In short
The Cisco Secure Firewall 1200 Series covers branches from small offices (compact 1210CE and 1210CP with 120 W PoE) to larger sites (1U 1230 to 1250 with 10G SFP+). Each PID ships with Threat Defense or ASA; Threat Defense features take a T, TC, TM or TMC licence. Forever Systems, a Cisco Partner, can quote, supply and install them.
Order the Secure Firewall 1200
Add products and licences to your basket, then check out when you are ready.
What the Secure Firewall 1200 Series is
Cisco's Firewall finder lists the 1200 Series as its "Branch" range. The family has "three compact models (1210CE, 1210CP, 1220CX)" that can be "wall-mounted, on a desktop, rack-mounted", and "three 1U rack-mount models (1230, 1240, 1250) for larger branches" (Cisco Network Security (opens in a new tab) Ordering Guide). It is the newer branch range beside the Firepower 1000 Series.
Secure Firewall 1200 models and part numbers
Press Add next to a part number to put it in your basket. Where a subscription or support option goes with the hardware, you choose it in the same step and it goes into your basket with the hardware. Part numbers come from the vendor; we confirm each line, quantity and term when we quote.
| Part number | Model | Vendor description | Key specs | What you order with it | Status | Basket |
|---|---|---|---|---|---|---|
| CSF1210CE-TD-K9 | CSF1210CE | Secure Firewall 1210 Appliance, Compact, Threat Defense | 8x 1000BASE-T; desktop | Threat Defense feature licence (T, TC, TM or TMC), term at quote | Current | |
| CSF1210CE-ASA-K9 | CSF1210CE | Secure Firewall 1210 Appliance, Compact, ASA | 8x 1000BASE-T; desktop | ASA image: optional strong encryption and security context licences | Current | |
| CSF1210CP-TD-K9 | CSF1210CP | Secure Firewall 1210 Appliance, Compact, PoE,Threat Defense | 8x 1000BASE-T; desktop | Threat Defense feature licence (T, TC, TM or TMC), term at quote | Current | |
| CSF1210CP-ASA-K9 | CSF1210CP | Secure Firewall 1210 Appliance, Compact, PoE, ASA | 8x 1000BASE-T; desktop | ASA image: optional strong encryption and security context licences | Current | |
| CSF1220CX-TD-K9 | CSF1220CX | Secure Firewall 1220 Appliance, Compact, Threat Defense | 8x 1000BASE-T + 2x SFP+ 1/10 Gbps; desktop | Threat Defense feature licence (T, TC, TM or TMC), term at quote | Current | |
| CSF1220CX-ASA-K9 | CSF1220CX | Secure Firewall 1220 Appliance, Compact, ASA | 8x 1000BASE-T + 2x SFP+ 1/10 Gbps; desktop | ASA image: optional strong encryption and security context licences | Current | |
| CSF1230-TD-K9 | CSF1230 | Secure Firewall 1230 Appliance, Threat Defense | 8x 1000BASE-T + 4x SFP+ 1/10 Gbps; 1U | Threat Defense feature licence (T, TC, TM or TMC), term at quote | Current | |
| CSF1230-ASA-K9 | CSF1230 | Secure Firewall 1230 Appliance, ASA | 8x 1000BASE-T + 4x SFP+ 1/10 Gbps; 1U | ASA image: optional strong encryption and security context licences | Current | |
| CSF1240-TD-K9 | CSF1240 | Secure Firewall 1240 Appliance, Threat Defense | 8x 1000BASE-T + 4x SFP+ 1/10 Gbps; 1U | Threat Defense feature licence (T, TC, TM or TMC), term at quote | Current | |
| CSF1240-ASA-K9 | CSF1240 | Secure Firewall 1240 Appliance, ASA | 8x 1000BASE-T + 4x SFP+ 1/10 Gbps; 1U | ASA image: optional strong encryption and security context licences | Current | |
| CSF1250-TD-K9 | CSF1250 | Secure Firewall 1250 Appliance, Threat Defense | 8x 2.5GBASE-T + 4x SFP+ 1/10 Gbps; 1U | Threat Defense feature licence (T, TC, TM or TMC), term at quote | Current | |
| CSF1250-ASA-K9 | CSF1250 | Secure Firewall 1250 Appliance, ASA | 8x 2.5GBASE-T + 4x SFP+ 1/10 Gbps; 1U | ASA image: optional strong encryption and security context licences | Current |
Add the Secure Firewall 1200 to your basket
Add it and anything else you need, then check out when you are ready.
