Cisco firewalls: 4 products
In short
Cisco firewall appliances run Threat Defense or ASA software: Secure Firewall 200 for small branches, 1200 for branches, 3100 for campus and 4200 for the largest edges, with Firepower 1000 still orderable. Threat Defense needs a T, TC, TM or TMC licence per appliance. Forever Systems, a Cisco Partner, can quote, supply and install them.
Shop network hardware
Add products and licences to your basket, then check out when you are ready.
Cisco firewall series compared
| Series | Cisco Firewall finder group | Models | Form factor | FW + AVC + IPS throughput (Cisco data sheets) |
|---|---|---|---|---|
| Secure Firewall 200 | Small business and branch | 220, 240P (PoE+) | Compact desktop | 1.5 Gbps (220) and 3 Gbps (240P) |
| Secure Firewall 1200 | Branch | 1210CE, 1210CP (PoE), 1220CX; 1230, 1240, 1250 | Compact desktop or 1U | See the 1200 Series page |
| Secure Firewall 3100 | Campus | 3105, 3110, 3120, 3130, 3140 | 1RU | 10 Gbps (3105) to 45 Gbps (3140) |
| Secure Firewall 4200 (this page) | Data center | 4215, 4225, 4245 | 1RU | 65 Gbps (4215) to 140 Gbps (4245) |
| Firepower 1000 | No longer in the finder; Cisco support page: "Available Order" | 1010, 1010E, 1120, 1140, 1150 | Desktop or 1U | 880 Mbps (1010) to 4.9 Gbps (1150) |
Throughput is Cisco's data-sheet figure with firewall, application visibility and control and IPS turned on, the figure to size on. Each series page links its data sheet. Larger Secure Firewall 6100 Series appliances are quoted on request.
Compare, then add to your basket
Every product in our shop lists its order codes and licences, ready to add.
What you order with a Cisco firewall
A Cisco firewall order has up to four parts, and our basket walks you through them:
- The appliance part number, which also fixes the software image: -TD-K9 (Secure Firewall 200 and 1200) or -NGFW-K9 (3100, 4200 and Firepower 1000) ships with Cisco Firewall Threat Defense; -ASA-K9 ships with ASA.
- Threat Defense feature licences, per appliance, for 1, 3 or 5 years: T (threat/IPS), TC (plus URL filtering), TM (plus malware) or TMC (all three). Cisco says "Threat/IPS (T) License is a requirement for the use of Malware (M) or URL (C) license features". An active/passive HA pair needs a subscription on each unit.
- Management: Firewall Device Manager is on the box; Secure Firewall Management Center or Cisco Security Cloud Control manage many firewalls centrally. ASA uses ASDM, Cisco Security (opens in a new tab) Manager or Security Cloud Control.
- A Cisco Smart Account: Cisco requires Smart Licensing and a Smart Account before Threat Defense is ordered. We can set one up or link yours.
What each licence tier includes, and what a Cisco firewall costs to run, is explained on Cisco firewall licensing (opens in a new tab) on ciscosecure.co.uk.
Threat Defense or ASA?
Threat Defense is Cisco's next-generation firewall image, with intrusion prevention, URL filtering and malware protection under licence; ASA is the stateful firewall and VPN image many networks already run. For a new site, Threat Defense is the usual choice; ASA suits an estate standardised on it. The software is explained on ciscosecure.co.uk: Cisco Secure Firewall (opens in a new tab), Threat Defense (opens in a new tab) and ASA (opens in a new tab).
Not sure what you need?
Tell us about your sites and we will recommend the right kit and licences.
Cisco Secure Firewall 4200 Series
Cisco's Firewall finder lists the 4200 Series under "Data center", and it also suits a large head office or campus internet edge. All three models are 1RU, with 8 x 1/10/25 GbE SFP28 ports and two network module bays, and each is ordered as an -NGFW-K9 (Threat Defense) or -ASA-K9 (ASA) part number:
| Model | Fixed ports | Network module bays | FW + AVC + IPS throughput (1024 byte) |
|---|---|---|---|
| Secure Firewall 4215 (FPR4215) | 8 x 1/10/25 GbE SFP28 | 2 | 65 Gbps |
| Secure Firewall 4225 (FPR4225) | 8 x 1/10/25 GbE SFP28 | 2 | 80 Gbps |
| Secure Firewall 4245 (FPR4245) | 8 x 1/10/25 GbE SFP28 | 2 | 140 Gbps |
Figures are from the Cisco Secure Firewall 4200 data sheet (updated 29 Oct 2024) (opens in a new tab).
