Cisco Secure Firewall 1200 Series Data Sheet
Available Languages
Bias-Free Language
The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
The Cisco Secure Firewall 1200 Series is a family of security appliances that serves to connect and protect the distributed enterprise. It extends Cisco’s enterprise security policy and threat inspection to users and devices in branch offices and smaller sites. Powered by an efficient network processor, 1200 Series delivers high levels of security policy and threat defense without compromising user experience.
Table 1. 1200 Series Models Summary
| Model |
Form factor |
Firewall Throughput |
Threat Defense |
IPS Throughput |
Interfaces |
| 1210CE |
Desktop/ Compact |
6.5 Gbps |
6.0 Gbps |
6.0 Gbps |
8x 1000BASE-T Gigabit Ethernet (10/100/1000 Mbps) |
| 1210CP |
Desktop/ Compact |
6.5 Gbps |
6.0 Gbps |
6.0 Gbps |
8x 1000BASE-T Gigabit Ethernet (10/100/1000 Mbps) 4 ports with PoE delivering up to 120W |
| 1220CX |
Desktop/ Compact |
15 Gbps |
9.0 Gbps |
9.0 Gbps |
8x 1000BASE-T Gigabit Ethernet (10/100/1000 Mbps) 2x SFP+ 10Gbps Ethernet |
1200 Series firewalls are available with Cisco Adaptive Security Appliance (ASA) or Cisco Secure Firewall Threat Defense (FTD) software. For full details on the features supported in these applications, please refer to the software release documentation.
Table 2. 1200 Series with Threat Defense Software Features
| Features |
Details |
| Trust and Integrity |
Built with Cisco Trustworthy Technologies to provide a hardware root of trust, cryptographically signed and validated software image support, anti-tamper and anti-counterfeit |
| High Availability (HA) |
Support for active/standby HA pairs |
| Multi-Instance |
Not supported |
| Network security management |
Centralized management via Cisco Secure Firewall Management Center (FMC) On-box management via Cisco Secure Firewall Device Manager (FDM) Cloud-managed via Cisco Security Cloud Control (SCC, formerly CDO) |
Table 3. 1200 Series Hardware Features
| Features |
Details |
| Form factor |
Compact appliance for desktop use. Can be rack-mounted or wall-mounted via optional accessories |
| Console port |
USB Type-C and RJ-45 (Cisco serial) |
| Management Ethernet |
1000BASE-T port |
| USB port |
USB 3 Type A port |
| Storage |
Integrated SSD, 480GB |
| Power supply |
Single input, external power supply |
| Cooling |
Integrated blower, side exhaust |
| Power over Ethernet (1210CP model only) |
4 of the 1000BASE-T ports support IEEE 802.3at for delivery of up to 30W per port (120W total) to compatible PD endpoints |
| SFP+ transceiver slots (1220CX model only) |
Support for a wide range of 1Gbps and 10Gbps transceivers. For a full list, refer to the product hardware documentation and Cisco’s transceiver compatibility matrix tools |
Table 4. 1200 Series interfaces
| Metric |
1210CE |
1210CP |
1220CX |
| Integrated interfaces |
8x 1000BASE-T |
8x 1000BASE-T |
8x 1000BASE-T |
| Transceiver slots |
- |
- |
2x SFP+ |
| Power over Ethernet |
- |
4 ports, 120W total |
- |
1200 Series firewalls are powered by an advanced processor that accelerates security and networking functions.
Note: Performance will vary depending on features activated, network traffic protocol mix, and packet size characteristics. Performance is subject to change with new software releases. Consult your Cisco representative for detailed sizing guidance.
Table 5. Performance - 1200 Series with Threat Defense software
| Metric |
1210CE |
1210CP |
1220CX |
| Throughput: FW + AVC (1024B) |
6.0 Gbps |
6.0 Gbps |
9.0 Gbps |
| Throughput: Next-Generation Intrusion Prevention System (NGIPS) (1024B) |
6.0 Gbps |
6.0 Gbps |
9.0 Gbps |
| Throughput: FW + AVC + IPS (1024B) |
6.0 Gbps |
6.0 Gbps |
9.0 Gbps |
| IPSec VPN Throughput |
5.0 Gbps |
5.0 Gbps |
10 Gbps |
| TLS (Hardware Decryption) |
1.0 Gbps |
1.0 Gbps |
1.5 Gbps |
| Maximum new connections per second, with AVC |
35K |
35K |
50K |
Table 6. Performance - 1200 Series with ASA software
| Metric |
1210CE |
1210CP |
1220CX |
| Stateful inspection firewall throughput[1] |
6.5 Gbps |
6.5 Gbps |
15 Gbps |
| Stateful inspection firewall throughput (multiprotocol)[2] |
6.0 Gbps |
6.0 Gbps |
12 Gbps |
| IPsec VPN throughput (450B UDP L2L test) |
5.5 Gbps |
5.5 Gbps |
12 Gbps |
| New connections per second |
175K |
175K |
250K |
Note: Performance will vary depending on features activated, network traffic protocol mix, and packet size characteristics. Performance is subject to change with new software releases. Consult your Cisco representative for detailed sizing guidance.
