Threat Defense next-generation firewall
ASA firewall
These Product IDs use the same 3105 hardware but order different security software. FPR3105-NGFW-K9 is the Secure Firewall Threat Defense version for AVC, IPS and NGIPS services; FPR3105-ASA-K9 is the ASA version with ASA stateful-firewall metrics, contexts and ASDM/CLI operations. Do not compare the FTD and ASA headline throughput rows as if they were the same test; select the software mode and management platform before ordering.
Start with the differences that have the greatest effect on capacity, connectivity, software, power and deployment fit.
Threat Defense next-generation firewall
ASA firewall
Cisco Secure Firewall Threat Defense
Cisco ASA
Not applicable
10 Gbps
Not applicable
9 Gbps
10 Gbps
Not applicable
10 Gbps
Not applicable
Review the differences in this order to identify the model that best fits the intended deployment.
Choose ASA or Threat Defense first, then size for the inspection, TLS decryption and VPN services that will be enabled.
Check concurrent sessions, new connections per second, interface speeds and any required expansion modules.
Confirm high availability or clustering, management platform, subscriptions, storage and power redundancy.
Send your port, performance, license, quantity or deployment requirements. A CCIE-level network engineer will review the shortlist and help identify the better-fit Product ID.
| Comparison parameter | ||
|---|---|---|
| Product ID | FPR3105-NGFW-K9 | FPR3105-ASA-K9 |
| Product and ordering | ||
| Product Type | Cisco Secure Firewall 3105 appliance | Cisco Secure Firewall 3105 appliance |
| Form Factor | 1RU | 1RU |
| Firewall Platform Type | Threat Defense next-generation firewall | ASA firewall |
| Security and VPN performance | ||
| Security Software Image | Cisco Secure Firewall Threat Defense | Cisco ASA |
| ASA Stateful Firewall Throughput | Not applicable | 10 Gbps |
| ASA Multiprotocol Firewall Throughput | Not applicable | 9 Gbps |
| FTD Firewall + AVC Throughput | 10 Gbps | Not applicable |
| FTD Firewall + AVC + IPS Throughput | 10 Gbps | Not applicable |
| NGIPS Throughput | 10 Gbps | Not applicable |
| TLS Decryption Throughput | 3.2 Gbps | Not listed |
| IPsec VPN Throughput | 5.5 Gbps | 5.5 Gbps |
| Concurrent Firewall Connections | Not listed | 1,500,000 |
| Concurrent Sessions with AVC | 1,500,000 | Not listed |
| New Connections per Second | 57,000 | 150,000 |
| New Connections per Second with AVC | 90,000 | Not listed |
| Maximum VPN Peers | 2,000 | 2,000 |
| Security Contexts | Not applicable | 2 |
| High Availability | Active/standby | Active/active or active/standby |
| Clustering | Not supported | Not supported |
| Ports and interfaces | ||
| Data Interfaces | 8 x 10M/100M/1GBASE-T RJ-45 plus 8 x 1/10G SFP | 8 x 10M/100M/1GBASE-T RJ-45 plus 8 x 1/10G SFP |
| Fixed RJ-45 Ports | 8 | 8 |
| Fixed SFP Ports | 8 | 8 |
| Maximum Interface Expansion | Not applicable | Not applicable |
| Management Ports | 1 x 1/10G SFP management port | 1 x 1/10G SFP management port |
| Console Ports | 1 x RJ-45 serial console | 1 x RJ-45 serial console |
| Configuration, licensing and management | ||
| Centralized Management | Cisco Secure Firewall Management Center or Security Cloud Control | Cisco Security Cloud Control or Cisco Security Manager |
| Local Management | Cisco Firewall Device Manager where supported; CLI for platform setup | Cisco ASDM and CLI |
| Licensing | Cisco Smart Licensing with software-image and feature entitlements | Cisco Smart Licensing with software-image and feature entitlements |
| USB Ports | 1 x USB 3.0 Type-A | 1 x USB 3.0 Type-A |
| Memory and software | ||
| System Memory | 64 GB | 64 GB |
| Storage | 900 GB SSD plus one spare slot | 900 GB SSD plus one spare slot |
| PoE and power | ||
| Default Power Supply | Dual 400W AC on 3130/3140; single 400W AC with second optional on 3105/3110/3120; 400W DC supported | Dual 400W AC on 3130/3140; single 400W AC with second optional on 3105/3110/3120; 400W DC supported |
| Power Redundancy | 1+1 with dual AC or DC supplies | 1+1 with dual AC or DC supplies |
| AC Input Voltage | 100 to 240 V | 100 to 240 V |
| DC Input Voltage | Not applicable | Not applicable |
| AC Input Frequency | 50 to 60 Hz | 50 to 60 Hz |
| AC Maximum Output Power | 400 W | 400 W |
| DC Maximum Output Power | Not applicable | Not applicable |
| Physical and environmental | ||
| Dimensions (H × W × D) | 44 × 433 × 508 mm | 44 × 433 × 508 mm |
| Weight | 10.433 kg | 10.433 kg |
| Operating Temperature | 0 to 40 °C | 0 to 40 °C |
| Storage Temperature | -20 to 65 °C | -20 to 65 °C |
| Storage Humidity | 5% to 95% | 5% to 95% |
| Operating Humidity | 10% to 85% | 10% to 85% |
| Operating Altitude | 0–3,048 m | 0–3,048 m |
| Mounting | 4-post EIA-310-D rack rails included | 4-post EIA-310-D rack rails included |
| Airflow | Front to rear; I/O side to non-I/O side | Front to rear; I/O side to non-I/O side |
| Acoustic Rating | 65 dBA typical | 65 dBA typical |
| Fan Modules | 2 hot-swappable dual-fan modules | 2 hot-swappable dual-fan modules |
“Not listed” means that no confirmed value is currently available for that model and parameter.
Use the exact Product ID when requesting a quote, because suffixes can identify different licenses, regions or configurations. Open an available product page for details and pricing, or request a project quote from our team.
Browse all Cisco firewalls