Compact or 1U: choosing a model
| Specification | 1210CE | 1210CP | 1220CX | 1230 | 1240 | 1250 |
|---|---|---|---|---|---|---|
| Form factor | compact desktop | compact desktop | compact desktop | 1U | 1U | 1U |
| Interfaces | 8x 1000BASE-T | 8x 1000BASE-T | 8x 1000BASE-T + 2x SFP+ 1/10 Gbps | 8x 1000BASE-T + 4x SFP+ 1/10 Gbps | 8x 1000BASE-T + 4x SFP+ 1/10 Gbps | 8x 2.5GBASE-T + 4x SFP+ 1/10 Gbps |
| PoE | None | 4 ports with PoE delivering up to 120W | None | None | None | None |
| Firewall throughput (Cisco data sheet) | 6.5 Gbps | 6.5 Gbps | 9.0 Gbps | 13 Gbps | 18 Gbps | 24 Gbps |
- 1210CE: eight gigabit ports in a compact box, for a small branch.
- 1210CP: the same with "4 ports with PoE delivering up to 120W", for phones, cameras or an access point.
- 1220CX: compact, with 2 x 1/10G SFP+ for a fibre WAN or uplink.
- 1230 and 1240: 1U with 4 x 1/10G SFP+.
- 1250: 1U with 8 x 2.5GBASE-T and 4 x 1/10G SFP+.
Firewall throughput is Cisco's data-sheet figure for the firewall alone; inspection figures with IPS on are lower and are in the Cisco Secure Firewall 1200 Series data sheet (opens in a new tab). We size the model on the services you will run.
Threat Defense or ASA?
Each model has a -TD-K9 PID (Firewall Threat Defense) and an -ASA-K9 PID (ASA). Threat Defense is managed with Firewall Device Manager on the box, or Secure Firewall Management Center or Cisco Security Cloud Control centrally; ASA with ASDM, Cisco Security Manager or Security Cloud Control. ciscosecure.co.uk explains Threat Defense (opens in a new tab), ASA (opens in a new tab) and Management Center (opens in a new tab).
Not sure what you need?
Tell us about your sites and we will recommend the right kit and licences.
Licences you order with a Threat Defense appliance
Threat Defense features are term licences per appliance (1, 3 or 5 years): T (threat/IPS), TC (plus URL filtering), TM (plus malware) or TMC (all three). Cisco says "Threat/IPS (T) License is a requirement for the use of Malware (M) or URL (C) license features". An HA pair needs a licence on each unit, and a Cisco Smart Account is needed before ordering Threat Defense; we can set up or link yours.
ASA-image appliances take optional ASA licences instead, such as strong encryption (CSF1200-ENCK9) and extra security contexts (CSF1200-ASASC-5, CSF1200-ASASC-10), listed under accessories below. Renewals are on Cisco Secure Firewall licences (opens in a new tab) on softwarelicensing.uk.
What you order with it
Subscription and support part numbers for the hardware above. We confirm the right tier, term and quantity at quote.
Threat Defense licences: CSF1210CE appliance (Threat Defense image)
| Part number | Description | Term | Basket |
|---|---|---|---|
| CSF1210CE-BSE | Secure Firewall 1210CE Essentials License | term confirmed at quote | |
| CSF1210CET-T | CSF 1210CE Threat Defense IPS License | term confirmed at quote | |
| CSF1210CET-TC | CSF 1210CE Threat Defense IPS & URL Filtering License | term confirmed at quote | |
| CSF1210CET-TM | CSF 1210CE Threat Defense IPS & Malware Defense License | term confirmed at quote | |
| CSF1210CET-TMC | CSF 1210CE Threat Defense IPS, Malware & URL License | term confirmed at quote | |
| L-CSF1210CE-AMP-1Y | CSF 1210CE Threat Defense Malware Defense 1Y Subs | 1 year | |
| L-CSF1210CE-AMP-3Y | CSF 1210CE Threat Defense Malware Defense 3Y Subs | 3 years | |
