Skip to main content
Home  › ... Store › Product
Cisco Secure Firewall 4225 ASA Appliance, 1U, 2x NetMod Bays
Product Type:
Networking
Type Detail:
Firewalls
Manufacturer:
Cisco Systems
Manufacturer #:
FPR4225-ASA-K9
Part Status:
Special Order Only
Milwaukee PC SKU:
815060
Price:
$175,127.99



Cisco Secure Firewall 4225 ASA Appliance

The Cisco Secure Firewall 4200 Series is a high-end firewall designed to meet the security requirements of large enterprises, datacenters, and service providers. It is available in three different performance models, offering a wide range of options while providing superior threat defense within a compact 1 RU form factor. Key features and benefits of the appliance include:

AI/ML Powered: Detect anomalies, remediate threats, and optimize the policy for peak performance with Cisco's native AI/ML solution. Streamline NetOps and SecOps operations using multi-threaded Snort 3 engine; Admins benefit from natural language interactions with Cisco's AI chatbot for guidance, troubleshooting, and policy configuration

These platforms can be deployed in both firewall and dedicated IPS modes, providing versatile deployment options. For inline sets and passive interfaces, the 4200 Series supports Q-in-Q (stacked VLAN) with the ability to handle up to two 802.1Q headers in a packet.

Cryptographic acceleration architecture preserves performance with SSL and VPN decryption

Save space and energy with 1RU form factor

Future-proof your investment with 16x node cluster

Flexibility of 2x interface module bays for additional interface support

Customize and future-proof investment up to 400G interfaces.

2x SSD for event storage and malware analysis.

Uptime/resilience with dual management interfaces.

Fail-to-wire network modules, further enhancing its reliability and fault tolerance.

SD-WAN Capable: Simplified site-to-site communication using on-demand tunnels and dynamic application path selection across multiple WAN interfaces.

Model 4225

  • Firewall - 95 Gbps
  • NGFW - 80 Gbps
  • IPS - 80 Gbps
  • Interfaces - 8 x SFP+ on-chassis
  • Optional Interfaces - 2 x NM’s: 1/10/40/100G, FTW

Detailed performance specifications and feature highlights

  • Throughput: FW + AVC (1024B) - 80 Gbps
  • Throughput: FW + AVC + IPS (1024B) - 80 Gbps
  • Maximum concurrent sessions, with AVC - 30 Million
  • New Connections Per Second with, AVC - 600 K
  • TLS (Hardware Decryption) - 30 Gbps
  • Throughput: NGIPS (1024B) - 80 Gbps
  • IPSec VPN Throughput (1024B TCP w/Fastpath) - 80 Gbps
  • Instances (Multi-Instance) - 15
  • Maximum VPN Peers - 25,000
  • Centralized Management - Centralized configuration, logging, monitoring, and reporting are performed by the Firewall Management Center or alternatively in the cloud with Cisco Defense Orchestrator
  • Application Visibility and Control (AVC) - Standard, Supporting more than 4000 applications, as well as geolocation, users, and websites
  • AVC: OpenAppID support for custom, open source, application detectors - Standard
  • Cisco Security Intelligence - Standard with IP, URL, and DNS Threat Intelligence
  • Cisco Secure IPS - Available; can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IOC) intelligence
  • Cisco Malware Defense - Available; enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks. Integrated threat correlation with CISCO Secure Endpoint is also optionally available
  • Cisco Secure Malware Analytics - Available
  • URL Filtering: Number of Categories - More than 120
  • URL Filtering: Number of URLs categorized - More than 280 million
  • Automated Threat Feed and IPS signature updates - Yes: class-leading Collective Security Intelligence (CSI) from the Cisco Talos Group
  • Third-party and open-source ecosystem - Open API for integrations with third-party products; Snort® and OpenAppID community resources for new and specific threats
  • High Availability and Clustering - Active/active (with clustering), Active/standby. Cisco Secure Firewall 4200 Series allows clustering of up to 16 chassis
  • Cisco Trust Anchor Technologies - Secure Firewall 4200 Series platforms include Trust Anchor Technologies for supply chain and software image assurance.