Secure Firewall 4200 Series part numbers
Press Add next to a part number to put it in your basket. Where a subscription or support option goes with the hardware, you choose it in the same step and it goes into your basket with the hardware. Part numbers come from the vendor; we confirm each line, quantity and term when we quote.
| Part number | Model | Vendor description | Key specs | What you order with it | Status | Basket |
|---|---|---|---|---|---|---|
| FPR4215-NGFW-K9 | FPR4215 | Cisco Secure Firewall 4215 NGFW Appliance, 1U, 2xNetMod Bays | 8x SFP28 + 2 NM bays; 1U | Threat Defense feature licence (T, TC, TM or TMC), term at quote | Current | |
| FPR4215-ASA-K9 | FPR4215 | Cisco Secure Firewall 4215 ASA Appliance, 1U, 2x NetMod Bays | 8x SFP28 + 2 NM bays; 1U | ASA image: optional strong encryption and security context licences | Current | |
| FPR4225-NGFW-K9 | FPR4225 | Cisco Secure Firewall 4225 NGFW Appliance, 1U, 2xNetMod Bays | 8x SFP28 + 2 NM bays; 1U | Threat Defense feature licence (T, TC, TM or TMC), term at quote | Current | |
| FPR4225-ASA-K9 | FPR4225 | Cisco Secure Firewall 4225 ASA Appliance, 1U, 2x NetMod Bays | 8x SFP28 + 2 NM bays; 1U | ASA image: optional strong encryption and security context licences | Current | |
| FPR4245-NGFW-K9 | FPR4245 | Cisco Secure Firewall 4245 NGFW Appliance, 1U, 2xNetMod Bays | 8x SFP28 + 2 NM bays; 1U | Threat Defense feature licence (T, TC, TM or TMC), term at quote | Current | |
| FPR4245-ASA-K9 | FPR4245 | Cisco Secure Firewall 4245 ASA Appliance, 1U, 2x NetMod Bays | 8x SFP28 + 2 NM bays; 1U | ASA image: optional strong encryption and security context licences | Current |
What you order with a Secure Firewall 4200
Subscription and support part numbers for the hardware above. We confirm the right tier, term and quantity at quote.
Threat Defense licences: FPR4215 appliance (Threat Defense image)
| Part number | Description | Term | Basket |
|---|---|---|---|
| FPR4215-BSE | Cisco Secure Firewall 4215 Base License | term confirmed at quote | |
| FPR4215T-T | Cisco Secure Firewall 4215 Threat Defense License | term confirmed at quote | |
| FPR4215T-TC | Cisco Secure Firewall 4215 TD and URL License | term confirmed at quote | |
| FPR4215T-TM | Cisco Secure Firewall 4215 Threat Defense, Malware License | term confirmed at quote | |
| FPR4215T-TMC | Cisco Secure Firewall 4215 TD, Malware and URL License | term confirmed at quote | |
| L-FPR4215-BSE= | Cisco Secure Firewall 4215 Base License | term confirmed at quote | |
| L-FPR4215T-AMP-1Y | Cisco Secure Firewall 4215 Adv Malware Protection 1Y Subs | 1 year | |
| L-FPR4215T-AMP-3Y | Cisco Secure Firewall 4215 Adv Malware Protection 3Y Subs | 3 years | |
| L-FPR4215T-AMP-5Y | Cisco Secure Firewall 4215 Adv Malware Protection 5Y Subs | 5 years | |
| L-FPR4215T-AMP= | Cisco Secure Firewall 4215 Adv Malware Protection License | term confirmed at quote | |
| L-FPR4215T-T-1Y | Cisco Secure Firewall 4215 Threat Defence 1Y Subs | 1 year | |
| L-FPR4215T-T-3Y | Cisco Secure Firewall 4215 Threat Defence 3Y Subs | 3 years | |
| L-FPR4215T-T-5Y | Cisco Secure Firewall 4215 Threat Defence 5Y Subs | 5 years | |