| L-CSF1210CE-AMP-5Y | CSF 1210CE Threat Defense Malware Defense 5Y Subs | 5 years | |
| L-CSF1210CE-BSE= | Secure Firewall 1210CE Essentials License | term confirmed at quote | |
| L-CSF1210CE-T-1Y | CSF 1210CE Threat Defense IPS 1Y Subs | 1 year | |
| L-CSF1210CE-T-3Y | CSF 1210CE Threat Defense IPS 3Y Subs | 3 years | |
| L-CSF1210CE-T-5Y | CSF 1210CE Threat Defense IPS 5Y Subs | 5 years | |
| L-CSF1210CE-TC-1Y | CSF 1210CE Threat Defense IPS & URL Filtering 1Y Subs | 1 year | |
| L-CSF1210CE-TC-3Y | CSF 1210CE Threat Defense IPS & URL Filtering 3Y Subs | 3 years | |
| L-CSF1210CE-TC-5Y | CSF 1210CE Threat Defense IPS & URL Filtering 5Y Subs | 5 years | |
| L-CSF1210CE-TM-1Y | CSF 1210CE Threat Defense IPS & Malware Defense 1Y Subs | 1 year | |
| L-CSF1210CE-TM-3Y | CSF 1210CE Threat Defense IPS & Malware Defense 3Y Subs | 3 years | |
| L-CSF1210CE-TM-5Y | CSF 1210CE Threat Defense IPS & Malware Defense 5Y Subs | 5 years | |
| L-CSF1210CE-TMC-1Y | CSF 1210CE Threat Defense IPS, Malware & URL 1Y Subs | 1 year | |
| L-CSF1210CE-TMC-3Y | CSF 1210CE Threat Defense IPS, Malware & URL 3Y Subs | 3 years | |
| L-CSF1210CE-TMC-5Y | CSF 1210CE Threat Defense IPS, Malware & URL 5Y Subs | 5 years | |
| L-CSF1210CE-URL-1Y | CSF 1210CE Threat Defense URL Filtering 1Y Subs | 1 year | |
| L-CSF1210CE-URL-3Y | CSF 1210CE Threat Defense URL Filtering 3Y Subs | 3 years | |
| L-CSF1210CE-URL-5Y | CSF 1210CE Threat Defense URL Filtering 5Y Subs | 5 years | |
| L-CSF1210CET-AMP= | CSF 1210CE Threat Defense Malware Defense License | term confirmed at quote | |
| L-CSF1210CET-T= | CSF 1210CE Threat Defense IPS License | term confirmed at quote | |
| L-CSF1210CET-TC= | CSF 1210CE Threat Defense IPS & URL Filtering License | term confirmed at quote | |
| L-CSF1210CET-TM= | CSF 1210CE Threat Defense IPS & Malware Defense License | term confirmed at quote | |
| L-CSF1210CET-TMC= | CSF 1210CE Threat Defense IPS, Malware & URL License | term confirmed at quote | |
| L-CSF1210CET-URL= | CSF 1210CE Threat Defense URL Filtering License | term confirmed at quote |
Threat Defense licences: CSF1210CP appliance (Threat Defense image)
| Part number | Description | Term | Basket |
|---|---|---|---|
| CSF1210CP-BSE | Secure Firewall 1210CP Essentials License | term confirmed at quote | |
| CSF1210CPT-T | CSF 1210CP Threat Defense IPS License | term confirmed at quote | |
| CSF1210CPT-TC | CSF 1210CP Threat Defense IPS & URL Filtering License | term confirmed at quote | |
| CSF1210CPT-TM | CSF 1210CP Threat Defense IPS & Malware Defense License | term confirmed at quote | |
| CSF1210CPT-TMC | CSF 1210CP Threat Defense IPS, Malware & URL License | term confirmed at quote | |
| L-CSF1210CP-AMP-1Y | CSF 1210CP Threat Defense Malware Defense 1Y Subs | 1 year | |
| L-CSF1210CP-AMP-3Y | CSF 1210CP Threat Defense Malware Defense 3Y Subs | 3 years | |
| L-CSF1210CP-AMP-5Y | CSF 1210CP Threat Defense Malware Defense 5Y Subs | 5 years | |
| L-CSF1210CP-BSE= | Secure Firewall 1210CP Essentials License | term confirmed at quote | |
| L-CSF1210CP-T-1Y | CSF 1210CP Threat Defense IPS 1Y Subs | 1 year | |
| L-CSF1210CP-T-3Y | CSF 1210CP Threat Defense IPS 3Y Subs | 3 years | |
| L-CSF1210CP-T-5Y | CSF 1210CP Threat Defense IPS 5Y Subs | 5 years | |
| L-CSF1210CP-TC-1Y | CSF 1210CP Threat Defense IPS & URL Filtering 1Y Subs | 1 year | |
