FPR4245-NGFW-K9 – 140G NGFW – 8x25G SFP28 Data + 2x25G SFP28 Mgmt – 4200 – NGFW Firewall
Shop Expert-Recommended Accessories for the FPR4245-NGFW-K9
Explore optics, stacking accessories, modules, and power supplies—all verified by our engineers for use with this model.-
SFP-10G-SR-S
10GBASE-SR SFP+ - S-Class - 400m OM4 MMFOriginal price was: $853.95.$52.00Current price is: $52.00. -
SFP-10G-LR-S
10GBASE-LR SFP+ - S-Class - 10km SMFOriginal price was: $2,439.88.$150.00Current price is: $150.00. -
SFP-25G-SR-S
25GBASE-SR SFP28 - 850nm MMF - 100m OM4Original price was: $1,213.85.$258.00Current price is: $258.00. -
SFP-10/25G-CSR-S
10/25GBASE-CSR SFP28 - 850nm MMF - 300 m OM3 / 400 m OM4 - 0 to 70°COriginal price was: $1,335.84.$95.30Current price is: $95.30. -
SFP-10/25G-LR-S
10/25GBASE-LR SFP28 - 10 km G.652 SMF - 0 to 70°C Commercial TemperatureOriginal price was: $2,787.19.$431.00Current price is: $431.00. -
GLC-LH-SMD
1000BASE-LX/LH SFP - 10km SMF / 550m MMF - DOMOriginal price was: $1,260.58.$95.80Current price is: $95.80. -
GLC-TE
1000BASE-T SFP - RJ-45 Cat5 Copper - 100m ReachOriginal price was: $570.10.$70.00Current price is: $70.00. -
GLC-SX-MMD
1000BASE-SX SFP - MMF 850nm - DOMOriginal price was: $633.46.$59.00Current price is: $59.00.
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR4245-NGFW-K9 Description
The FPR4245-NGFW-K9 is a Cisco Secure Firewall 4200 Series 1RU next-generation firewall that runs Threat Defense for high-throughput data center and internet edge inspection. The appliance provides 140 Gbps of FW + AVC + IPS throughput, 60 million concurrent sessions with AVC, 140 Gbps of IPsec VPN throughput and 1 TB of memory, with eight fixed 1/10/25G SFP28 ports and two network module slots. The chassis takes 200 to 240 VAC high-line input only, and device manager is not supported, so management runs through Firewall Management Center or Cisco Defense Orchestrator.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR4245-NGFW-K9 |
|
Product type |
Cisco Secure Firewall 4245 NGFW appliance |
|
Firewall model |
Secure Firewall 4245 |
|
Security software role |
Cisco Secure Firewall Threat Defense / NGFW |
|
Minimum Threat Defense release |
7.4.0 introduction for Secure Firewall 4215, 4225, and 4245 |
|
Management model |
Firewall Management Center or Cisco Defense Orchestrator |
|
Form factor |
1RU |
|
DRAM |
1 TB |
|
Fixed data ports |
8 x 1/10/25-Gbps SFP28 fixed fiber ports |
|
Management port |
2 x 1/10/25-Gbps SFP28 ports |
|
FW + AVC + IPS throughput |
140 Gbps |
|
IPsec VPN throughput |
140 Gbps |
|
Power input |
Dual 1900 W AC modules; 200 to 240 VAC high-line input for 4245 |
Product Performance
Key Features
FW + AVC + IPS runs at 140 Gbps, the highest figure among the 4215, 4225 and 4245 chassis. AVC session scale reaches 60 million, with 800K new connections per second.
IPsec VPN throughput matches the inspection figure, with 30000 peers supported. Large tunnel counts do not require a separate VPN appliance.
Hardware decryption covers 45 Gbps of TLS traffic. Inspecting encrypted flows therefore stays off the general inspection budget.
One chassis can run as many as 34 logical firewalls, and up to 16 chassis can join a cluster. Active/standby pairs are also supported.
Eight 1/10/25G SFP28 ports are built in, and two hot-swappable slots take modules from 1G through 400G, including hardware-bypass types. Interface layout is set by the chosen modules.
