FPR4245-ASA-K9 – 180G ASA – 8x25G SFP28 Data + 2x25G SFP28 Mgmt – 4200 – ASA Firewall

Cisco SN CheckSN verification before shipment.Verify authenticity3-Year WarrantyExtended, enterprise-gradeWarranty terms14-Day ReturnsStraightforward RMA processReturn policy
4.73 reviews8 Questions
List Price: $503,591.75 68% OFF
$161,480.69
Condition
Related
Quantity
Shipping Express Shipping 2-6 Business Days, via UPS, FedEx, DHL and more
Trusted & Secure Payments

Shop Expert-Recommended Accessories for the FPR4245-ASA-K9

Explore optics, stacking accessories, modules, and power supplies—all verified by our engineers for use with this model.
  • SFP-10G-SR-S

    SFP-10G-SR-S

    10GBASE-SR SFP+ - S-Class - 400m OM4 MMF
    Original price was: $853.95.Current price is: $52.00.
  • SFP-10G-LR-S

    SFP-10G-LR-S

    10GBASE-LR SFP+ - S-Class - 10km SMF
    Original price was: $2,439.88.Current price is: $150.00.
  • SFP-25G-SR-S

    SFP-25G-SR-S

    25GBASE-SR SFP28 - 850nm MMF - 100m OM4
    Original price was: $1,213.85.Current price is: $258.00.
  • SFP-10/25G-CSR-S

    SFP-10/25G-CSR-S

    10/25GBASE-CSR SFP28 - 850nm MMF - 300 m OM3 / 400 m OM4 - 0 to 70°C
    Original price was: $1,335.84.Current price is: $95.30.
  • SFP-10/25G-LR-S

    SFP-10/25G-LR-S

    10/25GBASE-LR SFP28 - 10 km G.652 SMF - 0 to 70°C Commercial Temperature
    Original price was: $2,787.19.Current price is: $431.00.
  • GLC-LH-SMD

    GLC-LH-SMD

    1000BASE-LX/LH SFP - 10km SMF / 550m MMF - DOM
    Original price was: $1,260.58.Current price is: $95.80.
  • GLC-TE

    GLC-TE

    1000BASE-T SFP - RJ-45 Cat5 Copper - 100m Reach
    Original price was: $570.10.Current price is: $70.00.
  • GLC-SX-MMD

    GLC-SX-MMD

    1000BASE-SX SFP - MMF 850nm - DOM
    Original price was: $633.46.Current price is: $59.00.

Why Layer23-Switch

Stocked, Shipped and Supported by One Team

Founded
Customers
Units shipped
Countries

Inventory You Can See

Cisco stock on hand
Models ready to ship
Warehouse space

Ships in 1 Business Day

In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.

DHL FedEx UPS Duties included: US · CA · UK

LSCare Warranty

3years on enterprise equipment

  • Advance replacement for in-stock models
  • New unit for dead-on-arrival
  • 14-day returns on sealed items

Free CCIE Support

Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.

Part number check Configuration Troubleshooting

Verify Before You Pay

100%factory-sealed

Get label and serial photos before shipment, and check every serial number with Cisco.

FPR4245-ASA-K9 Description

The FPR4245-ASA-K9 is a Cisco Secure Firewall 4200 Series 1RU ASA firewall for large data center and enterprise edge perimeters. The appliance delivers 180 Gbps of stateful inspection throughput, 100 Gbps of multiprotocol firewall throughput, 180 million concurrent connections and 30000 VPN peers, with 1 TB of memory, eight fixed 1/10/25G SFP28 ports and two network module slots. The appliance runs Cisco Secure ASA software, so Threat Defense and Firewall Management Center are not part of its management model.

Quick Specs

Parameter

Specification

Product ID

FPR4245-ASA-K9

Product type

Cisco Secure Firewall 4245 ASA appliance

Firewall model

Secure Firewall 4245

Security software role

Cisco Secure ASA

Form factor

1RU

DRAM

1 TB

Fixed data ports

8 x 1/10/25-Gbps SFP28 fixed fiber ports

Management port

2 x 1/10/25-Gbps SFP28 ports

Network module slots

2 hot-swappable slots

Stateful inspection firewall throughput

180 Gbps

Multiprotocol firewall throughput

100 Gbps

IPsec VPN throughput

70 Gbps

Power input

Dual 1900 W AC modules; 200 to 240 VAC high-line input for 4245

Product Performance

ASA Stateful Inspection Firewall Throughput
ASA Multiprotocol Firewall Throughput
Concurrent Firewall Connections

Key Features

180 Gbps Stateful Inspection

ASA stateful inspection runs at 180 Gbps, with 100 Gbps measured for multiprotocol traffic. These are the highest ASA figures among the 4215, 4225 and 4245 chassis.

180 Million Concurrent Connections

Connection scale reaches 180 million with 2.0 million new connections per second. Large NAT-heavy or session-dense edges stay within the table.

Security Contexts

Two contexts are included and up to 250 are supported, so one chassis can serve several tenants or policy domains with separate rule sets.

1 TB Of Memory And Mirrored SSDs

The chassis carries 1 TB of memory and two 1.8 TB SSDs. Memory is double that of the 4225 ASA model.