| L-CSF1210CP-TC-3Y | CSF 1210CP Threat Defense IPS & URL Filtering 3Y Subs | 3 years | |
| L-CSF1210CP-TC-5Y | CSF 1210CP Threat Defense IPS & URL Filtering 5Y Subs | 5 years | |
| L-CSF1210CP-TM-1Y | CSF 1210CP Threat Defense IPS & Malware Defense 1Y Subs | 1 year | |
| L-CSF1210CP-TM-3Y | CSF 1210CP Threat Defense IPS & Malware Defense 3Y Subs | 3 years | |
| L-CSF1210CP-TM-5Y | CSF 1210CP Threat Defense IPS & Malware Defense 5Y Subs | 5 years | |
| L-CSF1210CP-TMC-1Y | CSF 1210CP Threat Defense IPS, Malware & URL 1Y Subs | 1 year | |
| L-CSF1210CP-TMC-3Y | CSF 1210CP Threat Defense IPS, Malware & URL 3Y Subs | 3 years | |
| L-CSF1210CP-TMC-5Y | CSF 1210CP Threat Defense IPS, Malware & URL 5Y Subs | 5 years | |
| L-CSF1210CP-URL-1Y | CSF 1210CP Threat Defense URL Filtering 1Y Subs | 1 year | |
| L-CSF1210CP-URL-3Y | CSF 1210CP Threat Defense URL Filtering 3Y Subs | 3 years | |
| L-CSF1210CP-URL-5Y | CSF 1210CP Threat Defense URL Filtering 5Y Subs | 5 years | |
| L-CSF1210CPT-AMP= | CSF 1210CP Threat Defense Malware Defense License | term confirmed at quote | |
| L-CSF1210CPT-T= | CSF 1210CP Threat Defense IPS License | term confirmed at quote | |
| L-CSF1210CPT-TC= | CSF 1210CP Threat Defense IPS & URL Filtering License | term confirmed at quote | |
| L-CSF1210CPT-TM= | CSF 1210CP Threat Defense IPS & Malware Defense License | term confirmed at quote | |
| L-CSF1210CPT-TMC= | CSF 1210CP Threat Defense IPS, Malware & URL License | term confirmed at quote | |
| L-CSF1210CPT-URL= | CSF 1210CP Threat Defense URL Filtering License | term confirmed at quote |
Threat Defense licences: CSF1220CX appliance (Threat Defense image)
| Part number | Description | Term | Basket |
|---|---|---|---|
| CSF1220CX-BSE | Secure Firewall 1220C Essentials License | term confirmed at quote | |
| CSF1220CXT-T | CSF 1220CX Threat Defense IPS License | term confirmed at quote | |
| CSF1220CXT-TC | CSF 1220CX Threat Defense IPS & URL Filtering License | term confirmed at quote | |
| CSF1220CXT-TM | CSF 1220CX Threat Defense IPS & Malware Defense License | term confirmed at quote | |
| CSF1220CXT-TMC | CSF 1220CX Threat Defense IPS, Malware & URL License | term confirmed at quote | |
| L-CSF1220CX-AMP-1Y | CSF 1220CX Threat Defense Malware Defense 1Y Subs | 1 year | |
| L-CSF1220CX-AMP-3Y | CSF 1220CX Threat Defense Malware Defense 3Y Subs | 3 years | |
| L-CSF1220CX-AMP-5Y | CSF 1220CX Threat Defense Malware Defense 5Y Subs | 5 years | |
| L-CSF1220CX-BSE= | Secure Firewall 1220CX Essentials License | term confirmed at quote | |
| L-CSF1220CX-T-1Y | CSF 1220CX Threat Defense IPS 1Y Subs | 1 year | |
| L-CSF1220CX-T-3Y | CSF 1220CX Threat Defense IPS 3Y Subs | 3 years | |
| L-CSF1220CX-T-5Y | CSF 1220CX Threat Defense IPS 5Y Subs | 5 years | |
| L-CSF1220CX-TC-1Y | CSF 1220CX Threat Defense IPS & URL Filtering 1Y Subs | 1 year | |
| L-CSF1220CX-TC-3Y | CSF 1220CX Threat Defense IPS & URL Filtering 3Y Subs | 3 years | |
| L-CSF1220CX-TC-5Y | CSF 1220CX Threat Defense IPS & URL Filtering 5Y Subs | 5 years | |
| L-CSF1220CX-TM-1Y | CSF 1220CX Threat Defense IPS & Malware Defense 1Y Subs | 1 year | |
| L-CSF1220CX-TM-3Y | CSF 1220CX Threat Defense IPS & Malware Defense 3Y Subs | 3 years | |
| L-CSF1220CX-TM-5Y | CSF 1220CX Threat Defense IPS & Malware Defense 5Y Subs | 5 years | |
| L-CSF1220CX-TMC-1Y | CSF 1220CX Threat Defense IPS, Malware & URL 1Y Subs | 1 year | |
