Product Brief
The Cisco Firepower 2120-ASA-K9(FPR2120-ASA-K9) is a 1RU appliance that delivers high-performance firewall and intrusion prevention system (IPS) capabilities. It features 12 Gigabit Ethernet ports and 4 Gigabit SFP ports, powered by a 250W AC power supply.
Performance and Feature
Table 1 Key Performance and Features of the 2100 Series with Cisco Threat Defense Software
| Features | 2110 | 2120 | 2130 | 2140 |
|---|---|---|---|---|
| Throughput: FW + AVC (1024B) | 2.6 Gbps | 3.4 Gbps | 5.4 Gbps | 10.4 Gbps |
| Throughput: FW + AVC + IPS (1024B) | 2.6 Gbps | 3.4 Gbps | 5.4 Gbps | 10.4 Gbps |
| Maximum Concurrent Sessions, with AVC | 1 million | 1.5 million | 2 million | 3 million |
| Maximum New Connections per Second, with AVC | 14K | 18K | 30K | 57K |
| TLS | 365 Mbps | 475 Mbps | 760 Mbps | 1.4 Gbps |
| Throughput: IPS (1024B) | 2.6 Gbps | 3.5 Gbps | 5.4 Gbps | 10.5 Gbps |
| IPSec VPN Throughput (1024B TCP w/Fastpath) | 950 Mbps | 1.2 Gbps | 1.9 Gbps | 3.6 Gbps |
| Maximum VPN Peers | 1,500 | 3,500 | 7,500 | 10,000 |
Table 2 ASA Performance and capabilities on Firepower 2100 appliances
| Features | 2110 | 2120 | 2130 | 2140 |
|---|---|---|---|---|
| Stateful Inspection Firewall Throughput | 3 Gbps | 6 Gbps | 10 Gbps | 20 Gbps |
| Stateful Inspection Firewall Throughput (Multiprotocol) | 1.5 Gbps | 3 Gbps | 5 Gbps | 10 Gbps |
| Concurrent Firewall Connections | 1 million | 1.5 million | 2 million | 3 million |
| Firewall Latency (UDP 64B microseconds) | – | – | – | – |
| New Connections Per Second | 18,000 | 28,000 | 40,000 | 75,000 |
| IPsec VPN Throughput (450B UDP L2L test) | 500 Mbps | 700 Mbps | 1 Gbps | 2 Gbps |
| Maximum VPN Peers | 1,500 | 3,500 | 7,500 | 10,000 |
| Security Contexts (Included; Maximum) | 2; 25 | 2; 25 | 2; 30 | 2; 40 |
Specifications
Hardware Specifications
| Feature | FPR-2110 | FPR-2120 | FPR-2130 | FPR-2140 |
|---|---|---|---|---|
| Dimensions (H x W x D) | 1.73 x 16.90 x 19.76 in | 1.73 x 16.90 x 19.76 in | 1.73 x 16.90 x 19.76 in | 1.73 x 16.90 x 19.76 in |
| Form Factor | 1RU | 1RU | 1RU | 1RU |
| Network Ports | 12 x 1G RJ-45, 4 x 1G SFP | 12 x 1G RJ-45, 4 x 1G SFP | 12 x 1G RJ-45, 4 x 10G SFP+ | 12 x 1G RJ-45, 4 x 10G SFP+ |
| Power Supply | 250W AC | 250W AC | 400W AC, Dual 400W AC Optional | Dual 400W AC |
| Weight | 16.1 lb (7.3 kg) | 16.1 lb (7.3 kg) | 19.4 lb (8.8 kg) | 21 lb (9.53 kg) |
| Rack Mountable | Yes | Yes | Yes | Yes |
| Temperature (Operating) | 32 to 104°F (0 to 40°C) | 32 to 104°F (0 to 40°C) | 32 to 104°F (0 to 40°C) | 32 to 104°F (0 to 40°C) |
Software Specifications
- Cisco Secure Firewall ASA / Threat Defense: Flexible and high-performance deployment options for both firewall and IPS functionalities.
- Cisco Firepower Device Manager: Local management for smaller deployments.
- Cisco AMP for Networks: Detection, analysis, and containment of malware, integrating threat intelligence and providing full lifecycle protection.
Cisco Firepower 2100 Series: Select Product Components
Appliances with FTD Software:
| Part Number | Description |
|---|---|
| FPR2110-NGFW-K9 | Cisco Firepower 2110 NGFW Appliance, 1RU |
| FPR2120-NGFW-K9 | Cisco Firepower 2120 NGFW Appliance, 1RU |
| FPR2130-NGFW-K9 | Cisco Firepower 2130 NGFW Appliance, 1RU, 1 x Network Module Bays |
| FPR2140-NGFW-K9 | Cisco Firepower 2140 NGFW Appliance, 1RU, 1 x Network Module Bays |
Appliance Master Bundles:
| Part Number | Description |
|---|---|
| FPR2110-BUN | Cisco Firepower 2110 Master Bundle |
| FPR2120-BUN | Cisco Firepower 2120 Master Bundle |
| FPR2130-BUN | Cisco Firepower 2130 Master Bundle |
| FPR2140-BUN | Cisco Firepower 2140 Master Bundle |
Network Modules:
| Part Number | Description |
|---|---|
| FPR2K-NM-8X10G | Cisco Firepower 8-port SFP+ network module |
Licenses for Threat Defense Software:
| Part Number | Description |
|---|---|
| L-FPR2110T-TMC | Cisco Firepower 2110 Threat Defense Threat, Malware, and URL License |
| L-FPR2120T-TMC | Cisco Firepower 2120 Threat Defense Threat, Malware, and URL License |
| L-FPR2130T-TMC | Cisco Firepower 2130 Threat Defense Threat, Malware, and URL License |
| L-FPR2140T-TMC | Cisco Firepower 2140 Threat Defense Threat, Malware, and URL License |
Appliances with ASA Software:
| Part Number | Description |
|---|---|
| FPR2110-ASA-K9 | Cisco Firepower 2110 ASA Appliance, 1RU |
| FPR2120-ASA-K9 | Cisco Firepower 2120 ASA Appliance, 1RU |
| FPR2130-ASA-K9 | Cisco Firepower 2130 ASA Appliance, 1RU, 1 x Network Module Bays |
| FPR2140-ASA-K9 | Cisco Firepower 2140 ASA Appliance, 1RU, 1 x Network Module Bays |
Optional ASA Software Licenses:
| Part Number | Description |
|---|---|
| L-FPR2K-ENC-K9 | License to enable strong encryption for ASA on Cisco Firepower 2100 Series |
| L-FPR2K-ASASC-10 | Cisco Firepower 2100 Add-on 10 security context licenses |
| L-FPR2K-ASASC-5 | Cisco Firepower 2100 Add-on 5 security context licenses |