Cisco Firepower / Secure Firewalls - Refurbished, Used, and New

Firewall families and parts

Which Cisco firewall do I need?

Choose the model by the throughput you expect with the inspection features you will enable, which runs below the headline firewall figure, and by the users, concurrent sessions and VPN tunnels it must carry. Firepower models are ordered with either ASA software (-ASA-K9) or Firepower Threat Defense software (-NGFW-K9), but the order suffix shows how the unit was first ordered, not what is installed now, so confirm the software currently on the unit (ask us if the listing does not say) and check that it matches your network and management tools. Then check interfaces: port count and speed, SFP and SFP+ ports, and network module slots on the 2100 and 4100. For a high availability pair, both units should be the same model with matching interfaces and software.

Frequently asked questions

What does -ASA-K9 or -NGFW-K9 mean?
The suffix shows the software the firewall was originally ordered with: ASA, or Firepower Threat Defense (NGFW). The hardware is the same platform, and the installed software may since have changed, so confirm the software currently on the unit rather than relying on the suffix. Give us your current setup and we will help match a unit to it.

NetworkTigers has sold enterprise network equipment since 1996. Every firewall and part carries the NetworkTigers 365-day warranty. Need a quantity? Ask us for a quote.