| L-CSF1220CX-TMC-3Y | CSF 1220CX Threat Defense IPS, Malware & URL 3Y Subs | 3 years | |
| L-CSF1220CX-TMC-5Y | CSF 1220CX Threat Defense IPS, Malware & URL 5Y Subs | 5 years | |
| L-CSF1220CX-URL-1Y | CSF 1220CX Threat Defense URL Filtering 1Y Subs | 1 year | |
| L-CSF1220CX-URL-3Y | CSF 1220CX Threat Defense URL Filtering 3Y Subs | 3 years | |
| L-CSF1220CX-URL-5Y | CSF 1220CX Threat Defense URL Filtering 5Y Subs | 5 years | |
| L-CSF1220CXT-AMP= | CSF 1220CX Threat Defense Malware Defense License | term confirmed at quote | |
| L-CSF1220CXT-T= | CSF 1220CX Threat Defense IPS License | term confirmed at quote | |
| L-CSF1220CXT-TC= | CSF 1220CX Threat Defense IPS & URL Filtering License | term confirmed at quote | |
| L-CSF1220CXT-TM= | CSF 1220CX Threat Defense IPS & Malware Defense License | term confirmed at quote | |
| L-CSF1220CXT-TMC= | CSF 1220CX Threat Defense IPS, Malware & URL License | term confirmed at quote | |
| L-CSF1220CXT-URL= | CSF 1220CX Threat Defense URL Filtering License | term confirmed at quote |
Threat Defense licences: CSF1230 appliance (Threat Defense image)
| Part number | Description | Term | Basket |
|---|---|---|---|
| CSF1230-BSE | Secure Firewall 1230 Essentials License | term confirmed at quote | |
| CSF1230T-T | CSF 1230 Threat Defense IPS License | term confirmed at quote | |
| CSF1230T-TC | CSF 1230 Threat Defense IPS & URL Filtering License | term confirmed at quote | |
| CSF1230T-TM | CSF 1230 Threat Defense IPS & Malware Defense License | term confirmed at quote | |
| CSF1230T-TMC | CSF 1230 Threat Defense IPS, Malware & URL License | term confirmed at quote | |
| L-CSF1230-AMP-1Y | CSF 1230 Threat Defense Malware Defense 1Y Subs | 1 year | |
| L-CSF1230-AMP-3Y | CSF 1230 Threat Defense Malware Defense 3Y Subs | 3 years | |
| L-CSF1230-AMP-5Y | CSF 1230 Threat Defense Malware Defense 5Y Subs | 5 years | |
| L-CSF1230-BSE= | Secure Firewall 1230 Essentials License | term confirmed at quote | |
| L-CSF1230-T-1Y | CSF 1230 Threat Defense IPS 1Y Subs | 1 year | |
| L-CSF1230-T-3Y | CSF 1230 Threat Defense IPS 3Y Subs | 3 years | |
| L-CSF1230-T-5Y | CSF 1230 Threat Defense IPS 5Y Subs | 5 years | |
| L-CSF1230-TC-1Y | CSF 1230 Threat Defense IPS & URL Filtering 1Y Subs | 1 year | |
| L-CSF1230-TC-3Y | CSF 1230 Threat Defense IPS & URL Filtering 3Y Subs | 3 years | |
| L-CSF1230-TC-5Y | CSF 1230 Threat Defense IPS & URL Filtering 5Y Subs | 5 years | |
| L-CSF1230-TM-1Y | CSF 1230 Threat Defense IPS & Malware Defense 1Y Subs | 1 year | |
| L-CSF1230-TM-3Y | CSF 1230 Threat Defense IPS & Malware Defense 3Y Subs | 3 years | |
| L-CSF1230-TM-5Y | CSF 1230 Threat Defense IPS & Malware Defense 5Y Subs | 5 years | |
| L-CSF1230-TMC-1Y | CSF 1230 Threat Defense IPS, Malware & URL 1Y Subs | 1 year | |
| L-CSF1230-TMC-3Y | CSF 1230 Threat Defense IPS, Malware & URL 3Y Subs | 3 years | |
| L-CSF1230-TMC-5Y | CSF 1230 Threat Defense IPS, Malware & URL 5Y Subs | 5 years | |
| L-CSF1230-URL-1Y | CSF 1230 Threat Defense URL Filtering 1Y Subs | 1 year | |
| L-CSF1230-URL-3Y | CSF 1230 Threat Defense URL Filtering 3Y Subs | 3 years | |
| L-CSF1230-URL-5Y | CSF 1230 Threat Defense URL Filtering 5Y Subs | 5 years | |
| L-CSF1230T-AMP= | CSF 1230 Threat Defense Malware Defense License | term confirmed at quote | |
| L-CSF1230T-T= | CSF 1230 Threat Defense IPS License | term confirmed at quote | |
