Cisco Firepower 1000 Series Compared: 1010, 1010E, 1120, 1140 and 1150

The short answer: the Firepower 1010 and 1010E are fanless desktop firewalls for small offices and branches; the 1010 adds two PoE+ ports. The 1120, 1140 and 1150 are 1U rack appliances for larger offices and the main internet connection, with the 1150 the only model offering 10G ports. Every model runs either Cisco Secure Firewall Threat Defense (FTD) or ASA software.

The models side by side

Figures from Cisco's data sheet for Threat Defense software. Real-world throughput depends on your traffic and the features you enable.

Ports

• 1010: 8 × 1GbE RJ-45, with ports 7 and 8 providing PoE+ for devices such as access points or phones. External power supply.
• 1010E: the same eight ports without PoE, and a smaller external power supply.
• 1120 and 1140: 8 × 1GbE RJ-45 plus four SFP ports, and a dedicated management port.
• 1150: 8 × 1GbE RJ-45, 2 × 1G SFP and 2 × 10G SFP+. It's the only model in the series with 10G.

How to choose

Size for the throughput you'll get with IPS turned on, not the headline firewall figure, and leave headroom for growth.

Threat Defense or ASA?

• Threat Defense (FTD) is Cisco's next-generation firewall software: application visibility, intrusion prevention, malware defence and URL filtering. Manage it on the device with Device Manager, centrally with Management Center, or from the cloud with Security Cloud Control.
• ASA is Cisco's long-established firewall and VPN software, managed with ASDM or the command line. It suits organisations that already run ASA and want a like-for-like replacement.

Each appliance runs one or the other. Switching means reimaging the device, so decide before deployment.

Licences for Threat Defense

Subscriptions are sold for one, three or five years, often as bundles. Without IPS, a Firepower is a capable firewall, but it isn't doing the threat inspection most people buy it for.

Support contracts

Cisco renamed Smart Net Total Care to Cisco Support for contracts from 15 June 2025. Existing Smart Net contracts continue under their original terms. The current service comes in three tiers:

• Basic: access to Cisco's technical assistance centre, software updates and hardware replacement.
• Standard: adds faster response targets, priority case handling and help with setup and configuration.
• Signature: adds service reviews and root-cause investigation, aimed at large customers.

Hardware replacement is chosen separately. Common levels are 8x5xNBD (next business day), 8x7xNCD (next calendar day) and 24x7x4 (within four hours, around the clock), subject to Cisco's service availability for your location. For a firewall that everything depends on, compare the cost of a day's outage with the price difference between NBD and four-hour cover.

Is the Firepower 1000 series end of life?

No. At the time of writing, Cisco hasn't announced end of sale for any Firepower 1000 model, and lists the series as available. Cisco does sell newer small-office firewalls, the Secure Firewall 200 and 1200 series, and documents a migration path from the Firepower 1010 to them. Check Cisco's end-of-life notices before any long-term purchase.

Buying a Firepower from Apaxon

Firepower 1010, 1010E, 1120, 1140 and 1150 models are listed in the Apaxon store, and the product pages are linked below. For help sizing a firewall, choosing licences or support, or managing it afterwards, see Apaxon's cyber security services and networking pages, or get in touch.

Sources

• Cisco: Firepower 1000 Series data sheet
• Cisco: Firepower 1010/1010E hardware installation guide
• Cisco: Firepower 1100 hardware installation guide
• Cisco: Network Security Ordering Guide
• Cisco: Firepower 1000 Series support page
• Cisco: Cisco Support service description
• Cisco: Smart Net Total Care service description