Cisco firewall comparison
FPR3105-NGFW-K9 vs FPR3120-NGFW-K9
FPR3105-NGFW-K9 and FPR3120-NGFW-K9 share the same fixed interfaces, chassis and power options. The larger appliance raises inspection and TLS throughput, concurrent sessions, VPN peers and memory, and adds supported clustering that is unavailable on the smaller appliance.
2models compared
44specs published for every model
11confirmed differences
Change comparison
Select different models
At a glance
Key differences
Compare the specifications that shape your deployment.
| Specification | FPR3105-NGFW-K9 | FPR3120-NGFW-K9 |
|---|---|---|
FTD Firewall + AVC Throughput |
10 Gbps | 21 Gbps |
FTD Firewall + AVC + IPS Throughput |
10 Gbps | 21 Gbps |
NGIPS Throughput |
10 Gbps | 21 Gbps |
TLS Decryption Throughput |
3.2 Gbps | 6.7 Gbps |
IPsec VPN Throughput |
5.5 Gbps | 10 Gbps |
Concurrent Sessions with AVC |
1,500,000 | 4,000,000 |
Detailed comparison
Full specification comparison
| Comparison parameter | ||
|---|---|---|
| Product ID | FPR3105-NGFW-K9 | FPR3120-NGFW-K9 |
| Product and ordering | ||
| Product Type | Cisco Secure Firewall 3105 appliance | Cisco Secure Firewall 3120 appliance |
| Form Factor | 1RU | 1RU |
| Firewall Platform Type | Threat Defense next-generation firewall | Threat Defense next-generation firewall |
| Security and VPN performance | ||
| Security Software Image | Cisco Secure Firewall Threat DefenseCan be reimaged to ASA; reimaging erases the configuration | Cisco Secure Firewall Threat DefenseCan be reimaged to ASA; reimaging erases the configuration |
| ASA Stateful Firewall Throughput | Not applicable | Not applicable |
| ASA Multiprotocol Firewall Throughput | Not applicable | Not applicable |
| FTD Firewall + AVC Throughput | 10 Gbps | 21 Gbps |
| FTD Firewall + AVC + IPS Throughput | 10 Gbps | 21 Gbps |
| NGIPS Throughput | 10 Gbps | 21 Gbps |
| TLS Decryption Throughput | 3.2 Gbps | 6.7 Gbps |
| IPsec VPN Throughput | 5.5 Gbps | 10 Gbps |
| Concurrent Sessions with AVC | 1,500,000 | 4,000,000 |
| New Connections per Second with AVC | 90,000 | 170,000 |
| Maximum VPN Peers | 2,000 | 7,000 |
| Security Contexts | Not applicable | Not applicable |
| High Availability | Active/active and active/standby | Active/active and active/standby |
| Clustering | Not supported | Up to 8 appliances |
| Ports and interfaces | ||
| Data Interfaces | 8 x 10M/100M/1GBASE-T RJ-45 plus 8 x 1/10G SFP | 8 x 10M/100M/1GBASE-T RJ-45 plus 8 x 1/10G SFP |
| Fixed RJ-45 Ports | 8 | 8 |
| Fixed SFP Ports | 8 | 8 |
| Maximum Interface Expansion | Up to 24 total Ethernet ports with one 8-port network module | Up to 24 total Ethernet ports with one 8-port network module |
| Management Ports | 1 x 1/10G SFP management port | 1 x 1/10G SFP management port |
| Console Ports | 1 x RJ-45 serial console | 1 x RJ-45 serial console |
| Configuration, licensing and management | ||
| Centralized Management | Cisco Secure Firewall Management Center or Security Cloud Control | Cisco Secure Firewall Management Center or Security Cloud Control |
| Local Management | Cisco Firewall Device Manager where supported; CLI for platform setup | Cisco Firewall Device Manager where supported; CLI for platform setup |
| Licensing | Cisco Smart Licensing with software-image and feature entitlements | Cisco Smart Licensing with software-image and feature entitlements |
| USB Ports | 1 x USB 3.0 Type-A | 1 x USB 3.0 Type-A |
| Memory and software | ||
| System Memory | 64 GB | 128 GB |
| Storage | 900 GB SSD plus one spare slot | 900 GB SSD plus one spare slot |
| PoE and power | ||
| Default Power Supply | 1 x 400W AC standard; second 400W AC optional; single or dual 400W DC optional | 1 x 400W AC standard; second 400W AC optional; single or dual 400W DC optional |
| Power Redundancy | 1+1 with dual AC or DC supplies | 1+1 with dual AC or DC supplies |
| AC Input Voltage | 100 to 240 V | 100 to 240 V |
| DC Input Voltage | -48 to -60 V | -48 to -60 V |
| AC Input Frequency | 50 to 60 Hz | 50 to 60 Hz |
| AC Maximum Output Power | 400 W | 400 W |
| DC Maximum Output Power | 400 W | 400 W |
| Physical and environmental | ||
| Dimensions (H × W × D) | 44 × 433 × 508 mm | 44 × 433 × 508 mm |
| Weight | 10.433 kg | 10.433 kg |
| Operating Temperature | 0 to 40 °C | 0 to 40 °C |
| Storage Temperature | -20 to 65 °C | -20 to 65 °C |
| Storage Humidity | 5% to 95% | 5% to 95% |
| Operating Humidity | 10% to 85% | 10% to 85% |
| Operating Altitude | 0–3,048 m | 0–3,048 m |
| Mounting | 4-post EIA-310-D rack rails included | 4-post EIA-310-D rack rails included |
| Airflow | Front to rear; I/O side to non-I/O side | Front to rear; I/O side to non-I/O side |
| Acoustic Rating | 65 dBA at 25°C; 74 dBA maximum | 65 dBA at 25°C; 74 dBA maximum |
| Fan Modules | 2 hot-swappable dual-fan modules | 2 hot-swappable dual-fan modules |
Specifications from Cisco Secure Firewall 3100 Series Data Sheet (checked 2026-10-11).
“Not published by Cisco” and “Not listed” indicate that a confirmed direct comparison is unavailable. These rows are not counted as confirmed differences.
Continue to the product pages
Product details
Specifications, documentation and purchasing information for each model.
Related comparisons