| L-CSF1230T-TC= | CSF 1230 Threat Defense IPS & URL Filtering License | term confirmed at quote | |
| L-CSF1230T-TM= | CSF 1230 Threat Defense IPS & Malware Defense License | term confirmed at quote | |
| L-CSF1230T-TMC= | CSF 1230 Threat Defense IPS, Malware & URL License | term confirmed at quote | |
| L-CSF1230T-URL= | CSF 1230 Threat Defense URL Filtering License | term confirmed at quote |
Threat Defense licences: CSF1240 appliance (Threat Defense image)
| Part number | Description | Term | Basket |
|---|---|---|---|
| CSF1240-BSE | Secure Firewall 1240 Essentials License | term confirmed at quote | |
| CSF1240T-T | CSF 1240 Threat Defense IPS License | term confirmed at quote | |
| CSF1240T-TC | CSF 1240 Threat Defense IPS & URL Filtering License | term confirmed at quote | |
| CSF1240T-TM | CSF 1240 Threat Defense IPS & Malware Defense License | term confirmed at quote | |
| CSF1240T-TMC | CSF 1240 Threat Defense IPS, Malware & URL License | term confirmed at quote | |
| L-CSF1240-AMP-1Y | CSF 1240 Threat Defense Malware Defense 1Y Subs | 1 year | |
| L-CSF1240-AMP-3Y | CSF 1240 Threat Defense Malware Defense 3Y Subs | 3 years | |
| L-CSF1240-AMP-5Y | CSF 1240 Threat Defense Malware Defense 5Y Subs | 5 years | |
| L-CSF1240-BSE= | Secure Firewall 1240 Essentials License | term confirmed at quote | |
| L-CSF1240-T-1Y | CSF 1240 Threat Defense IPS 1Y Subs | 1 year | |
| L-CSF1240-T-3Y | CSF 1240 Threat Defense IPS 3Y Subs | 3 years | |
| L-CSF1240-T-5Y | CSF 1240 Threat Defense IPS 5Y Subs | 5 years | |
| L-CSF1240-TC-1Y | CSF 1240 Threat Defense IPS & URL Filtering 1Y Subs | 1 year | |
| L-CSF1240-TC-3Y | CSF 1240 Threat Defense IPS & URL Filtering 3Y Subs | 3 years | |
| L-CSF1240-TC-5Y | CSF 1240 Threat Defense IPS & URL Filtering 5Y Subs | 5 years | |
| L-CSF1240-TM-1Y | CSF 1240 Threat Defense IPS & Malware Defense 1Y Subs | 1 year | |
| L-CSF1240-TM-3Y | CSF 1240 Threat Defense IPS & Malware Defense 3Y Subs | 3 years | |
| L-CSF1240-TM-5Y | CSF 1240 Threat Defense IPS & Malware Defense 5Y Subs | 5 years | |
| L-CSF1240-TMC-1Y | CSF 1240 Threat Defense IPS, Malware & URL 1Y Subs | 1 year | |
| L-CSF1240-TMC-3Y | CSF 1240 Threat Defense IPS, Malware & URL 3Y Subs | 3 years | |
| L-CSF1240-TMC-5Y | CSF 1240 Threat Defense IPS, Malware & URL 5Y Subs | 5 years | |
| L-CSF1240-URL-1Y | CSF 1240 Threat Defense URL Filtering 1Y Subs | 1 year | |
| L-CSF1240-URL-3Y | CSF 1240 Threat Defense URL Filtering 3Y Subs | 3 years | |
| L-CSF1240-URL-5Y | CSF 1240 Threat Defense URL Filtering 5Y Subs | 5 years | |
| L-CSF1240T-AMP= | CSF 1240 Threat Defense Malware Defense License | term confirmed at quote | |
| L-CSF1240T-T= | CSF 1240 Threat Defense IPS License | term confirmed at quote | |
| L-CSF1240T-TC= | CSF 1240 Threat Defense IPS & URL Filtering License | term confirmed at quote | |
| L-CSF1240T-TM= | CSF 1240 Threat Defense IPS & Malware Defense License | term confirmed at quote | |
| L-CSF1240T-TMC= | CSF 1240 Threat Defense IPS, Malware & URL License | term confirmed at quote | |
| L-CSF1240T-URL= | CSF 1240 Threat Defense URL Filtering License | term confirmed at quote |
Threat Defense licences: CSF1250 appliance (Threat Defense image)
| Part number | Description | Term | Basket |
|---|---|---|---|
| CSF1250-BSE | Secure Firewall 1250 Essentials License | term confirmed at quote | |
