Cisco FPR4225-NGFW-K9 95 Gbps Next-Generation Firewall NGFW Appliance
The Cisco FPR4225-NGFW-K9 is a high-performance next-generation firewall appliance designed for enterprise network security, traffic inspection, VPN connectivity, and resilient security deployments. Its 1RU form factor combines 95 Gbps firewall throughput with advanced NGFW and IPS capabilities, making it suitable for demanding network environments.
The FPR4225 provides 95 Gbps firewall throughput and 80 Gbps NGFW, IPS, Firewall + AVC, and Firewall + AVC + IPS throughput. It supports up to 30 million concurrent sessions with AVC and up to 600,000 new connections per second with AVC. IPsec VPN throughput reaches 60 Gbps with support for up to 25,000 VPN peers.
The appliance includes 8 fixed 1/10/25 Gigabit Ethernet SFP28 ports and 2 additional 1/10/25 Gigabit Ethernet SFP28 management ports. Two hot-swappable network module slots support optional 1/10/25/40/100/200/400 Gbps connectivity depending on the installed module, providing flexibility for different network architectures.
For resilient deployments, the FPR4225 supports active/active and active/standby high availability and clustering of up to 16 units. It includes two security contexts as standard, with support for up to 250 security contexts, allowing segmentation for suitable enterprise network environments.
The firewall supports Cisco Secure Firewall Threat Defense and Cisco Secure ASA software. It includes 512 GB system memory, an RJ-45 serial console port, and a USB 3.0 Type-A port. Front-to-rear airflow and a 0°C to 40°C operating temperature range support integration into compatible rack-based network environments.
Main Features
- 95 Gbps firewall throughput
- 80 Gbps NGFW and IPS throughput
- Up to 30 million concurrent AVC sessions
- 60 Gbps IPsec VPN throughput
- 8 × 1/10/25 Gigabit Ethernet SFP28 fixed ports
- 2 hot-swappable network module slots
- Supports network modules up to 400 Gbps
- Active/active and active/standby high availability
- Supports Cisco Secure Firewall Threat Defense and Cisco Secure ASA
Specifications:
| Product Type |
Next-Generation Firewall Appliance |
| Form Factor |
1RU |
| Network Module Bays |
2 |
| Firewall Throughput |
95 Gbps |
| NGFW Throughput |
80 Gbps |
| IPS Throughput |
80 Gbps |
| Firewall + AVC Throughput |
80 Gbps |
| Firewall + AVC + IPS Throughput |
80 Gbps |
| Maximum Concurrent Sessions with AVC |
30 million |
| New Connections per Second with AVC |
600,000 |
| Stateful Inspection Firewall Throughput |
95 Gbps |
| Stateful Inspection Firewall Throughput — Multiprotocol |
85 Gbps |
| IPsec VPN Throughput |
60 Gbps |
| Maximum VPN Peers |
25,000 |
| Security Contexts |
2 included; 250 maximum |
| High Availability |
Active/active and active/standby |
| Clustering |
Up to 16 |
| Fixed Network Ports |
8 × 1/10/25 Gigabit Ethernet SFP28 |
| Management Ports |
2 × 1/10/25 Gigabit Ethernet SFP28 |
| Network Module Options |
1/10/25/40/100/200/400 Gbps options, depending on module |
| Network Module Slots |
2, hot-swappable |
| System Memory |
512 GB |
| Console Port |
1 × RJ-45 serial |
| USB Port |
1 × USB 3.0 Type-A, 5 W |
| Airflow |
Front-to-rear |
| Chassis Dimensions (H × W × D) |
1.73 × 19.0 × 32.0 in. (4.39 × 48.26 × 81.28 cm) |
| Chassis Weight — Fully Configured |
43 lb (19.5 kg) |
| Chassis Weight — Without PSU, Network/Fan Modules |
33 lb (15 kg) |
| System Power |
870 W |
| AC Power Supply |
1900 W |
| AC Input Voltage |
200–240 VAC (high line) |
| AC Input Frequency |
50–60 Hz |
| Power Supply Redundancy |
1+1 maximum in parallel |
| Operating Temperature |
0–40 °C |
| Nonoperating Temperature |
-40–65 °C |
| Operating Humidity |
5–90% noncondensing |
| Nonoperating Humidity |
5–90% noncondensing |
| Operating Altitude |
Up to 10,000 ft (3,048 m) |
| Nonoperating Altitude |
Up to 40,000 ft (12,192 m) |
| Sound Pressure |
≤78 dBA typical; ≤84 dBA maximum |
| Sound Power |
≤87 dB typical; ≤92 dB maximum |
| Supported Software |
Cisco Secure Firewall Threat Defense and Cisco Secure ASA |
| Part Number |
FPR4225-NGFW-K9 |
