2.2 Gbps Threat Defense
Cisco NGFW Security NGFW
Cisco Firepower 1140 Firewall
2.2 Gbps Threat Defense · NG Firewall
Cisco Firepower 1140 Firewall delivers 2.2 Gbps of threat defense throughput in a compact appliance designed for enterprise perimeters and SMB environments that need serious security without serious complexity. Cisco Talos intelligence — the world’s largest commercial threat intelligence team — feeds the 1140’s IPS engine with real-time threat signatures, ensuring it blocks the latest attack vectors even before your security team knows they exist. Integrated SSL/TLS decryption ensures threats cannot hide inside encrypted tunnels.
Ideal For Perimeter Security
2.2 Gbps Threat Defense Cisco Talos Threat Intelligence
Click image to enlarge · Full resolution available
Key Specifications
Cisco Talos Threat Intelligence
SSL/TLS Traffic Inspection
IPS + URL Filtering + AMP
Desktop NGFW Cisco Firepower 1140 for Office and Branch Protection
Cisco Firepower 1140 (model codes: FPR1140-ASA-K9 / FPR1140-NGFW-K9) is a desktop next-generation firewall (NGFW) of enterprise class, designed to protect small and medium offices, remote branches, and edge nodes of the Cisco network. Its key architectural feature is hardware-accelerated traffic processing, enabling deep packet inspection, IPS, and cryptography without the critical performance degradation typical of entry-level software firewalls. The device runs on Cisco Firepower Threat Defense (FTD) or the classic Cisco ASA (Adaptive Security Appliance Software) operating system.
The platform targets customers building secure networks in small offices and branches without a dedicated security team: the device supports local management via the built-in Cisco Firepower Device Manager (FDM) web interface, and can be migrated to centralized Cisco FMC management as infrastructure grows.
Use Cases
The Cisco Firepower 1140 is the optimal solution for organizations requiring:
- Protection of small and medium offices and remote branches
- Edge nodes of the Cisco network (Branch, Edge)
- Next-generation firewall (NGFW) with IPS and application control
- Malware and advanced threat protection (AMP, sandboxing)
- Building IPSec VPN and AnyConnect connections for remote employees
- URL filtering and web traffic categorization
Performance and Throughput
Traffic processing speeds depend on the software used and the security features enabled:
| Use Case (Traffic Profile) | Throughput (FTD) | Throughput (ASA) |
|---|---|---|
| Firewall (classic Stateful Firewall) | 2.2 Gbps | 2.2 Gbps |
| Application control (AVC) and IPS (NGFW) | 2.2 Gbps | Not applicable |
| NGFW + Malware Defense (AMP) | 1.2 Gbps | Not applicable |
| IPSec VPN encryption (IMIX, 450 bytes) | 1.2 Gbps | 1.2 Gbps |
Connection limits. Maximum concurrent sessions — 200,000, new session rate — up to 22,000 per second. The platform supports up to 200 persistent AnyConnect or IPSec VPN client tunnels.
Physical Interfaces and Form Factor
- Network ports. The device is equipped with 8 fixed RJ45 10/100/1000 Mbps Base-T ports for LAN/WAN segmentation. Optical uplinks (SFP/SFP+) are not available in this model (they appear in the higher-end Firepower 1150).
- Management ports. The unit features 1 dedicated Gigabit RJ45 Ethernet management port, an RJ45 serial console port, a Mini-USB Type-B console port, and a USB 3.0 Type-A port for firmware updates from external media.
- Internal memory. The platform is equipped with a 200 GB SSD (usable capacity for local logs, OS images, and traffic captures) and 16 GB DDR4 RAM.
- Form factor. The device is housed in a compact 1RU form factor. Rack-mount brackets for a standard 19-inch rack are included. Power is supplied via a single external AC adapter. Active cooling with left-to-right airflow.
Licensing and Management
- Management options. Firewall management can be performed locally via the built-in Cisco Firepower Device Manager (FDM) web interface (suitable for standalone devices) or centrally through large-scale orchestration systems Cisco Security Manager (CSM) and Cisco Secure Firewall Management Center (FMC).
- Subscription model. Enabling next-generation (NGFW) features on the FTD OS requires term-based subscriptions (Smart Licenses):
- Threat (T): protection against network attacks, exploits, and intrusion prevention (IPS/Snort3).
- URL Filtering (URL): website categorization and restriction of access to unwanted content.
- Malware Defense (AMP): streaming antivirus and Cisco Secure Endpoint sandbox for advanced threat detection.
Why GHI SERVERS
- Direct supply from China. We work with CNY and RUB. Turnkey logistics of network equipment from China, including customs clearance and delivery to our Moscow warehouse.
- Custom configuration. We help select the model (1140 or 1150 with SFP+), OS type (FTD or ASA), and subscription bundle (Threat, URL, AMP) for your task and budget.
- Moscow warehouse. Prompt replacement of defective units and warranty service without long downtime.
- 20+ years of expertise. Authorized Cisco partner since 2005. Pre-sales engineering, configuration assistance, and post-sales support.
Service and Support
- 24/7 technical support
- Pre-sales engineering and configuration assistance
- OEM warranty and full provenance documentation
- Installation, setup, and deployment of network equipment
- Component replacement and warranty service
Interested in Cisco Firepower 1140 Firewall?
Our certified engineers will configure the right solution for your workloads and budget.