Dual 1900W supplies run 1+1 on 200 to 240 VAC and draw up to 1380 W. Racks with 100 to 120 VAC feeds cannot power this chassis.
Application Scenarios
At the edge of a large enterprise, the firewall applies AVC and IPS to 140 Gbps of traffic and holds 60 million concurrent sessions with AVC.
A data center perimeter can grow by joining up to 16 chassis in a cluster, while the eight fixed SFP28 ports and two network module slots provide the 25G to 100G links toward the core.
Remote-access and site-to-site tunnels from up to 30000 peers terminate on the firewall, with 140 Gbps of IPsec VPN throughput behind them.
Product Comparison
|
Parameter |
FPR4245-NGFW-K9 | ||
|---|---|---|---|
|
DRAM |
1 TB |
512 GB |
1 TB |
|
Throughput: FW + AVC + IPS |
140 Gbps |
80 Gbps |
Not applicable |
|
Stateful inspection firewall throughput |
Not applicable |
Not applicable |
180 Gbps |
|
Maximum concurrent sessions, with AVC |
60 million |
30 million |
Not applicable |
|
Maximum new connections per second, with AVC |
800K |
600K |
Not applicable |
|
IPsec VPN throughput |
140 Gbps |
80 Gbps |
70 Gbps |
|
Maximum VPN peers |
30000 |
25000 |
30000 |
|
AC input voltage |
200 to 240 VAC high line |
100 to 120 VAC or 200 to 240 VAC |
200 to 240 VAC high line |
|
AC maximum input power |
1380 W |
870 W |
1380 W |
|
Management model |
Firewall Management Center or Cisco Defense Orchestrator |
Firewall Management Center or Cisco Defense Orchestrator |
Cisco Security Manager, Cisco Defense Orchestrator, or ASDM |
FPR4245-NGFW-K9 is the top Threat Defense model in this group: against FPR4225-NGFW-K9 it raises memory from 512 GB to 1 TB, FW + AVC + IPS throughput from 80 Gbps to 140 Gbps, AVC sessions from 30 million to 60 million, new connections with AVC from 600K to 800K, and IPsec VPN from 80 Gbps to 140 Gbps. It also needs 200 to 240 VAC high-line input at 1380 W, so a rack on 100 to 120 VAC circuits points to FPR4225-NGFW-K9. Sites that run Cisco Secure ASA with Cisco Security Manager or ASDM order FPR4245-ASA-K9, which keeps the 1 TB memory and 30000 VPN peers but lists 180 Gbps of stateful firewall throughput and 70 Gbps of IPsec VPN under the ASA table.
Optional Add-ons
|
Model |
Description |
|---|---|
|
FPR4K-XNM-8X10G |
8-port 1/10-Gbps SFP+ network module |
|
FPR4K-XNM-8X25G |
8-port 1/10/25-Gbps SFP+ network module |
|
FPR4K-XNM-4X40G |
4-port 40-Gbps QSFP/QSFP+ network module |
|
FPR4K-XNM-2X100G |
2-port 100-Gbps QSFP56/QSFP28/QSFP network module |
|
FPR4K-XNM-4X200G |
4-port 40/100/200-Gbps QSFP28/QSFP network module |
|
FPR4K-XNM-2X400G |
2-port 200/400-Gbps QSFP-DD network module |
|
FPR4K-XNM-8X1GF |
8-port copper 1-Gbps 1000Base-T hardware bypass network module |
|
FPR4K-XNM-6X1SXF |
6-port 1-Gbps SFP SX multimode hardware bypass network module |
|
FPR4K-XNM-6X10SRF |
6-port 10-Gbps SFP SR multimode hardware bypass network module |
|
FPR4K-XNM-6X10LRF |
6-port 10-Gbps SFP LR single-mode hardware bypass network module |
|
FPR4K-XNM-6X25SRF |
6-port 25-Gbps SFP SR multimode hardware bypass network module |
|
FPR4K-XNM-6X25LRF |
6-port 25-Gbps SFP LR single-mode hardware bypass network module |
|
FPR4200-PWR-AC |
Cisco Secure Firewall 4200 Series 1900 W AC power supply module |
|
FPR4200-SSD1800 |
Cisco Secure Firewall 4200 Series 1.8 TB SSD |
|
FPR4200-FAN |
Dual fan module |
|
FPR4200-SLD-RAILS |
Slide rail kit |
|
FPR4200-CBL-MGMT |