| L-FPR4215T-T= | Cisco Secure Firewall 4215 Threat Defence License | term confirmed at quote | |
| L-FPR4215T-TC-1Y | Cisco Secure Firewall 4215 TD and URL Filtering 1Y Subs | 1 year | |
| L-FPR4215T-TC-3Y | Cisco Secure Firewall 4215 TD and URL Filtering 3Y Subs | 3 years | |
| L-FPR4215T-TC-5Y | Cisco Secure Firewall 4215 TD and URL Filtering 5Y Subs | 5 years | |
| L-FPR4215T-TC= | Cisco Secure Firewall 4215 TD and URL Filtering License | term confirmed at quote | |
| L-FPR4215T-TM-1Y | Cisco Secure Firewall 4215 Threat Defence and Malware1Y Subs | 1 year | |
| L-FPR4215T-TM-3Y | Cisco Secure Firewall 4215 Threat Defence and Malware3Y Subs | 3 years | |
| L-FPR4215T-TM-5Y | Cisco Secure Firewall 4215 Threat Defence and Malware5Y Subs | 5 years | |
| L-FPR4215T-TM= | Cisco Secure Firewall 4215 Threat Defence and AMP License | term confirmed at quote | |
| L-FPR4215T-TMC-1Y | Cisco Secure Firewall 4215 TD, AMP & URL Filtering 1Y Subs | 1 year | |
| L-FPR4215T-TMC-3Y | Cisco Secure Firewall 4215 TD, AMP & URL Filtering 3Y Subs | 3 years | |
| L-FPR4215T-TMC-5Y | Cisco Secure Firewall 4215 TD, AMP & URL Filtering 5Y Subs | 5 years | |
| L-FPR4215T-TMC= | Cisco Secure Firewall 4215 TD, AMP & URL Filtering License | term confirmed at quote | |
| L-FPR4215T-URL-1Y | Cisco Secure Firewall 4215 URL Filtering 1Y Subs | 1 year | |
| L-FPR4215T-URL-3Y | Cisco Secure Firewall 4215 URL Filtering 3Y Subs | 3 years | |
| L-FPR4215T-URL-5Y | Cisco Secure Firewall 4215 URL Filtering 5Y Subs | 5 years | |
| L-FPR4215T-URL= | Cisco Secure Firewall 4215 URL Filtering License | term confirmed at quote |
Threat Defense licences: FPR4225 appliance (Threat Defense image)
| Part number | Description | Term | Basket |
|---|---|---|---|
| FPR4225-BSE | Cisco Secure Firewall 4225 Base License | term confirmed at quote | |
| FPR4225T-T | Cisco Secure Firewall 4225 Threat Defense License | term confirmed at quote | |
| FPR4225T-TC | Cisco Secure Firewall 4225 TD and URL License | term confirmed at quote | |
| FPR4225T-TM | Cisco Secure Firewall 4225 Threat Defense, Malware License | term confirmed at quote | |
| FPR4225T-TMC | Cisco Secure Firewall 4225 TD, Malware and URL License | term confirmed at quote | |
| L-FPR4225-BSE= | Cisco Secure Firewall 4225 Base License | term confirmed at quote | |
| L-FPR4225T-AMP-1Y | Cisco Secure Firewall 4225 Adv Malware Protection 1Y Subs | 1 year | |
| L-FPR4225T-AMP-3Y | Cisco Secure Firewall 4225 Adv Malware Protection 3Y Subs | 3 years | |
| L-FPR4225T-AMP-5Y | Cisco Secure Firewall 4225 Adv Malware Protection 5Y Subs | 5 years | |
| L-FPR4225T-AMP= | Cisco Secure Firewall 4225 Adv Malware Protection License | term confirmed at quote | |
| L-FPR4225T-T-1Y | Cisco Secure Firewall 4225 Threat Defence 1Y Subs | 1 year | |
| L-FPR4225T-T-3Y | Cisco Secure Firewall 4225 Threat Defence 3Y Subs | 3 years | |
| L-FPR4225T-T-5Y | Cisco Secure Firewall 4225 Threat Defence 5Y Subs | 5 years | |
| L-FPR4225T-T= | Cisco Secure Firewall 4225 Threat Defence License | term confirmed at quote | |
| L-FPR4225T-TC-1Y | Cisco Secure Firewall 4225 TD and URL Filtering 1Y Subs | 1 year | |
