Enterprise-Grade Next-Generation Firewall Security

The Cisco Firepower 4125 combines high-speed firewall processing with application visibility and control, intrusion prevention, VPN security and advanced threat-defense capabilities. The platform supports Cisco Secure Firewall Threat Defense (FTD) as well as Cisco Secure Firewall ASA software, allowing organizations to deploy the security architecture appropriate for their network environment.

With up to 45 Gbps throughput for Firewall plus Application Visibility and Control and up to 45 Gbps with IPS under Cisco's specified test conditions, the FPR4125 is engineered for high-bandwidth security inspection.

Key Features

High-Speed Network Connectivity

The Cisco FPR4125-NGFW-K9 includes eight fixed 1-Gigabit and 10-Gigabit SFP+ interfaces. These ports provide high-speed connectivity for data center core networks, aggregation switches, WAN infrastructure, internet edge connections and other security boundaries.

Two network-module bays allow the appliance to be expanded with supported Firepower network modules. Available modules include 8-port 10G SFP+, 4-port 40G QSFP+ and 2-port 100G QSFP28 options, subject to software and hardware compatibility.

Advanced Firewall Performance

The Firepower 4125 is designed for high-throughput security inspection environments where firewall, application control and IPS processing must operate at enterprise scale.

Advanced Threat Protection

When deployed with Cisco Secure Firewall Threat Defense, the FPR4125 provides integrated security capabilities for inspecting, controlling and protecting network traffic. Depending on the software release and licensed security services, organizations can implement application control, intrusion prevention, URL filtering, malware protection, VPN security and security intelligence policies.

• Application Visibility and Control
• Intrusion Prevention System (IPS)
• Advanced firewall policy enforcement
• Site-to-site and remote-access VPN capabilities
• URL filtering with applicable security subscriptions
• Advanced malware protection with applicable subscriptions
• Centralized security policy and event management

Cisco Secure Firewall Threat Defense

The FPR4125-NGFW-K9 supports Cisco Secure Firewall Threat Defense, providing a unified software platform for next-generation firewall security. FTD integrates firewall capabilities with application control, intrusion prevention, VPN functionality and security intelligence.

The platform can be centrally managed using Cisco security management solutions, helping administrators configure security policies, monitor events, investigate threats and maintain consistent controls across enterprise networks.

Flexible Network Module Expansion

Two network-module bays provide flexible connectivity expansion for changing bandwidth requirements. Supported Firepower 4100 network modules can provide additional 1G, 10G, 40G or 100G interfaces depending on the selected module.

Enterprise Connectivity and Management

The Firepower 4100 chassis provides a dedicated Gigabit Ethernet management interface supporting 1-Gbps fiber or copper SFP transceivers. An RJ-45 serial console provides local CLI administration, while the USB Type-A interface supports supported external USB storage and service functions.

• 8 × fixed 1G/10G SFP+ network ports
• 2 × network-module bays
• 1 × Gigabit Ethernet management interface
• 1 × RJ-45 serial console
• 1 × USB Type-A interface

High-Capacity Security Infrastructure

With 192 GB of system memory and high-performance security processing, the FPR4125 is designed for large enterprise and data center environments where high connection rates and large numbers of simultaneous sessions are required.

Its 1U rack-mount architecture provides high-density deployment while the modular network design enables organizations to scale connectivity as bandwidth requirements increase.

Storage and System Architecture

The FPR4125 includes two SSD slots. The chassis ships with an 800 GB primary SSD installed in slot 1. Slot 1 is reserved for the logical device application instance, such as Cisco Secure Firewall Threat Defense or ASA. The second SSD slot can be used for the optional Malware Storage Pack (MSP) where supported.

Cisco specifies that RAID is not supported for these SSD slots. The primary storage SSD must remain installed in slot 1.

NEBS-Certified Platform

The Cisco Firepower 4125 is the NEBS-certified platform within the Firepower 4100 family. This makes the appliance suitable for applicable telecommunications, carrier and infrastructure environments where Network Equipment-Building System requirements are part of the deployment specification.

Power and Cooling

The FPR4125 uses enterprise-class power and cooling architecture designed for continuous operation. The platform provides two power-supply module slots supporting 1+1 redundant power configurations. A 1100W AC power supply is supported, while a 950W DC power supply is available as an optional configuration.

Six hot-swappable fan modules provide 5+1 fan redundancy, helping maintain airflow and thermal performance in demanding data center environments.

Enterprise Deployment Applications

• Large enterprise data centers
• Internet edge security
• WAN edge protection
• Data center core and aggregation security
• High-availability firewall deployments
• Inter-data-center security architectures
• Service-provider security infrastructure
• High-bandwidth enterprise security environments
• Telecommunications and NEBS-oriented deployments