Palomuuri Cisco Firepower 1120 FPR1120-NGFW-K9

The Cisco Secure Firewall Firepower 1120 with FTD software is a compact enterprise-grade firewall appliance designed for small and medium-sized offices. It provides Layer 3 and Layer 4 security controls together with Layer 7 application visibility and control; advanced threat defense is available separately by license. The appliance includes eight Gigabit Ethernet ports, four SFP ports, an Intel processor and 200 GB SSD storage, delivering up to 1.5 Gbps firewall throughput and 1 Gbps IPsec VPN throughput for reliable wired connectivity.

Advantages

The Firepower 1120 integrates proven stateful inspection and application-aware controls, supporting routing protocols such as BGP and OSPF and advanced remote-access VPN termination. Hardware and software are optimized to handle mixed traffic with low latency while maintaining throughput figures for firewall and IPsec VPN tasks. Compact form factor and multiple SFP/Gigabit interfaces allow flexible deployment in branch and SMB environments.

Suitable for

• Small and medium-sized office networks
• Branch office firewall and VPN termination
• Environments requiring BGP or OSPF routing
• Wired networks needing application visibility and control

Key specifications

• Model: Cisco Firepower 1120 (FPR1120-NGFW-K9)
• Software: Firepower Threat Defense (FTD), advanced threat defense licensed separately
• Interfaces: 8 × Gigabit Ethernet, 4 × SFP
• Firewall throughput: up to 1.5 Gbps
• IPsec VPN throughput: up to 1 Gbps
• Processor: Intel (manufacturer specification)
• Storage: 200 GB SSD
• Supported protocols: includes SMTP and common IP routing protocols
• EAN: 0889728192583

How to use

Install the Firepower 1120 in your network rack or on a shelf and connect uplink and LAN segments to the available Gigabit and SFP ports. Deploy Firepower Threat Defense software and perform initial configuration using the device management interface or centralized management (if used). Configure firewall policies, NAT, routing (BGP/OSPF if required) and VPN settings according to your network topology. Apply licenses for advanced threat defence only if those additional services are required.

Recommendations

Place the appliance in a cooled, ventilated location and keep firmware and FTD rule sets up to date. For larger deployments, use centralized management to maintain consistent policies. Monitor throughput and CPU usage to ensure performance stays within advertised limits and enable QoS where necessary to prioritise critical traffic.