| L-FPR4225T-TC-3Y | Cisco Secure Firewall 4225 TD and URL Filtering 3Y Subs | 3 years | |
| L-FPR4225T-TC-5Y | Cisco Secure Firewall 4225 TD and URL Filtering 5Y Subs | 5 years | |
| L-FPR4225T-TC= | Cisco Secure Firewall 4225 TD and URL Filtering License | term confirmed at quote | |
| L-FPR4225T-TM-1Y | Cisco Secure Firewall 4225 Threat Defence and Malware1Y Subs | 1 year | |
| L-FPR4225T-TM-3Y | Cisco Secure Firewall 4225 Threat Defence and Malware3Y Subs | 3 years | |
| L-FPR4225T-TM-5Y | Cisco Secure Firewall 4225 Threat Defence and Malware5Y Subs | 5 years | |
| L-FPR4225T-TM= | Cisco Secure Firewall 4225 Threat Defence and AMP License | term confirmed at quote | |
| L-FPR4225T-TMC-1Y | Cisco Secure Firewall 4225 TD, AMP & URL Filtering 1Y Subs | 1 year | |
| L-FPR4225T-TMC-3Y | Cisco Secure Firewall 4225 TD, AMP & URL Filtering 3Y Subs | 3 years | |
| L-FPR4225T-TMC-5Y | Cisco Secure Firewall 4225 TD, AMP & URL Filtering 5Y Subs | 5 years | |
| L-FPR4225T-TMC= | Cisco Secure Firewall 4225 TD, AMP & URL Filtering License | term confirmed at quote | |
| L-FPR4225T-URL-1Y | Cisco Secure Firewall 3140 URL Filtering 1Y Subs | 1 year | |
| L-FPR4225T-URL-3Y | Cisco Secure Firewall 4225 URL Filtering 3Y Subs | 3 years | |
| L-FPR4225T-URL-5Y | Cisco Secure Firewall 4225 URL Filtering 5Y Subs | 5 years | |
| L-FPR4225T-URL= | Cisco Secure Firewall 4225 URL Filtering License | term confirmed at quote |
Threat Defense licences: FPR4245 appliance (Threat Defense image)
| Part number | Description | Term | Basket |
|---|---|---|---|
| FPR4245-BSE | Cisco Secure Firewall 4245 Base License | term confirmed at quote | |
| FPR4245T-T | Cisco Secure Firewall 4245 Threat Defense License | term confirmed at quote | |
| FPR4245T-TC | Cisco Secure Firewall 4245 TD and URL License | term confirmed at quote | |
| FPR4245T-TM | Cisco Secure Firewall 4245 Threat Defense, Malware License | term confirmed at quote | |
| FPR4245T-TMC | Cisco Secure Firewall 4245 TD, Malware and URL License | term confirmed at quote | |
| L-FPR4245-BSE= | Cisco Secure Firewall 4245 Base License | term confirmed at quote | |
| L-FPR4245T-AMP-1Y | Cisco Secure Firewall 4245 Adv Malware Protection 1Y Subs | 1 year | |
| L-FPR4245T-AMP-3Y | Cisco Secure Firewall 4245 Adv Malware Protection 3Y Subs | 3 years | |
| L-FPR4245T-AMP-5Y | Cisco Secure Firewall 4245 Adv Malware Protection 5Y Subs | 5 years | |
| L-FPR4245T-AMP= | Cisco Secure Firewall 4245 Adv Malware Protection License | term confirmed at quote | |
| L-FPR4245T-T-1Y | Cisco Secure Firewall 4245 Threat Defence 1Y Subs | 1 year | |
| L-FPR4245T-T-3Y | Cisco Secure Firewall 4245 Threat Defence 3Y Subs | 3 years | |
| L-FPR4245T-T-5Y | Cisco Secure Firewall 4245 Threat Defence 5Y Subs | 5 years | |
| L-FPR4245T-T= | Cisco Secure Firewall 4245 Threat Defence License | term confirmed at quote | |
| L-FPR4245T-TC-1Y | Cisco Secure Firewall 4245 TD and URL Filtering 1Y Subs | 1 year | |
| L-FPR4245T-TC-3Y | Cisco Secure Firewall 4245 TD and URL Filtering 3Y Subs | 3 years | |
| L-FPR4245T-TC-5Y | Cisco Secure Firewall 4245 TD and URL Filtering 5Y Subs | 5 years | |