| CSF1250T-T | CSF 1250 Threat Defense IPS License | term confirmed at quote | |
| CSF1250T-TC | CSF 1250 Threat Defense IPS & URL Filtering License | term confirmed at quote | |
| CSF1250T-TM | CSF 1250 Threat Defense IPS & Malware Defense License | term confirmed at quote | |
| CSF1250T-TMC | CSF 1250 Threat Defense IPS, Malware & URL License | term confirmed at quote | |
| L-CSF1250-AMP-1Y | CSF 1250 Threat Defense Malware Defense 1Y Subs | 1 year | |
| L-CSF1250-AMP-3Y | CSF 1250 Threat Defense Malware Defense 3Y Subs | 3 years | |
| L-CSF1250-AMP-5Y | CSF 1250 Threat Defense Malware Defense 5Y Subs | 5 years | |
| L-CSF1250-BSE= | Secure Firewall 1250 Essentials License | term confirmed at quote | |
| L-CSF1250-T-1Y | CSF 1250 Threat Defense IPS 1Y Subs | 1 year | |
| L-CSF1250-T-3Y | CSF 1250 Threat Defense IPS 3Y Subs | 3 years | |
| L-CSF1250-T-5Y | CSF 1250 Threat Defense IPS 5Y Subs | 5 years | |
| L-CSF1250-TC-1Y | CSF 1250 Threat Defense IPS & URL Filtering 1Y Subs | 1 year | |
| L-CSF1250-TC-3Y | CSF 1250 Threat Defense IPS & URL Filtering 3Y Subs | 3 years | |
| L-CSF1250-TC-5Y | CSF 1250 Threat Defense IPS & URL Filtering 5Y Subs | 5 years | |
| L-CSF1250-TM-1Y | CSF 1250 Threat Defense IPS & Malware Defense 1Y Subs | 1 year | |
| L-CSF1250-TM-3Y | CSF 1250 Threat Defense IPS & Malware Defense 3Y Subs | 3 years | |
| L-CSF1250-TM-5Y | CSF 1250 Threat Defense IPS & Malware Defense 5Y Subs | 5 years | |
| L-CSF1250-TMC-1Y | CSF 1250 Threat Defense IPS, Malware & URL 1Y Subs | 1 year | |
| L-CSF1250-TMC-3Y | CSF 1250 Threat Defense IPS, Malware & URL 3Y Subs | 3 years | |
| L-CSF1250-TMC-5Y | CSF 1250 Threat Defense IPS, Malware & URL 5Y Subs | 5 years | |
| L-CSF1250-URL-1Y | CSF 1250 Threat Defense URL Filtering 1Y Subs | 1 year | |
| L-CSF1250-URL-3Y | CSF 1250 Threat Defense URL Filtering 3Y Subs | 3 years | |
| L-CSF1250-URL-5Y | CSF 1250 Threat Defense URL Filtering 5Y Subs | 5 years | |
| L-CSF1250T-AMP= | CSF 1250 Threat Defense Malware Defense License | term confirmed at quote | |
| L-CSF1250T-T= | CSF 1250 Threat Defense IPS License | term confirmed at quote | |
| L-CSF1250T-TC= | CSF 1250 Threat Defense IPS & URL Filtering License | term confirmed at quote | |
| L-CSF1250T-TM= | CSF 1250 Threat Defense IPS & Malware Defense License | term confirmed at quote | |
| L-CSF1250T-TMC= | CSF 1250 Threat Defense IPS, Malware & URL License | term confirmed at quote | |
| L-CSF1250T-URL= | CSF 1250 Threat Defense URL Filtering License | term confirmed at quote |
Mounting, power and storage accessories
Accessories and ASA add-on licences Cisco lists for the 1200 Series:
| Part number | Vendor description | Type | Basket |
|---|---|---|---|
| CSF1200C-RACK-MNT= | Secure Firewall 1200 Series rackmount kit for compact models | Accessory | |
| CSF1200C-WALL-MNT= | Secure Firewall 1200 Series wall-mount kit (compact models) | Accessory | |
| CSF1200-SSD960= | Secure Firewall 1200 Series SSD, 960 GB | Accessory | |
| CSF1200C-PWR-AC= | Secure Firewall 1200 Series external PSU for compact models | Accessory | |
| CSF1200CP-PWR-AC= | Secure Firewall 1200 Series PSU, compact models with PoE | Accessory | |
| CSF1200C-RPS | CSF1210CE and CSF1220CX Redundant Power Supply bundle | Accessory | |
| CSF1200-BRKT= | Secure Firewall 1200 Series rack mount brackets | Accessory | |
