Cisco Firepower 4100 Series Firewalls

Cisco Firepower 4100 Series firewalls are high-performance security appliances for data center edges, service provider networks, and large enterprise perimeters where throughput, HA, clustering, VPN capacity, lifecycle status, and interface planning affect the final purchase decision. Compare FPR4110, FPR4120, FPR4140, FPR4150, and newer 4112, 4115, 4125, 4145 options by ASA or FTD mode, licenses, network modules, support renewal, replacement path, and quote requirements.

Talk to an expert
  • FPR4112-ASA-K9

    FPR4112-ASA-K9

    Original price was: $116,252.76.Current price is: $43,397.87. Condition: New Factory Sealed

    40G ASA Firewall – 8x10G SFP+ – 2 NM Bays

  • FPR4112-NGFW-K9

    FPR4112-NGFW-K9

    Original price was: $116,252.76.Current price is: $34,883.37. Condition: New Factory Sealed

    40G NGFW Firewall – 8x10G SFP+ – 2 NM Bays

  • FPR4115-ASA-K9

    FPR4115-ASA-K9

    Original price was: $155,005.77.Current price is: $57,864.72. Condition: New Factory Sealed

    80G ASA Firewall – 8x10G SFP+ – 2 NM Bays

  • FPR4115-NGFW-K9

    FPR4115-NGFW-K9

    Original price was: $155,005.77.Current price is: $44,298.10. Condition: New Factory Sealed

    80G Firewall – 33G NGFW – 8x10G SFP+

  • FPR4125-ASA-K9

    FPR4125-ASA-K9

    Original price was: $245,429.46.Current price is: $91,620.82. Condition: New Factory Sealed

    80G ASA Firewall – 45G Multiprotocol – 800GB SSD

  • FPR4125-NGFW-K9

    FPR4125-NGFW-K9

    Original price was: $245,429.46.Current price is: $73,644.76. Condition: New Factory Sealed

    80G Firewall – 45G NGFW – 800GB SSD

  • FPR4145-ASA-K9

    FPR4145-ASA-K9

    Original price was: $322,935.48.Current price is: $120,553.92. Condition: New Factory Sealed

    80G ASA Firewall – 50G Multiprotocol – 384GB Memory

  • FPR4145-NGFW-K9

    FPR4145-NGFW-K9

    Original price was: $322,935.48.Current price is: $96,901.60. Condition: New Factory Sealed

    80G Firewall – 53G NGFW – 384GB Memory

Questions & Answers

Q: What is the Cisco Firepower 4100 Series used for?
A:

Cisco Firepower 4100 Series appliances are used for internet edge, data center, service provider, and large enterprise firewall roles where buyers need high throughput, VPN capacity, HA, clustering, and NGFW inspection in a compact 1RU platform.

Q: Which Cisco Firepower 4100 models should I compare before buying?
A:

Compare the original FPR4110, FPR4120, FPR4140, and FPR4150 with later 4112, 4115, 4125, and 4145 models. The right choice depends on firewall throughput, IPS performance, VPN peer count, software mode, lifecycle status, interface modules, power supplies, and whether the unit is for expansion, spare replacement, or migration planning.

Q: Is the Cisco Firepower 4100 Series end of sale?
A:

Yes. Cisco announced end-of-sale and end-of-life milestones for the Firepower 4100 Series, with the last order date through Cisco point-of-sale listed as January 6, 2026. Buyers now usually evaluate remaining support windows, replacement parts, license renewal limits, secondary-market availability, and migration to Cisco Secure Firewall 4200 Series.

Q: Should I buy a Firepower 4100 or migrate to Firepower 4200?
A:

Buy Firepower 4100 mainly when you need a compatible spare, HA match, module replacement, ASA-mode continuity, or a short-term lifecycle bridge. For new deployments, long support runway, and cleaner standardization, compare Cisco Secure Firewall 4200 Series sizing, licensing, software support, lead time, and total refresh cost.

