Cisco firewall comparison

FPR1010-NGFW-K9 vs FPR1010-ASA-K9

The purchase decision is the software image rather than the chassis. FPR1010-NGFW-K9 runs Secure Firewall Threat Defense and is sized with Cisco FW+AVC, IPS and NGIPS metrics; FPR1010-ASA-K9 runs ASA and is sized with ASA stateful and multiprotocol firewall metrics. Choose the required inspection, management and high-availability model first, and keep the two Cisco test modes separate when reviewing performance.

2models compared
44specs shown for every model
15differences found
Change comparison

Select different models

  1. 1Choose a category
  2. 2Select models
Choose a product categoryAll selected models must be from the same category.
Select models to compareChoose two to four exact Cisco Product IDs.

Select one category and at least two different models.

At-a-glance comparison

Key performance and configuration differences

Start with the differences that have the greatest effect on capacity, connectivity, software, power and deployment fit.

Firewall Platform Type
FPR1010-NGFW-K9

Threat Defense next-generation firewall

FPR1010-ASA-K9

ASA firewall

Security Software Image
FPR1010-NGFW-K9

Cisco Secure Firewall Threat Defense

FPR1010-ASA-K9

Cisco ASA

ASA Stateful Firewall Throughput
FPR1010-NGFW-K9

Not applicable

FPR1010-ASA-K9

2 Gbps

ASA Multiprotocol Firewall Throughput
FPR1010-NGFW-K9

Not applicable

FPR1010-ASA-K9

1.4 Gbps

FTD Firewall + AVC Throughput
FPR1010-NGFW-K9

0.89 Gbps

FPR1010-ASA-K9

Not applicable

FTD Firewall + AVC + IPS Throughput
FPR1010-NGFW-K9

0.88 Gbps

FPR1010-ASA-K9

Not applicable

Buying decision

How to choose between FPR1010-NGFW-K9 and FPR1010-ASA-K9

Review the differences in this order to identify the model that best fits the intended deployment.

  1. 01

    Software and security services

    Choose ASA or Threat Defense first, then size for the inspection, TLS decryption and VPN services that will be enabled.

  2. 02

    Connections and interfaces

    Check concurrent sessions, new connections per second, interface speeds and any required expansion modules.

  3. 03

    Resiliency and licensing

    Confirm high availability or clustering, management platform, subscriptions, storage and power redundancy.

Before ordering Confirm the exact Product ID, license tier, power supplies, accessories and regional requirements.
Free product-selection help

Need help deciding between these Cisco models?

Send your port, performance, license, quantity or deployment requirements. A CCIE-level network engineer will review the shortlist and help identify the better-fit Product ID.