| CSF1200-CBL-MGMT= | Secure Firewall 1200 Series cable management accessory | Accessory | |
| CAB-CONS-USB-C= | Console cable, USB-C to USB-C, 6ft | Accessory | |
| CSF1200-ENCK9 | Secure Firewall 1200 Strong Encryption for ASA | Accessory | |
| CSF1200-ASASC-5 | Secure Firewall 1200 - Add 5 Security Context Licenses | Accessory | |
| CSF1200-ASASC-10 | Secure Firewall 1200 - Add 10 Security Context Licenses | Accessory |
The compact models take the CSF1200C rack and wall kits; CSF1200C-RPS is Cisco's redundant power supply bundle for the 1210CE and 1220CX.
Replacing a Firepower 1000
Cisco's Firewall finder now shows the 1200 Series for branches, and the Firepower 1000 Series no longer appears there, although Cisco's support page still shows it as available to order. For a Firepower 1010, the 1210CE or 1210CP (with PoE) is the natural comparison; for a 1120, 1140 or 1150, the 1220CX or a 1U 1230 to 1250. We can migrate the Threat Defense or ASA configuration, with the scope confirmed at quote.
How to order
How ordering works. Press Add next to a part number and it goes into your basket; where a security subscription or support contract goes with the firewall, you choose it in the same step. Add any accessories, then View basket and Request a quote. We check every line, quantity and term against your sites and come back with a personalised quote by email. Nothing is charged online. We can also design, supply, stage, install and configure the firewalls, VPNs and policies as a project, with the scope confirmed at quote (see network installation).
Vendor sources
How we can help with your network
Forever Systems can design, supply, stage, install and configure the network around the hardware you buy here, as a project or one step at a time.
- Design: we look at your sites, users and existing kit and size the switches, wireless and firewalls to fit
- Supply: every order gets a personalised quote by part number, with the subscriptions and support each product needs
- Stage: we can pre-configure and label equipment before it reaches site
- Install: we can rack and mount switches, access points and firewalls on site
- Configure: VLANs, wireless, firewall policy, VPNs and management platforms set up and documented at handover
Scope is confirmed at quote, so you only pay for the parts of the project you need.
Frequently asked questions
What models are in the Cisco Secure Firewall 1200 Series?
Three compact models (1210CE, 1210CP with PoE, 1220CX) and three 1U rack-mount models (1230, 1240, 1250), each with a Threat Defense (-TD-K9) and an ASA (-ASA-K9) PID.
Which Secure Firewall 1200 has PoE?
The 1210CP, with 4 ports delivering up to 120 W of PoE in Cisco's data sheet.
What is the difference between the 1210CE and 1220CX?
The 1220CX adds 2 x 1/10G SFP+ ports and has a higher firewall throughput figure (9 Gbps against 6.5 Gbps in Cisco's data sheet).
Does the Secure Firewall 1200 need a licence?
Threat Defense features need a T, TC, TM or TMC term licence per appliance. ASA-image units can add optional strong encryption and security context licences.
Is the Secure Firewall 1200 the replacement for the Firepower 1000?
Cisco's Firewall finder now lists the 1200 Series for branches and no longer shows the Firepower 1000, which Cisco's support page still lists as available to order.
Ready to order?
Build your basket and check out when you are ready.