| L-FPR4245T-TC= | Cisco Secure Firewall 4245 TD and URL Filtering License | term confirmed at quote | |
| L-FPR4245T-TM-1Y | Cisco Secure Firewall 4245 Threat Defence and Malware1Y Subs | 1 year | |
| L-FPR4245T-TM-3Y | Cisco Secure Firewall 4245 Threat Defence and Malware3Y Subs | 3 years | |
| L-FPR4245T-TM-5Y | Cisco Secure Firewall 4245 Threat Defence and Malware5Y Subs | 5 years | |
| L-FPR4245T-TM= | Cisco Secure Firewall 4245 Threat Defence and AMP License | term confirmed at quote | |
| L-FPR4245T-TMC-1Y | Cisco Secure Firewall 4245 TD, AMP & URL Filtering 1Y Subs | 1 year | |
| L-FPR4245T-TMC-3Y | Cisco Secure Firewall 4245 TD, AMP & URL Filtering 3Y Subs | 3 years | |
| L-FPR4245T-TMC-5Y | Cisco Secure Firewall 4245 TD, AMP & URL Filtering 5Y Subs | 5 years | |
| L-FPR4245T-TMC= | Cisco Secure Firewall 4245 TD, AMP & URL Filtering License | term confirmed at quote | |
| L-FPR4245T-URL-1Y | Cisco Secure Firewall 3140 URL Filtering 1Y Subs | 1 year | |
| L-FPR4245T-URL-3Y | Cisco Secure Firewall 4245 URL Filtering 3Y Subs | 3 years | |
| L-FPR4245T-URL-5Y | Cisco Secure Firewall 4245 URL Filtering 5Y Subs | 5 years | |
| L-FPR4245T-URL= | Cisco Secure Firewall 4245 URL Filtering License | term confirmed at quote |
Secure Firewall 4200 network modules and accessories
Network modules, power supplies, SSD, rails and ASA add-on licences Cisco lists for the 4200 Series, all orderable in Cisco's price list (8 Nov 2026):
| Part number | Cisco description | Basket |
|---|---|---|
| FPR4200-PWR-AC= | Cisco Secure Firewall 4200 Series AC Power Supply | |
| FPR4200-SSD1800= | Cisco Secure Firewall 4200 Series 1.8TB SSD | |
| FPR4200-SLD-RAILS= | Cisco Secure Firewall 4200 Slide Rail Kit | |
| FPR4200-ACC-KIT= | Cisco Secure Firewall 4200 HW Acc Kit (Rack Mounts, Cables) | |
| FPR4200-FAN= | Cisco Secure Firewall 4200 Series Fan | |
| FPR4200-ENC-K9 | Cisco Secure Firewall 4200 Strong Encryption (3DES/AES) | |
| FPR4200-ASASC-10 | Cisco Secure Firewall 4200 - Add 10 Security Context License | |
| FPR4K-XNM-2X100G= | Cisco Secure Firewall 4200 2X100G QSFP+ Netmod | |
| FPR4K-XNM-2X400G= | Cisco Secure Firewall 4200 2X400G QSFP+ Netmod | |
| FPR4K-XNM-4X200G= | Cisco Secure Firewall 4200 4X200G Netmod | |
| FPR4K-XNM-4X40G= | Cisco Secure Firewall 4200 4X40G QSFP+ Netmod | |
| FPR4K-XNM-6X10LRF= | Cisco Secure Firewall 4200 6X10G FTW Netmod, LR-Singlemode | |
| FPR4K-XNM-6X10SRF= | Cisco Secure Firewall 4200 6X10G FTW Netmod, SR-Multimode | |
| FPR4K-XNM-6X1SXF= | Cisco Secure Firewall 4200 6X1G FTW Netmod, SX-Multimode | |
| FPR4K-XNM-6X25LRF= | Cisco Secure Firewall 4200 6X25G FTW Netmod, LR-Singlemode | |
| FPR4K-XNM-6X25SRF= | Cisco Secure Firewall 4200 6X25G FTW Netmod, SR-Multimode | |
| FPR4K-XNM-8X10G= | Cisco Secure Firewall 4200 8X10G SFP+ Netmod | |
| FPR4K-XNM-8X1GF= | Cisco Secure Firewall 4200 8X1G Copper FTW Netmod, RJ45 | |
| FPR4K-XNM-8X25G= | Cisco Secure Firewall 4200 8X25G ZSFP Netmod |
The FTW modules are Cisco's fail-to-wire network modules. FPR4200-ENC-K9 (strong encryption) and FPR4200-ASASC-10 (10 extra security contexts) are ASA licences. We match modules and optics to your cabling at quote.