Cable management brackets |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR4245-NGFW-K9 | Product type | Cisco Secure Firewall 4245 NGFW appliance |
| Firewall model | Secure Firewall 4245 | Security software role | Cisco Secure Firewall Threat Defense / NGFW |
| Minimum Threat Defense release | 7.4.0 introduction for Secure Firewall 4215, 4225, and 4245 | Management model | Firewall Management Center or Cisco Defense Orchestrator |
| Device manager support | Not supported for Secure Firewall 4200 Threat Defense | Rack units | 1RU |
| Mounting | 4-post EIA-310-D rack with slide rails | Airflow | Front to rear; I/O side to non-I/O side |
| DRAM | 1 TB | SSD storage | Two 1.8 TB NVMe SSD slots; ships with two 1.8 TB SSDs in RAID1 |
| Fixed data ports | 8 x 1/10/25-Gbps SFP28 fixed fiber ports | Fixed port names | Ethernet 1/1 through Ethernet 1/8 |
| Management port | 2 x 1/10/25-Gbps SFP28 ports | Threat Defense management port names | Management 0 and Management 1 |
| Network module slots | 2 hot-swappable slots | Supported module speeds | 1G 10G 25G 40G 100G 200G and 400G module options |
| Console port | 1 x RJ-45 serial port | FW + AVC throughput | 140 Gbps |
| FW + AVC + IPS throughput | 140 Gbps | NGIPS throughput | 140 Gbps |
| Maximum concurrent sessions with AVC | 60 million | New connections per second with AVC | 800K |
| TLS hardware decryption throughput | 45 Gbps | IPsec VPN throughput | 140 Gbps |
| Maximum VPN peers | 30000 | Multi-Instance count | 34 |
| High availability | Active/active with clustering and active/standby | Clustering | Up to 16 chassis |
| AVC support | Standard; supports more than 4000 applications | Cisco Secure IPS | Available |
| Cisco malware Defense | Available | URL filtering categories | More than 120 |
| URL filtering database | More than 280 million categorized URLs | Power supplies | Dual 1900 W AC power supply modules |
| Power redundancy | 1+1 | AC input voltage | 200 to 240 VAC high line |
| AC input frequency | 50/60 Hz nominal | System input power | 1380 W for 4245 |
| AC efficiency | More than 90 percent Platinum | Fan modules | Three dual fan modules; hot-swappable |
| Weight | 20.8 kg (46 lb) with 2 power supplies, 2 network modules, and 3 fan modules | Dimensions | 1.73 x 16.89 x 32.0 in. (4.39 x 42.9 x 81.28 cm) |
| Operating temperature | 32 to 104F (0 to 40C) at sea level | Operating humidity | 5 to 90% noncondensing |
| Operating altitude | 0 to 10000 ft (0 to 3048 m) | Sound pressure | <=78 dBA typical; <=84 dBA maximum |
| Sound power | <=87 dB typical; <=92 dB maximum |
Get More Information
Need pricing, stock, or shipping details for the FPR4245-NGFW-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email [email protected] for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
What console settings does FPR4245-NGFW-K9 use?
-
What USB media does FPR4245-NGFW-K9 accept?
-
Which cable types connect to the management ports on FPR4245-NGFW-K9?
-
Where is the power switch on FPR4245-NGFW-K9 and what does OFF do?
-
Does swapping a network module in FPR4245-NGFW-K9 need a reboot?
-
How much does FPR4245-NGFW-K9 weigh empty and fully populated?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
Initially nervous, ultimately impressed. Will buy again. Took a little longer to clear customs than expected, otherwise excellent.
Pricing was attractive enough that we placed a larger order than planned.
Buying from Layer23 felt like the right decision throughout.