ASA Performance and capabilities on Cisco Secure Firewall 4200 appliances

  • Stateful inspection firewall throughput - 95 Gbps
  • Stateful inspection firewall throughput (multiprotocol) - 85 Gbps
  • Concurrent firewall connections - 90 Million
  • New connections per second - 1.7 Million
  • Max. IPSec VPN throughput (450 Byte UDP L2L test, ASA) - 60 Gbps
  • Maximum VPN Peers - 25,000
  • Security contexts (included; maximum) - 2; 250
  • High Availability - Active/active and active/ standby
  • Clustering - 16
  • Scalability - VPN Load Balancing
  • Centralized management - Centralized configuration, logging, monitoring, and reporting are performed by Cisco Security Manager or alternatively in the cloud with Cisco Defense Orchestrator
  • Adaptive Security Device Manager - Web-based, local management for small-scale deployments

Cisco Secure Firewall 4200 Series hardware specifications

  • Dimensions (H x W x D) - 1.73 x 16.89 x 32.0 inches (4.39 x 42.9 x 81.28 cm)
  • Form factor (rack units) - 1RU
  • Fixed Ports - 8x 1/10/25 Gigabit Ethernet ports (SFP28)
  • Integrated Network Management Ports - 2 x 1/10/25 Gigabit Ethernet ports (SFP28)
  • Network modules - 8-port 1Gbps copper, FTW (fail to wire) Network Module ? Ports that are not configured as FTW can be used as regular 1 Gb copper ports. ? 8 x 1/10 Gigabit Ethernet Small Form-Factor Pluggable (SFP+) network modules ? 8 x 1/10/25 Gigabit Ethernet Small Form-Factor Pluggable (SFP28) network modules ? 4 x 40 Gigabit Ethernet Quad SFP+ network modules ? 4 x 40/100/200 Gigabit Ethernet Quad SFP28 (QSFP28) network modules ? 2 x 100G Gigabit Ethernet QSFP SFP28 network modules ? 2 x 400G Gigabit Ethernet QSFP DD network modules ? 6-port 10Gbps SR Fiber FTW (fail to wire) Network Module ? 6-port 10Gbps LR Fiber FTW (fail to wire) Network Module ? 6-port 25Gbps LR Fiber FTW (fail to wire) Network Module ? 6-port 25Gbps SR Fiber FTW (fail to wire) Network Module
  • Maximum number of interfaces -
  • Up to 24 x 10 Gigabit Ethernet (SFP+) interfaces; up to 8 x 25 Gigabit - Ethernet (SFP28) interfaces with 2 network modules; up to 8 x 40 Gigabit - Ethernet (QSFP+) interfaces with 2 network modules; up to 24 x 1 Gigabit Ethernet ports (SFP) with 2 network modules and fixed ports; up to 8 x 100 Gigabit Ethernet (QSFP28) interfaces with 2 network modules; up to 4 x 400 Gigabit Ethernet (QSFPDD) interfaces with 2 network modules Note: The above port counts do not factor in the breakout capability supported by different interfaces
  • Serial port - 1 x RJ-45 console
  • USB - 1 x USB 2.0
  • Storage - 1.8 TB x 2
  • Power supplies
  • Configuration - Dual: 1900W for 220 AC, 1200W for 110 AC
  • AC input voltage - 100 to 120 VAC (low line) or 200 to 240 VAC (high line)
  • AC maximum input current - 14A, @ 100VAC or @ 200VAC
  • AC maximum Input power - 870W
  • AC frequency - 50/60 Hz (nominal)
  • AC efficiency - >90% (Platinum)
  • Redundancy - 1+1
  • Fans - 3 Dual fan modules (FRU). Each module has two fans
  • Noise - Sound Pressure: <=78 dBA (typical), <= 84 dBA (maximum) - Sound Power: <=87 dB (typical), <=92 dB (maximum)
  • Rack mountable - Yes, mount rails included (4-post EIA-310-D rack)
  • Weight - 4225: 43 lbs (19.5 kgs): 2 x power supplies, 2 x NMs, 3 x fan-modules; 33 lbs (15 kgs): no power supplies, no NMs, no fans