10 Gbps
21 Gbps
FPR3120-NGFW-K9 is the higher-capacity Threat Defense appliance: Cisco lists 21 Gbps for FW+AVC and NGIPS, 6.7 Gbps TLS throughput, 10 Gbps IPsec VPN throughput and 4 million concurrent AVC sessions. FPR3105-NGFW-K9 lists 10 Gbps FW+AVC/NGIPS, 3.2 Gbps TLS, 5.5 Gbps IPsec and 1.5 million sessions. Use the same Cisco traffic profile when sizing, and confirm whether clustering and the larger 3120 memory footprint are required.
Start with the differences that have the greatest effect on capacity, connectivity, software, power and deployment fit.
10 Gbps
21 Gbps
10 Gbps
21 Gbps
10 Gbps
21 Gbps
3.2 Gbps
6.7 Gbps
5.5 Gbps
10 Gbps
1,500,000
4,000,000
Review the differences in this order to identify the model that best fits the intended deployment.
Choose ASA or Threat Defense first, then size for the inspection, TLS decryption and VPN services that will be enabled.
Check concurrent sessions, new connections per second, interface speeds and any required expansion modules.
Confirm high availability or clustering, management platform, subscriptions, storage and power redundancy.
Send your port, performance, license, quantity or deployment requirements. A CCIE-level network engineer will review the shortlist and help identify the better-fit Product ID.
| Comparison parameter | ||
|---|---|---|
| Product ID | FPR3105-NGFW-K9 | FPR3120-NGFW-K9 |
| Product and ordering | ||
| Product Type | Cisco Secure Firewall 3105 appliance | Cisco Secure Firewall 3120 appliance |
| Form Factor | 1RU | 1RU |
| Firewall Platform Type | Threat Defense next-generation firewall | Threat Defense next-generation firewall |
| Security and VPN performance | ||
| Security Software Image | Cisco Secure Firewall Threat Defense | Cisco Secure Firewall Threat Defense |
| ASA Stateful Firewall Throughput | Not applicable | Not applicable |
| ASA Multiprotocol Firewall Throughput | Not applicable | Not applicable |
| FTD Firewall + AVC Throughput | 10 Gbps | 21 Gbps |
| FTD Firewall + AVC + IPS Throughput | 10 Gbps | 21 Gbps |
| NGIPS Throughput | 10 Gbps | 21 Gbps |
| TLS Decryption Throughput | 3.2 Gbps | 6.7 Gbps |
| IPsec VPN Throughput | 5.5 Gbps | 10 Gbps |
| Concurrent Sessions with AVC | 1,500,000 | 4,000,000 |
| New Connections per Second with AVC | 90,000 | 170,000 |
| Maximum VPN Peers | 2,000 | 7,000 |
| Security Contexts | Not applicable | Not applicable |
| High Availability | Active/standby | Active/standby |
| Clustering | Not supported | Up to 8 appliances |
| Ports and interfaces | ||
| Data Interfaces | 8 x 10M/100M/1GBASE-T RJ-45 plus 8 x 1/10G SFP | 8 x 10M/100M/1GBASE-T RJ-45 plus 8 x 1/10G SFP |
| Fixed RJ-45 Ports | 8 | 8 |
| Fixed SFP Ports | 8 | 8 |
| Maximum Interface Expansion | Not applicable | Not applicable |
| Management Ports | 1 x 1/10G SFP management port | 1 x 1/10G SFP management port |
| Console Ports | 1 x RJ-45 serial console | 1 x RJ-45 serial console |
| Configuration, licensing and management | ||
| Centralized Management | Cisco Secure Firewall Management Center or Security Cloud Control | Cisco Secure Firewall Management Center or Security Cloud Control |
| Local Management | Cisco Firewall Device Manager where supported; CLI for platform setup | Cisco Firewall Device Manager where supported; CLI for platform setup |
| Licensing | Cisco Smart Licensing with software-image and feature entitlements | Cisco Smart Licensing with software-image and feature entitlements |
| USB Ports | 1 x USB 3.0 Type-A | 1 x USB 3.0 Type-A |
| Memory and software | ||
| System Memory | 64 GB | 128 GB |
| Storage | 900 GB SSD plus one spare slot | 900 GB SSD plus one spare slot |
| PoE and power | ||
| Default Power Supply | Dual 400W AC on 3130/3140; single 400W AC with second optional on 3105/3110/3120; 400W DC supported | Dual 400W AC on 3130/3140; single 400W AC with second optional on 3105/3110/3120; 400W DC supported |
| Power Redundancy | 1+1 with dual AC or DC supplies | 1+1 with dual AC or DC supplies |
| AC Input Voltage | 100 to 240 V | 100 to 240 V |
| DC Input Voltage | Not applicable | Not applicable |
| AC Input Frequency | 50 to 60 Hz | 50 to 60 Hz |
| AC Maximum Output Power | 400 W | 400 W |
| DC Maximum Output Power | Not applicable | Not applicable |
| Physical and environmental | ||
| Dimensions (H × W × D) | 44 × 433 × 508 mm | 44 × 433 × 508 mm |
| Weight | 10.433 kg | 10.433 kg |
| Operating Temperature | 0 to 40 °C | 0 to 40 °C |
| Storage Temperature | -20 to 65 °C | -20 to 65 °C |
| Storage Humidity | 5% to 95% | 5% to 95% |
| Operating Humidity | 10% to 85% | 10% to 85% |
| Operating Altitude | 0–3,048 m | 0–3,048 m |
| Mounting | 4-post EIA-310-D rack rails included | 4-post EIA-310-D rack rails included |
| Airflow | Front to rear; I/O side to non-I/O side | Front to rear; I/O side to non-I/O side |
| Acoustic Rating | 65 dBA typical | 65 dBA typical |
| Fan Modules | 2 hot-swappable dual-fan modules | 2 hot-swappable dual-fan modules |
“Not listed” means that no confirmed value is currently available for that model and parameter.
Use the exact Product ID when requesting a quote, because suffixes can identify different licenses, regions or configurations. Open an available product page for details and pricing, or request a project quote from our team.
Browse all Cisco firewalls