Cisco firewall or Meraki MX?
Cisco Secure Firewall is managed on the box or from Management Center or Security Cloud Control; Meraki MX (opens in a new tab) security appliances are run from the Meraki dashboard. ciscosecure.co.uk compares them in Cisco Secure Firewall vs Meraki MX (opens in a new tab). For firewalls from other vendors, see all business firewall appliances; if you would rather we ran the firewall for you, see managed firewall (opens in a new tab) on mssp.org.uk.
Vendor sources
- Cisco Secure Firewall 4200 data sheet (updated 29 Oct 2024) (opens in a new tab)
- Cisco Network Security Ordering Guide (updated 15 Oct 2026) (opens in a new tab)
- Cisco Firewall finder (opens in a new tab)
- Cisco Secure Firewall 200 Series data sheet (updated 6 Oct 2026) (opens in a new tab)
- Cisco Secure Firewall 3100 Series data sheet (updated 6 Oct 2026) (opens in a new tab)
- Cisco Firepower 1000 Series data sheet (updated 23 Oct 2023) (opens in a new tab)
How to order a Cisco firewall
How ordering works. Press Add next to a part number and it goes into your basket; where the hardware needs a subscription or support term, you pick it in the same step. Add any accessories, then View basket and Request a quote. We check every line, quantity and term against your sites and come back with a personalised quote by email. Nothing is charged online. We can also design, supply, stage, install and configure the network as a project, with the scope confirmed at quote (see network installation).
Not sure which series fits? Contact us with your users, internet lines and the services you want to run.
How we can help with your network
Forever Systems can design, supply, stage, install and configure the network around the hardware you buy here, as a project or one step at a time.
- Design: we look at your sites, users and existing kit and size the switches, wireless and firewalls to fit
- Supply: every order gets a personalised quote by part number, with the subscriptions and support each product needs
- Stage: we can pre-configure and label equipment before it reaches site
- Install: we can rack and mount switches, access points and firewalls on site
- Configure: VLANs, wireless, firewall policy, VPNs and management platforms set up and documented at handover
Scope is confirmed at quote, so you only pay for the parts of the project you need.
Frequently asked questions
What is a Cisco hardware firewall?
A Cisco Secure Firewall or Firepower appliance: dedicated hardware that runs Cisco Firewall Threat Defense or ASA software between your network and the internet, with VPNs and, under licence, intrusion prevention, URL filtering and malware protection.
Which Cisco firewall suits a small business?
The Secure Firewall 220 or 240P for a small branch or shop, or the compact 1210CE, 1210CP or 1220CX for a busier office. Tell us your users and internet speed and we will suggest one.
What do -TD-K9, -NGFW-K9 and -ASA-K9 mean?
They show the software image the appliance ships with: -TD-K9 and -NGFW-K9 are Cisco Firewall Threat Defense, -ASA-K9 is ASA.
Do Cisco firewalls need a licence?
Threat Defense features need a T, TC, TM or TMC term licence per appliance, and an HA pair needs one on each unit. ASA appliances run without one and take optional encryption and security context licences.
What is Cisco's enterprise firewall range?
For large campuses and internet edges, the Secure Firewall 3100 and 4200 Series: 1RU appliances from 10 Gbps to 140 Gbps with IPS on, in Cisco's data sheets.
Is the Cisco Firepower 1000 still sold?
Cisco's support page shows the series as "Available Order", though its Firewall finder now lists the Secure Firewall 1200 Series for branches.
Ready to order?
Build your basket and check out when you are ready.