Module Support Tied To The ASA Release

Network module support depends on the ASA version, and 200G and 400G modules need later releases than 1G to 100G modules. The release plan should be settled before module speeds.

High-Line AC Power

Dual 1900W modules run 1+1 on 200 to 240 VAC only, drawing up to 1380 W. Racks fed from 100 to 120 VAC circuits cannot power this chassis.

Application Scenarios

ASA Data Center Edge

A data center edge that already runs Cisco Secure ASA policy can stay on that software model with 180 Gbps of stateful inspection and 180 million concurrent connections.

Large VPN Headend

As the VPN headend for a distributed enterprise, the firewall terminates up to 30000 peers and carries 70 Gbps of IPsec VPN traffic.

Multi-Tenant Security Contexts

A hosting provider or multi-division network can split the firewall into security contexts, with 2 included and up to 250 supported, and pair two chassis in an active/active or active/standby failover design.

Product Comparison

Parameter

FPR4245-ASA-K9

FPR4225-ASA-K9

FPR4245-NGFW-K9

DRAM

1 TB

512 GB

1 TB

Stateful inspection firewall throughput

180 Gbps

95 Gbps

Not applicable

Multiprotocol firewall throughput

100 Gbps

85 Gbps

Not applicable

Concurrent firewall connections

180 million

90 million

Not applicable

IPsec VPN throughput

70 Gbps

60 Gbps

140 Gbps

Maximum VPN peers

30000

25000

30000

Management model

Cisco Security Manager, Cisco Defense Orchestrator, or ASDM

Cisco Security Manager, Cisco Defense Orchestrator, or ASDM

Firewall Management Center or Cisco Defense Orchestrator

AC input voltage

200 to 240 VAC high line

100 to 120 VAC or 200 to 240 VAC

200 to 240 VAC high line

AC maximum input power

1380 W

870 W

1380 W

FPR4245-ASA-K9 is the larger ASA chassis against FPR4225-ASA-K9: 1 TB against 512 GB of memory, 180 Gbps against 95 Gbps of stateful inspection throughput, 180 million against 90 million concurrent connections, and 30000 against 25000 VPN peers. FPR4245-ASA-K9 also takes 200 to 240 VAC high-line input only, with 1380 W maximum input power, while FPR4225-ASA-K9 accepts 100 to 120 VAC or 200 to 240 VAC at 870 W, so racks fed from low-line circuits stay on FPR4225-ASA-K9. Deployments that standardize on Firewall Management Center and Threat Defense instead of ASDM move to FPR4245-NGFW-K9, which has the same 1 TB memory and 30000 peers and reaches 140 Gbps of IPsec VPN against 70 Gbps under the ASA table.

