Cisco firewall comparison

FPR3105-NGFW-K9 vs FPR3105-ASA-K9

These Product IDs use the same 3105 hardware but order different security software. FPR3105-NGFW-K9 is the Secure Firewall Threat Defense version for AVC, IPS and NGIPS services; FPR3105-ASA-K9 is the ASA version with ASA stateful-firewall metrics, contexts and ASDM/CLI operations. Do not compare the FTD and ASA headline throughput rows as if they were the same test; select the software mode and management platform before ordering.

2models compared
45specs shown for every model
16differences found
Change comparison

Select different models

  1. 1Choose a category
  2. 2Select models
Choose a product categoryAll selected models must be from the same category.
Select models to compareChoose two to four exact Cisco Product IDs.

Select one category and at least two different models.

At-a-glance comparison

Key performance and configuration differences

Start with the differences that have the greatest effect on capacity, connectivity, software, power and deployment fit.

Firewall Platform Type
FPR3105-NGFW-K9

Threat Defense next-generation firewall

FPR3105-ASA-K9

ASA firewall

Security Software Image
FPR3105-NGFW-K9

Cisco Secure Firewall Threat Defense

FPR3105-ASA-K9

Cisco ASA

ASA Stateful Firewall Throughput
FPR3105-NGFW-K9

Not applicable

FPR3105-ASA-K9

10 Gbps

ASA Multiprotocol Firewall Throughput
FPR3105-NGFW-K9

Not applicable

FPR3105-ASA-K9

9 Gbps

FTD Firewall + AVC Throughput
FPR3105-NGFW-K9

10 Gbps

FPR3105-ASA-K9

Not applicable

FTD Firewall + AVC + IPS Throughput
FPR3105-NGFW-K9

10 Gbps

FPR3105-ASA-K9

Not applicable

Buying decision

How to choose between FPR3105-NGFW-K9 and FPR3105-ASA-K9

Review the differences in this order to identify the model that best fits the intended deployment.

  1. 01

    Software and security services

    Choose ASA or Threat Defense first, then size for the inspection, TLS decryption and VPN services that will be enabled.

  2. 02

    Connections and interfaces

    Check concurrent sessions, new connections per second, interface speeds and any required expansion modules.

  3. 03

    Resiliency and licensing

    Confirm high availability or clustering, management platform, subscriptions, storage and power redundancy.

Before ordering Confirm the exact Product ID, license tier, power supplies, accessories and regional requirements.
Free product-selection help

Need help deciding between these Cisco models?

Send your port, performance, license, quantity or deployment requirements. A CCIE-level network engineer will review the shortlist and help identify the better-fit Product ID.

Detailed comparison

Full specification comparison

Comparison parameter
Product ID FPR3105-NGFW-K9FPR3105-ASA-K9
Product and ordering
Product Type Cisco Secure Firewall 3105 appliance Cisco Secure Firewall 3105 appliance
Form Factor 1RU 1RU
Firewall Platform Type Threat Defense next-generation firewall ASA firewall
Security and VPN performance
Security Software Image Cisco Secure Firewall Threat Defense Cisco ASA
ASA Stateful Firewall Throughput Not applicable 10 Gbps
ASA Multiprotocol Firewall Throughput Not applicable 9 Gbps
FTD Firewall + AVC Throughput 10 Gbps Not applicable
FTD Firewall + AVC + IPS Throughput 10 Gbps Not applicable
NGIPS Throughput 10 Gbps Not applicable
TLS Decryption Throughput 3.2 Gbps Not listed
IPsec VPN Throughput 5.5 Gbps 5.5 Gbps
Concurrent Firewall Connections Not listed 1,500,000
Concurrent Sessions with AVC 1,500,000 Not listed
New Connections per Second 57,000 150,000
New Connections per Second with AVC 90,000 Not listed
Maximum VPN Peers 2,000 2,000
Security Contexts Not applicable 2
High Availability Active/standby Active/active or active/standby
Clustering Not supported Not supported
Ports and interfaces
Data Interfaces 8 x 10M/100M/1GBASE-T RJ-45 plus 8 x 1/10G SFP 8 x 10M/100M/1GBASE-T RJ-45 plus 8 x 1/10G SFP
Fixed RJ-45 Ports 8 8
Fixed SFP Ports 8 8
Maximum Interface Expansion Not applicable Not applicable
Management Ports 1 x 1/10G SFP management port 1 x 1/10G SFP management port
Console Ports 1 x RJ-45 serial console 1 x RJ-45 serial console
Configuration, licensing and management
Centralized Management Cisco Secure Firewall Management Center or Security Cloud Control Cisco Security Cloud Control or Cisco Security Manager
Local Management Cisco Firewall Device Manager where supported; CLI for platform setup Cisco ASDM and CLI
Licensing Cisco Smart Licensing with software-image and feature entitlements Cisco Smart Licensing with software-image and feature entitlements
USB Ports 1 x USB 3.0 Type-A 1 x USB 3.0 Type-A
Memory and software
System Memory 64 GB 64 GB
Storage 900 GB SSD plus one spare slot 900 GB SSD plus one spare slot
PoE and power
Default Power Supply Dual 400W AC on 3130/3140; single 400W AC with second optional on 3105/3110/3120; 400W DC supported Dual 400W AC on 3130/3140; single 400W AC with second optional on 3105/3110/3120; 400W DC supported
Power Redundancy 1+1 with dual AC or DC supplies 1+1 with dual AC or DC supplies
AC Input Voltage 100 to 240 V 100 to 240 V
DC Input Voltage Not applicable Not applicable
AC Input Frequency 50 to 60 Hz 50 to 60 Hz
AC Maximum Output Power 400 W 400 W
DC Maximum Output Power Not applicable Not applicable
Physical and environmental
Dimensions (H × W × D) 44 × 433 × 508 mm 44 × 433 × 508 mm
Weight 10.433 kg 10.433 kg
Operating Temperature 0 to 40 °C 0 to 40 °C
Storage Temperature -20 to 65 °C -20 to 65 °C
Storage Humidity 5% to 95% 5% to 95%
Operating Humidity 10% to 85% 10% to 85%
Operating Altitude 0–3,048 m 0–3,048 m
Mounting 4-post EIA-310-D rack rails included 4-post EIA-310-D rack rails included
Airflow Front to rear; I/O side to non-I/O side Front to rear; I/O side to non-I/O side
Acoustic Rating 65 dBA typical 65 dBA typical
Fan Modules 2 hot-swappable dual-fan modules 2 hot-swappable dual-fan modules

“Not listed” means that no confirmed value is currently available for that model and parameter.

Still comparing Cisco models?
Price, stock & lead time

Get pricing for the exact models you compared

Use the exact Product ID when requesting a quote, because suffixes can identify different licenses, regions or configurations. Open an available product page for details and pricing, or request a project quote from our team.

Browse all Cisco firewalls
Related comparisons

More Cisco firewall comparisons

View all popular Cisco Firewall Comparisons →