Detailed comparison

Full specification comparison

Comparison parameter
Product ID FPR1010-NGFW-K9FPR1010-ASA-K9
Product and ordering
Product Type FPR1010-NGFW-K9 Cisco Secure Firewall 1010 appliance FPR1010-ASA-K9 Cisco Secure Firewall 1010 appliance
Form Factor FPR1010-NGFW-K9 Compact desktop or wall-mount; optional rack shelf FPR1010-ASA-K9 Compact desktop or wall-mount; optional rack shelf
Firewall Platform TypeDifferent FPR1010-NGFW-K9 Threat Defense next-generation firewall FPR1010-ASA-K9 ASA firewall
Security and VPN performance
Security Software ImageDifferent FPR1010-NGFW-K9 Cisco Secure Firewall Threat Defense FPR1010-ASA-K9 Cisco ASA
ASA Stateful Firewall ThroughputDifferent FPR1010-NGFW-K9 Not applicable FPR1010-ASA-K9 2 Gbps
ASA Multiprotocol Firewall ThroughputDifferent FPR1010-NGFW-K9 Not applicable FPR1010-ASA-K9 1.4 Gbps
FTD Firewall + AVC ThroughputDifferent FPR1010-NGFW-K9 0.89 Gbps FPR1010-ASA-K9 Not applicable
FTD Firewall + AVC + IPS ThroughputDifferent FPR1010-NGFW-K9 0.88 Gbps FPR1010-ASA-K9 Not applicable
NGIPS ThroughputDifferent FPR1010-NGFW-K9 0.9 Gbps FPR1010-ASA-K9 Not applicable
TLS Decryption ThroughputDifferent FPR1010-NGFW-K9 0.195 Gbps FPR1010-ASA-K9 Not listed
IPsec VPN ThroughputDifferent FPR1010-NGFW-K9 0.4 Gbps FPR1010-ASA-K9 0.5 Gbps
Concurrent Firewall ConnectionsDifferent FPR1010-NGFW-K9 Not listed FPR1010-ASA-K9 100,000
Concurrent Sessions with AVCDifferent FPR1010-NGFW-K9 100,000 FPR1010-ASA-K9 Not listed
New Connections per SecondDifferent FPR1010-NGFW-K9 Not listed FPR1010-ASA-K9 25,000
New Connections per Second with AVCDifferent FPR1010-NGFW-K9 6,000 FPR1010-ASA-K9 Not listed
Maximum VPN Peers FPR1010-NGFW-K9 75 FPR1010-ASA-K9 75
Security Contexts FPR1010-NGFW-K9 Not applicable FPR1010-ASA-K9 Not applicable
High Availability FPR1010-NGFW-K9 Active/standby FPR1010-ASA-K9 Active/standby
Clustering FPR1010-NGFW-K9 Not supported FPR1010-ASA-K9 Not supported
Ports and interfaces
Data Interfaces FPR1010-NGFW-K9 8 x 1000BASE-T RJ-45; ports 1 and 2 support PoE+ output FPR1010-ASA-K9 8 x 1000BASE-T RJ-45; ports 1 and 2 support PoE+ output
Fixed RJ-45 Ports FPR1010-NGFW-K9 8 FPR1010-ASA-K9 8
Fixed SFP Ports FPR1010-NGFW-K9 0 FPR1010-ASA-K9 0
Maximum Interface Expansion FPR1010-NGFW-K9 Not applicable FPR1010-ASA-K9 Not applicable
Management Ports FPR1010-NGFW-K9 1 x 1000BASE-T RJ-45 FPR1010-ASA-K9 1 x 1000BASE-T RJ-45
Console Ports FPR1010-NGFW-K9 RJ-45 serial and USB Mini-B console FPR1010-ASA-K9 RJ-45 serial and USB Mini-B console
Configuration, licensing and management
Centralized ManagementDifferent FPR1010-NGFW-K9 Cisco Secure Firewall Management Center or Security Cloud Control FPR1010-ASA-K9 Cisco Security Cloud Control or Cisco Security Manager
Local ManagementDifferent FPR1010-NGFW-K9 Cisco Firewall Device Manager where supported; CLI for platform setup FPR1010-ASA-K9 Cisco ASDM and CLI
Licensing FPR1010-NGFW-K9 Cisco Smart Licensing with software-image and feature entitlements FPR1010-ASA-K9 Cisco Smart Licensing with software-image and feature entitlements
USB Ports FPR1010-NGFW-K9 1 x USB 3.0 Type-A FPR1010-ASA-K9 1 x USB 3.0 Type-A
Memory and software
System Memory FPR1010-NGFW-K9 8 GB FPR1010-ASA-K9 8 GB
Storage FPR1010-NGFW-K9 200 GB SSD FPR1010-ASA-K9 200 GB SSD
PoE and power
Default Power Supply FPR1010-NGFW-K9 External AC power supply; 115W maximum appliance draw FPR1010-ASA-K9 External AC power supply; 115W maximum appliance draw
Power Redundancy FPR1010-NGFW-K9 No redundant power supply option FPR1010-ASA-K9 No redundant power supply option
AC Input Voltage FPR1010-NGFW-K9 100 to 240 V FPR1010-ASA-K9 100 to 240 V
DC Input Voltage FPR1010-NGFW-K9 Not applicable FPR1010-ASA-K9 Not applicable
AC Input Frequency FPR1010-NGFW-K9 50 to 60 Hz FPR1010-ASA-K9 50 to 60 Hz
AC Maximum Output Power FPR1010-NGFW-K9 115 W FPR1010-ASA-K9 115 W
DC Maximum Output Power FPR1010-NGFW-K9 Not applicable FPR1010-ASA-K9 Not applicable
Physical and environmental
Dimensions (H × W × D) FPR1010-NGFW-K9 46.2 × 199.4 × 205 mm FPR1010-ASA-K9 46.2 × 199.4 × 205 mm
Weight FPR1010-NGFW-K9 1.4 kg FPR1010-ASA-K9 1.4 kg
Operating Temperature FPR1010-NGFW-K9 0 to 40 °C FPR1010-ASA-K9 0 to 40 °C
Storage Temperature FPR1010-NGFW-K9 -25 to 70 °C FPR1010-ASA-K9 -25 to 70 °C
Storage Humidity FPR1010-NGFW-K9 10% to 90% FPR1010-ASA-K9 10% to 90%
Operating Humidity FPR1010-NGFW-K9 Up to 90% FPR1010-ASA-K9 Up to 90%
Operating Altitude FPR1010-NGFW-K9 Up to 3,000.146 m FPR1010-ASA-K9 Up to 3,000.146 m
Mounting FPR1010-NGFW-K9 Desktop or wall mount; optional rack shelf FPR1010-ASA-K9 Desktop or wall mount; optional rack shelf
Airflow FPR1010-NGFW-K9 Passive fanless cooling FPR1010-ASA-K9 Passive fanless cooling
Acoustic Rating FPR1010-NGFW-K9 0 dBA FPR1010-ASA-K9 0 dBA
Fan Modules FPR1010-NGFW-K9 Not applicable FPR1010-ASA-K9 Not applicable

“Not listed” means that no confirmed value is currently available for that model and parameter.

Still comparing Cisco models?
Price, stock & lead time

Get pricing for the exact models you compared

Use the exact Product ID when requesting a quote, because suffixes can identify different licenses, regions or configurations. Open an available product page for details and pricing, or request a project quote from our team.

Browse all Cisco firewalls
Related comparisons

More Cisco firewall comparisons

View all popular Cisco Firewall Comparisons →