1200 Series appliances are designed for deployment in branch offices and smaller sites.
Table 7. Scalability - 1200 Series with Threat Defense software
| Measure |
1210CE |
1210CP |
1220CX |
| Maximum concurrent sessions, with AVC |
200K |
200K |
300K |
| Maximum VPN Peers |
200 |
200 |
300 |
| Maximum virtual router instances (VRF) |
5 |
5 |
10 |
Table 8. Scalability - 1200 Series with ASA software
| Measure |
1210CE |
1210CP |
1220CX |
| Concurrent firewall connections |
200K |
200K |
300K |
| Maximum VPN Peers |
200 |
200 |
300 |
Table 9. 1200 Series hardware specifications
| Specification |
1210CE |
1210CP |
1220CX |
| Chassis Dimensions (HxWxD) |
1.11” x 10.8” x 6.8” 2.82 x 27.43 x 17.22 cm |
||
| Weight |
3.04 lb (1.38 kg) |
3.17 lb (1.44 kg) |
3.09 lb (1.40 kg) |
| Operating range |
|||
| Temperature: operating |
32 to 104°F (0 to 40°C)[3] |
||
| Humidity: operating |
5 to 85% (noncondensing) |
||
| Altitude: operating |
0 to 10,000 ft (3048 m) |
||
| Acoustic noise |
23.5 dBA @ 80.6°F(27°C) 42.7 dBA @ maximum fan speed |
||
| Non-operating/storage environment |
|||
| Temperature: nonoperating |
-13 to 158°F (-25 to 70°C) |
||
| Humidity: nonoperating |
5 to 95% (noncondensing) |
||
| Altitude: nonoperating |
0 to 15,000 ft (4570 m) |
||
| Power supply |
|||
| AC input voltage |
100-240V AC |
||
| AC input frequency |
50–60 Hz |
||
| AC current draw, maximum |
0.4A (100V) |
||
| Power consumption, typical |
|
|
|
| Power consumption, maximum |
40W |
40W (excluding PoE) 165W (including PoE) |
40W |
For details on product regulatory compliance in a specific market, consult the Cisco Product Approvals tool.
Table 10. 1200 Series Regulatory and Standards Compliance
| Specification |
Description |
| Regulatory compliance |
Products comply with CE markings per directives 2004/108/EC and 2006/108/EC |
| Safety |
● UL 60950-1
● CAN/CSA-C22.2 No. 60950-1
● EN 60950-1
● IEC 60950-1
● AS/NZS 60950-1
● UL 62368-1
● CAN/CSA-C22.2 No. 62368-1
● EN 62368-1
● IEC 62368-1
● AS/NZS 62368-1
|
| EMC: Emissions |
● 47CFR Part 15 (CFR 47) Class A (FCC Class A)
● AS/NZS CISPR22 Class A
● CISPR22 Class A
● EN55022 Class A
● ICES003 Class A
● VCCI Class A
● EN61000-3-2
● EN61000-3-3
● KN22 Class A
● CNS13438 Class A
● EN300386
● TCVN7189
|
| EMC: Immunity |
● EN55024
● CISPR24
● EN300386
● KN24
● TVCN 7317
●
EN-61000-4-2, EN-61000-4-3, EN-61000-4-4, EN-61000-4-5, EN-61000-4-6, EN-61000-4-8, EN61000-4-11
|
1200 Series hardware appliances and accessories are listed below. For information on licenses, subscriptions and other options associated with the product, refer to the Network Security Ordering Guide.
Table 11. 1200 Series Firewall Appliances
| Product ID |
Description |
| CSF1210CE-ASA-K9 |
Secure Firewall 1210 compact security appliance with ASA software |
| CSF1210CE-TD-K9 |
Secure Firewall 1210 compact security appliance with Threat Defense software |
| CSF1210CP-ASA-K9 |
Secure Firewall 1210 compact security appliance with PoE, ASA software |
| CSF1210CP-TD-K9 |
Secure Firewall 1210 compact security appliance with PoE, Threat Defense software |
| CSF1220CX-ASA-K9 |
Secure Firewall 1220 compact security appliance with ASA software |
| CSF1220CX-TD-K9 |
Secure Firewall 1220 compact security appliance with Threat Defense software |
Table 12. 1200 Series Accessories
| Product ID |
Description |
| CSF1200C-PWR-AC |
Secure Firewall 1200 Series Compact power supply (without PoE) |
| CSF1200CP-PWR-AC |
Secure Firewall 1200 Series Compact power supply (with PoE) |
| CSF1200C-RACK-MNT= |
Secure Firewall 1200 Series Compact appliance rack-mount kit (compact models) |
| CSF1200C-WALL-MNT= |
Secure Firewall 1200 Series Compact appliance wall-mount kit (compact models) |
| CAB-CONS-USB-C= |
Console cable, USB-C to USB-C, 6ft, compatible with 1200 Series firewalls |
Flexible payment solutions to help you achieve your objectives
Cisco Capital makes it easier to get the right technology to achieve your objectives, enable business transformation and help you stay competitive. We can help you reduce the total cost of ownership, conserve capital, and accelerate growth. In more than 100 countries, our flexible payment solutions can help you acquire hardware, software, services and complementary third-party equipment in easy, predictable payments. Learn more.