Image: Cisco. Manufacturer image; units ship in manufacturer packaging.
Cisco, 1120, Threat Defense (NGFW), new
Cisco Firepower 1120 Next-Generation Firewall Appliance, 1RU (FPR1120-NGFW-K9)
The Cisco Firepower 1120 (FPR1120-NGFW-K9) is a 1RU next-generation firewall with eight Gigabit RJ-45 ports and four SFP ports, rated at 2.3 Gbps of firewall throughput with application visibility and intrusion prevention enabled. It is for branch offices, small campuses and internet edges that need a managed NGFW with VPN.
USD 3,061per unit, excl. VAT and duties
10 plus available
- Exact part number FPR1120-NGFW-K9. No edition substitution without your written approval.
- Original manufacturer hardware. Condition, licence registration and warranty route confirmed on your invoice.
- Typically 3 to 7 business days after cleared payment. DAP (Delivered at Place) by default, other terms on request.
- Card (Visa, Mastercard) with 3-D Secure. Bank transfer against pro forma invoice. Card details are entered on Network International's secure payment page, never on our servers.
- Full refund if we cannot approve or deliver your order. Payments are non-refundable if you cancel after paying.
Offer terms
- Availability
- Verified stock, 10 plus available
- Unit price
- USD 3,061 per unit
- Minimum order
- 1 unit
- Ships from
- Dubai or Singapore hub, confirmed on order
- Dispatch
- Typically 3 to 7 business days after cleared payment
- Incoterm
- DAP (Delivered at Place) by default, other terms on request
- Tax and duties
- Prices in USD, excluding UAE VAT, duties and import taxes. UAE deliveries add 5% VAT.
- Payment
- Card (Visa, Mastercard) with 3-D Secure; Bank transfer against pro forma invoice
- Condition
- New, factory sealed
Overview
The Firepower 1120 sits in the middle of the Firepower 1000 range. Running Cisco Secure Firewall Threat Defense (FTD), it delivers 2.3 Gbps with firewall, application visibility and control (AVC) and IPS, 2.6 Gbps of NGIPS, 850 Mbps of TLS inspection and 1.2 Gbps of IPsec VPN, with up to 200,000 concurrent sessions and 150 VPN peers. It has a 200 GB SSD, one integrated fan and a single integrated AC supply.
It can be managed locally with Cisco Device Manager, centrally with the Firewall Management Center, or from the cloud. AVC, Security Intelligence and OpenAppID are standard; IPS, malware defense and URL filtering are enabled by term subscriptions activated in the buyer's Cisco Smart Account. The same hardware can also run Cisco ASA software, which supports security contexts and active/active failover; the NGFW order code is the Threat Defense version.
Because it contains encryption, this appliance is subject to export control regulations, and the destination and end user may need to be confirmed before it ships.
Typical uses
- Branch and small office internet edge
- Site-to-site and remote access VPN
- Intrusion prevention and URL filtering
- Segmentation of OT or guest networks
Specifications
| Firewall + AVC (1024B) | 2.3 Gbps |
|---|---|
| Firewall + AVC + IPS (1024B) | 2.3 Gbps |
| NGIPS (1024B) | 2.6 Gbps |
| TLS inspection | 850 Mbps |
| IPsec VPN (1024B TCP, fastpath) | 1.2 Gbps |
| ASA stateful firewall (1500B UDP) | 4.5 Gbps |
| Concurrent sessions with AVC | 200,000 |
|---|---|
| New connections per second with AVC | 15,000 |
| Maximum VPN peers | 150 |
| Network ports | 8x RJ-45, 4x SFP |
|---|---|
| Management | 1x 1000BASE-T, 1x RJ-45 serial console, 1x USB 3.0 |
| Storage | 1x 200 GB |
|---|
| Power supply | Integrated, single AC input, 100 to 240 VAC |
|---|---|
| Maximum power draw | 100 W |
| Dimensions (H x W x D) | 1.72 x 17.2 x 10.58 in, 1RU |
|---|---|
| Weight | 3.6 kg (8 lb) |
| Operating temperature | 0 to 40°C |
|---|
| High availability (FTD) | Active/standby |
|---|
Source: manufacturer documentation, checked 22 October 2026. Tensor figures follow NVIDIA's stated basis; sparse figures are marked.
Edition and part numbers
FPR1120-NGFW-K9 is ordered as the Threat Defense (NGFW) version; FPR1120-ASA-K9 is the same hardware ordered with ASA software. The Firepower 1140 has the same ports with higher throughput, the 1150 swaps two SFP ports for 10G SFP+, and the desktop 1010 has eight RJ-45 ports including two PoE+.
Delivery and warranty
Delivery. Typically 3 to 7 business days after cleared payment. DAP (Delivered at Place) by default, other terms on request. Shipments are insured to declared value and tracked. Delivery to every destination is subject to export and sanctions screening; see export compliance.
Warranty. Original manufacturer hardware. Condition, licence registration and warranty route confirmed on your invoice. Keep serial numbers with your invoice; our warranty and RMA process explains how claims are handled.
Cancellation. Payments are non-refundable if the buyer cancels after paying. If we cannot approve or deliver the order, we refund in full. See returns and cancellations.