
|
Multiprotocol firewall throughput |
100 Gbps |
85 Gbps |
Not applicable |
|
Concurrent firewall connections |
180 million |
90 million |
Not applicable |
|
IPsec VPN throughput |
70 Gbps |
60 Gbps |
140 Gbps |
|
Maximum VPN peers |
30000 |
25000 |
30000 |
|
Management model |
Cisco Security Manager, Cisco Defense Orchestrator, or ASDM |
Cisco Security Manager, Cisco Defense Orchestrator, or ASDM |
Firewall Management Center or Cisco Defense Orchestrator |
|
AC input voltage |
200 to 240 VAC high line |
100 to 120 VAC or 200 to 240 VAC |
200 to 240 VAC high line |
|
AC maximum input power |
1380 W |
870 W |
1380 W |
FPR4245-ASA-K9 is the larger ASA chassis against FPR4225-ASA-K9: 1 TB against 512 GB of memory, 180 Gbps against 95 Gbps of stateful inspection throughput, 180 million against 90 million concurrent connections, and 30000 against 25000 VPN peers. FPR4245-ASA-K9 also takes 200 to 240 VAC high-line input only, with 1380 W maximum input power, while FPR4225-ASA-K9 accepts 100 to 120 VAC or 200 to 240 VAC at 870 W, so racks fed from low-line circuits stay on FPR4225-ASA-K9. Deployments that standardize on Firewall Management Center and Threat Defense instead of ASDM move to FPR4245-NGFW-K9, which has the same 1 TB memory and 30000 peers and reaches 140 Gbps of IPsec VPN against 70 Gbps under the ASA table.
Optional Add-ons
|
Model |
Description |
|---|---|
|
FPR4K-XNM-8X10G |
8-port 1/10-Gbps SFP+ network module |
|
FPR4K-XNM-8X25G |
8-port 1/10/25-Gbps SFP28 network module |
|
FPR4K-XNM-4X40G |
4-port 40-Gbps QSFP/QSFP+ network module |
|
FPR4K-XNM-2X100G |
2-port 100-Gbps QSFP28/QSFP network module |
|
FPR4K-XNM-4X200G |
4-port 40/100/200-Gbps QSFP28/QSFP network module |
|
FPR4K-XNM-2X400G |
2-port 200/400-Gbps QSFP-DD network module |
|
FPR4K-XNM-8X1GF |
8-port 1000Base-T hardware bypass network module |
|
FPR4K-XNM-6X10SRF |
6-port 10-Gbps SFP SR multimode hardware bypass network module |
|
FPR4K-XNM-6X10LRF |
6-port 10-Gbps SFP LR single-mode hardware bypass network module |
|
FPR4K-XNM-6X25SRF |
6-port 25-Gbps SFP SR multimode hardware bypass network module |
|
FPR4K-XNM-6X25LRF |
6-port 25-Gbps SFP LR single-mode hardware bypass network module |
|
FPR4200-PWR-AC |
1900-W AC power supply module |
|
FPR4200-SSD1800 |
1800 GB SSD |
|
FPR4200-FAN |
Dual fan module |
|
FPR4200-SLD-RAILS |
Slide rail kit |
|
FPR4200-CBL-MGMT |
Cable management brackets |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR4245-ASA-K9 | Product type | Cisco Secure Firewall 4245 ASA appliance |
| Firewall model | Secure Firewall 4245 | Security software role | Cisco Secure ASA |
| Rack units | 1RU | Mounting | 4-post EIA-310-D rack with slide rails |
| Airflow | Front to rear; I/O side to non-I/O side | DRAM | 1 TB |
| SSD storage | Two 1.8 TB SSDs | Fixed data ports | 8 x 1/10/25-Gbps SFP28 fixed fiber ports |
| Fixed port names | Ethernet 1/1 through Ethernet 1/8 | Management port | 2 x 1/10/25-Gbps SFP28 ports |
| ASA management port names | Management 1/1 and Management 1/2 | Network module slots | 2 hot-swappable slots |
| Supported module speeds | 1G 10G 25G 40G 100G 200G and 400G module options | Console port | 1 x RJ-45 serial port |
| USB port | 1 x USB 3.0 Type A port | Stateful inspection firewall throughput | 180 Gbps |
| Multiprotocol firewall throughput | 100 Gbps | Concurrent firewall connections | 180 million |
| New connections per second | 2.0 million | IPsec VPN throughput | 70 Gbps |
| Maximum VPN peers | 30000 | Security contexts | 2 included; 250 maximum |
| High availability | Active/active and active/standby | Clustering | 16 |
| ASA centralized management | Cisco Security Manager or Cisco Defense Orchestrator | Local management | Adaptive Security Device Manager |
| Network module replacement | Hot-swap supported for same module type; reboot required when replacing with a different supported module type | Power supplies | Dual 1900 W AC power supply modules |
| Power redundancy | 1+1 | AC input voltage | 200 to 240 VAC high line |
| AC input frequency | 50/60 Hz nominal | AC maximum input power | 1380 W for 4245 |
| AC efficiency | More than 90 percent Platinum | Fan modules | Three dual fan modules; hot-swappable |
| Weight | 20.8 kg (46 lb) with 2 power supplies, 2 network modules, and 3 fan modules | Dimensions | 1.73 x 16.89 x 32.0 in. (4.39 x 42.9 x 81.28 cm) |
| Operating temperature | 32 to 104F (0 to 40C) | Operating humidity | 5 to 90% noncondensing |
| Operating altitude | 0 to 10000 ft (0 to 3048 m) | Sound pressure | <=78 dBA typical; <=84 dBA maximum |
| Sound power | <=87 dB typical; <=92 dB maximum |
Get More Information
Need pricing, stock, or shipping details for the FPR4245-ASA-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email [email protected] for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
What console settings does FPR4245-ASA-K9 use?
-
What USB media does FPR4245-ASA-K9 accept?
-
Which cable types connect to the management ports on FPR4245-ASA-K9?
-
Where is the power switch on FPR4245-ASA-K9 and what does OFF do?
-
Does swapping a network module in FPR4245-ASA-K9 need a reboot?
-
How much does FPR4245-ASA-K9 weigh empty and fully populated?
-
Which ASA release first supports FPR4245-ASA-K9?
-
How many TLS proxy sessions can FPR4245-ASA-K9 handle?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:












Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
Our auditor checked this unit as part of a compliance review. Zero findings.
Our QA team had no findings. That’s a rare and welcome outcome.
Our cost per unit went down significantly compared to direct purchases.