Optional Add-ons

Model

Description

FPR4K-XNM-8X10G

8-port 1/10-Gbps SFP+ network module

FPR4K-XNM-8X25G

8-port 1/10/25-Gbps SFP28 network module

FPR4K-XNM-4X40G

4-port 40-Gbps QSFP/QSFP+ network module

FPR4K-XNM-2X100G

2-port 100-Gbps QSFP28/QSFP network module

FPR4K-XNM-4X200G

4-port 40/100/200-Gbps QSFP28/QSFP network module

FPR4K-XNM-2X400G

2-port 200/400-Gbps QSFP-DD network module

FPR4K-XNM-8X1GF

8-port 1000Base-T hardware bypass network module

FPR4K-XNM-6X10SRF

6-port 10-Gbps SFP SR multimode hardware bypass network module

FPR4K-XNM-6X10LRF

6-port 10-Gbps SFP LR single-mode hardware bypass network module

FPR4K-XNM-6X25SRF

6-port 25-Gbps SFP SR multimode hardware bypass network module

FPR4K-XNM-6X25LRF

6-port 25-Gbps SFP LR single-mode hardware bypass network module

FPR4200-PWR-AC

1900-W AC power supply module

FPR4200-SSD1800

1800 GB SSD

FPR4200-FAN

Dual fan module

FPR4200-SLD-RAILS

Slide rail kit

FPR4200-CBL-MGMT

Cable management brackets

Specifications

Parameter Specification Parameter Specification
Product ID FPR4245-ASA-K9 Product type Cisco Secure Firewall 4245 ASA appliance
Firewall model Secure Firewall 4245 Security software role Cisco Secure ASA
Rack units 1RU Mounting 4-post EIA-310-D rack with slide rails
Airflow Front to rear; I/O side to non-I/O side DRAM 1 TB
SSD storage Two 1.8 TB SSDs Fixed data ports 8 x 1/10/25-Gbps SFP28 fixed fiber ports
Fixed port names Ethernet 1/1 through Ethernet 1/8 Management port 2 x 1/10/25-Gbps SFP28 ports
ASA management port names Management 1/1 and Management 1/2 Network module slots 2 hot-swappable slots
Supported module speeds 1G 10G 25G 40G 100G 200G and 400G module options Console port 1 x RJ-45 serial port
USB port 1 x USB 3.0 Type A port Stateful inspection firewall throughput 180 Gbps
Multiprotocol firewall throughput 100 Gbps Concurrent firewall connections 180 million
New connections per second 2.0 million IPsec VPN throughput 70 Gbps
Maximum VPN peers 30000 Security contexts 2 included; 250 maximum
High availability Active/active and active/standby Clustering 16
ASA centralized management Cisco Security Manager or Cisco Defense Orchestrator Local management Adaptive Security Device Manager
Network module replacement Hot-swap supported for same module type; reboot required when replacing with a different supported module type Power supplies Dual 1900 W AC power supply modules
Power redundancy 1+1 AC input voltage 200 to 240 VAC high line
AC input frequency 50/60 Hz nominal AC maximum input power 1380 W for 4245
AC efficiency More than 90 percent Platinum Fan modules Three dual fan modules; hot-swappable
Weight 20.8 kg (46 lb) with 2 power supplies, 2 network modules, and 3 fan modules Dimensions 1.73 x 16.89 x 32.0 in. (4.39 x 42.9 x 81.28 cm)
Operating temperature 32 to 104F (0 to 40C) Operating humidity 5 to 90% noncondensing
Operating altitude 0 to 10000 ft (0 to 3048 m) Sound pressure <=78 dBA typical; <=84 dBA maximum
Sound power <=87 dB typical; <=92 dB maximum

Get More Information

Need pricing, stock, or shipping details for the FPR4245-ASA-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email [email protected] for a fast quotation.

Quality Certifications

Customer Reviews

Write A Review
4.7
(3 reviews)
5 Stars
2
4 Stars
1
3 Stars
0
2 Stars
0
1 Stars
0
    Jennifer Smith
    Posted on 08/04/2026
    Verified Buyer
    4.0

    Our auditor checked this unit as part of a compliance review. Zero findings.

    Bradley Dixon
    Posted on 28/01/2026
    Verified Buyer
    5.0

    Our QA team had no findings. That’s a rare and welcome outcome.

    Klaus Kelly
    Posted on 02/12/2025
    Verified Buyer
    5.0

    Our cost per unit went down significantly compared to direct purchases.

Questions & Answers

  • What console settings does FPR4245-ASA-K9 use?

    FPR4245-ASA-K9 has one RJ-45 serial console port set to RS-232 at 9600 bps, 8N1, with no flow control. The serial cable is not included by default, so add one to the order if the chassis will be set up locally, per the Secure Firewall 4200 hardware installation guide.
  • What USB media does FPR4245-ASA-K9 accept?

    FPR4245-ASA-K9 has one USB 3.0 Type A port that supplies 5 V at up to 1 A. It reads EXT2, EXT3, EXT4 or VFAT/FAT32 media and appears as disk1: in ASA, usbA: in FXOS and usb: in ROMMON. The port cannot upload CSP images.
  • Which cable types connect to the management ports on FPR4245-ASA-K9?

    The two 1/10/25-Gbps SFP28 management ports on FPR4245-ASA-K9 take fiber modules, DAC cables or GLC-TE copper modules, per the Secure Firewall 4200 hardware installation guide. Copper management therefore needs a GLC-TE module because there is no built-in RJ-45 management port.
  • Where is the power switch on FPR4245-ASA-K9 and what does OFF do?

    The power switch on FPR4245-ASA-K9 is at the rear, to the left of PSU-1. Setting it to OFF starts a graceful shutdown rather than cutting power immediately, per the Secure Firewall 4200 hardware installation guide.
  • Does swapping a network module in FPR4245-ASA-K9 need a reboot?

    It depends on the module. FPR4245-ASA-K9 has two hot-swappable slots, NM-2 and NM-3, and a module can be replaced live with an identical one. Installing a different module type requires a reboot, per the Secure Firewall 4200 hardware installation guide.
  • How much does FPR4245-ASA-K9 weigh empty and fully populated?

    FPR4245-ASA-K9 weighs 36 lb (16.3 kg) empty and 46 lb (20.8 kg) fully populated, per the hardware installation guide. Empty means no power supplies, network modules or fans. Plan the rack install and lift for the populated weight.
  • Which ASA release first supports FPR4245-ASA-K9?

    FPR4245-ASA-K9 is supported from ASA 9.20(1), released 2023-09-07. That release covers only FPR4215-ASA-K9, FPR4225-ASA-K9 and FPR4245-ASA-K9, and ASA 9.20(2), released 2023-12-13, extended support to all current models, per the ASA 9.20 release notes.
  • How many TLS proxy sessions can FPR4245-ASA-K9 handle?

    FPR4245-ASA-K9 supports 15,000 total TLS proxy sessions, per the ASA 9.22 license limits table. The ceiling is the same on every Secure Firewall 4200 appliance and applies to decrypted sessions only.

Warranty

Visit How to Pay page for more information

FREE NETWORK TOOLS

Verify, plan, and comparewith confidence

Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.

Standard Services

Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.

  • Projects and Technical Support
  • Easy Purchasing Supply
  • Product Lifecycle Protection
  • Exclusive F3 Team Support

Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.

Shipping

DataSheet Downloads

  • FPR4245-ASA-K9 Datasheet