Cisco Secure Firewall 4200 Series Datasheet

Product Brief #

The Cisco Secure Firewall 4200 Series is a high-performance firewall designed for large enterprises, data centers, and service providers. It offers modular scalability, advanced threat defense, and high availability, all within a compact 1RU form factor.


Key Features and Benefits: #

  • High-Performance Security: Firewall throughput up to 180 Gbps with NGFW and IPS capabilities.
  • Cryptographic Acceleration: Optimized SSL and VPN decryption performance.
  • Flexible Modular Design: Supports up to 400G interfaces with dual network module bays.
  • High Availability & Clustering: Active/Active, Active/Standby, and up to 16-node clustering.
  • AI/ML-powered security: Automates threat detection and response.
  • SD-WAN Support: Secure site-to-site connectivity with dynamic path selection.
  • Fail-to-Wire (FTW) Network Modules: Ensures operational continuity.

Table 1 Shipping Box Contents #

ItemDescriptionQuantity
Cisco Secure Firewall 4200Chassis with factory-installed SSDs and power supply1
Power Cord(s)Country-specific power cords (based on order)1 or 2
Slide RailsSlide rail mounting kit2
Cable Management BracketsBrackets for organizing cables2
Screws and WashersRequired for securing slide rails and groundingVarious
Grounding KitIncludes a ground lug, screws, and washers1 Set
SFP Transceiver (Optional)If ordered, SFP/SFP+ modulesAs ordered
DocumentationQuick Start Guide, Safety & Compliance Guide1 Set
Pullout Asset CardIncludes the serial number and QR code for docs1

Table 2 Hardware Specifications #

Feature421542254245
Form Factor1RU1RU1RU
Fixed Ports8x 1/10/25Gb SFP288x 1/10/25Gb SFP288x 1/10/25Gb SFP28
Network Module Bays222
Storage1.8TB SSD x21.8TB SSD x21.8TB SSD x2
Power SupplyDual 1900W ACDual 1900W ACDual 1900W AC
Fans3 dual fan modules (hot-swappable)3 dual fan modules (hot-swappable)3 dual fan modules (hot-swappable)
Dimensions (H x W x D)4.39 x 42.9 x 81.28 cm4.39 x 42.9 x 81.28 cm4.39 x 42.9 x 81.28 cm
Weight19.5 kg19.5 kg20.8 kg

Table 3 4200 Series Chassis Part Numbers #

Part NumberDescription
FPR4200-FTD-HA-BUNCisco Secure Firewall 4200 series Two Unit High Availability Bundle (will order 2 identical chassis and software subscriptions to be configured as a high-availability pair)
FPR4215-BUNCisco Secure Firewall 4215 Master Bundle
FPR4225-BUNCisco Secure Firewall 4225 Master Bundle
FPR4245-BUNCisco Secure Firewall 4245 Master Bundle
FPR4215-ASA-K9Cisco Secure Firewall 4215 ASA Appliance, 1U, 2x NetMod Bays
FPR4215-NGFW-K9Cisco Secure Firewall 4215 NGFW Appliance, 1RU, 2 x Network Module Bays
FPR4225-ASA-K9Cisco Secure Firewall 4225 ASA Appliance, 1RU, 2 x Network Module Bays
FPR4225-NGFW-K9Cisco Secure Firewall 4225 NGFW Appliance, 1RU, 2 x Network Module Bays
FPR4245-ASA-K9Cisco Secure Firewall 4245 ASA Appliance, 1RU, 2 x Network Module Bays
FPR4245-NGFW-K9Cisco Secure Firewall 4245 NGFW Appliance, 1RU, 2 x Network Module Bays

Table 4 Interface Expansion Options #

Part NumberDescription
FPR4K-XNM-8X10GCisco Secure Firewall 4200 8X10G Netmod
FPR4K-XNM-8X25GCisco Secure Firewall 4200 8X25G Netmod
FPR4K-XNM-4X40GCisco Secure Firewall 4200 4X40G Netmod
FPR4K-XNM-4X100GCisco Secure Firewall 4200 4X100G Netmod
FPR4K-XNM-2X100GCisco Secure Firewall 4200 2X100G Netmod
FPR4K-XNM-6X10SRFCisco Secure Firewall 4200 6X10G SR Fiber FTW Netmod
FPR4K-XNM-6X10LRFCisco Secure Firewall 4200 6X10G LR Fiber FTW Netmod
FPR4K-XNM-6X25SRFCisco Secure Firewall 4200 6X25G SR Fiber FTW Netmod
FPR4K-XNM-6X25LRFCisco Secure Firewall 4200 6X25G LR Fiber FTW Netmod
FPR4K-XNM-8X1GFCisco Secure Firewall 4200 8X1G Copper FTW Netmod
FPR4K-XNM-2X400GCisco Secure Firewall 4200 2X400G Netmod

Performance and Features #

Table 5 Cisco Secure Firewall Threat Defense (FTD) #

Feature421542254245
Firewall Throughput90 Gbps95 Gbps180 Gbps
NGFW Throughput65 Gbps80 Gbps140 Gbps
IPS Throughput65 Gbps80 Gbps140 Gbps
Concurrent Sessions15M30M60M
New Connections/sec350K600K800K
TLS Decryption Throughput20 Gbps30 Gbps45 Gbps
IPSec VPN Throughput45 Gbps80 Gbps140 Gbps
Max VPN Peers20,00025,00030,000

Table 6 Cisco Adaptive Security Appliance (ASA) #

Feature421542254245
Stateful Firewall Throughput90 Gbps95 Gbps180 Gbps
Concurrent Connections40M90M180M
New Connections/sec1.4M1.7M2.0M
IPSec VPN Throughput50 Gbps60 Gbps70 Gbps
Max VPN Peers20,00025,00030,000

Use Cases #

Enterprise Edge Security #

  • Protect against zero-day threats, malware, and unauthorized access.
  • Secure internet ingress/egress points with advanced IPS and threat intelligence.

Data Center Security #

  • Deploy as a high-performance firewall with multi-gigabit throughput.
  • Support for multi-instance security virtualization for tenant separation.

SD-WAN Security #

  • Secure branch-to-branch and branch-to-cloud traffic with optimized VPN performance.
  • Integrates with Cisco SD-WAN solutions.

High-Availability and Clustering #

  • Scale out with 16-node clustering for large enterprise and cloud-scale security.