Show More
Show Less

The Firepower 4100 Series — now sold as the Cisco Secure Firewall 4100 — is Cisco’s high-throughput NGFW tier in a single rack unit. Four models are in production: the 4112, 4115, 4125, and 4145. On paper they look alike, since each pairs a Secure Firewall 4000 Supervisor, eight on-chassis 10G SFP+ ports, and two network-module slots with a choice of ASA or Threat Defense software. What separates them is headroom: ASA stateful firewall throughput is 40 Gbps on the 4112 and 80 Gbps across the other three, while Threat Defense inspection (FW+AVC+IPS) runs from 19 Gbps on the 4112 up to 53 Gbps on the 4145.

Secure Firewall 4100 Models Compared: 4112, 4115, 4125 and 4145

Read the table by Threat Defense throughput rather than ASA. Three of the four models share the same 80 Gbps ASA ceiling, so the FTD inspection figure and session capacity are what actually move between tiers.

Model Stateful firewall throughput (ASA) Threat Defense throughput (FW+AVC+IPS, 1024B) Max concurrent sessions (FTD) Storage Power Buy
Firepower 4112 40 Gbps 19 Gbps 10 million 400 GB Single 1100W AC (dual optional) ASA / NGFW
Firepower 4115 80 Gbps 33 Gbps 15 million 400 GB Single 1100W AC (dual optional) ASA / NGFW
Firepower 4125 80 Gbps 45 Gbps 25 million 800 GB Dual 1100W AC ASA / NGFW
Firepower 4145 80 Gbps 53 Gbps 30 million 800 GB Dual 1100W AC ASA / NGFW

The platform underneath is identical on every model — a Secure Firewall 4000 Supervisor, eight 10G SFP+ ports, two network-module slots for 1/10/40/100G expansion, multi-instance support, and clustering of up to 16 appliances. Two things break that symmetry. The 4125 is the only NEBS-compliant model in the series, and dual power is standard only on the 4125 and 4145; the 4112 and 4115 ship with one 1100W AC supply and take a second for 1+1 redundancy.

Which Firepower 4100 Model Fits Your Deployment?

Since the chassis, port layout, and clustering are the same across the range, the model decision comes down to inspection throughput and session scale.

    • The 4112 is the entry point. Take it when you want the 4100 architecture — multi-instance, module expansion, clustering — but only need up to 19 Gbps of Threat Defense throughput and 10 million sessions.

    • The 4115 earns its place when you need the full 80 Gbps ASA ceiling but 33 Gbps of inspection and 15 million sessions are enough.

    • Specify the 4125 for heavier inspection (45 Gbps), 25 million sessions and 800 GB of storage, dual power as standard, or a NEBS requirement — it is the only model that meets NEBS.

    • At the top, the 4145 pushes Threat Defense throughput to 53 Gbps and 30 million sessions, with dual 1100W supplies out of the box.

One sizing trap is worth calling out: the 4115, 4125, and 4145 all advertise 80 Gbps of ASA throughput, but that is not the number you live with once AVC and IPS are switched on. Size on Threat Defense throughput — 33, 45, and 53 Gbps respectively — and the real gaps between the models reappear.

ASA or Threat Defense: Picking the 4100 Software Image

The hardware does not change between the two part numbers; the software image does. An -ASA-K9 unit (FPR4112-ASA-K9 through FPR4145-ASA-K9) ships with Cisco Secure Firewall ASA and is driven from the CLI or ASDM — the natural pick if your team already runs ASA policy. An -NGFW-K9 unit (FPR4112-NGFW-K9 through FPR4145-NGFW-K9) ships with Threat Defense (FTD) and is managed from Firewall Management Center or Cisco Defense Orchestrator for unified NGFW and IPS policy.

Treat the two decisions as independent: choose the model for throughput, the image for your management stack. Because the same chassis carries either image, the only thing to lock down before ordering is which one your platform expects.

Buying a Firepower 4100 from Layer23-Switch

Every 4100 we ship is brand-new, original Cisco hardware, covered by a 3-year warranty and RMA support, with global delivery. Layer23-Switch is a Cisco certified partner. Prices and current stock sit on each model’s page; because 4100-class units tend to move in project quantities and lead times shift, it is worth confirming availability on the exact ASA or NGFW part number before you commit a BOM.