Cisco Firepower 3110 Firewall

Guide price: Price range: £10,500.00 through £22,094.77 Ex. VAT

SKU FPR3110 Category Brand:

Product Overview

The Cisco Secure Firewall FPR3110 is a 1RU enterprise-class firewall appliance within the Cisco Secure Firewall 3100 Series, designed for mid-sized and enterprise networks requiring high-performance perimeter, WAN edge, or data centre edge security.

The FPR3110 supports deployment with either Cisco Adaptive Security Appliance (ASA) software or Cisco Firepower Threat Defense (FTD), allowing organisations to maintain existing ASA policy models or adopt next-generation firewall capabilities on the same platform. The appliance delivers multi-gigabit throughput, high session capacity, and support for advanced inspection, VPN services, and encrypted traffic handling, providing flexibility for evolving security architectures without requiring hardware replacement.

Ideal Environment / Deployment:
The FPR3110 is well suited to medium-sized and enterprise networks deploying security at the internet edge, WAN aggregation layer, or data centre perimeter. Organisations running established ASA environments can deploy the appliance using ASA software to preserve operational consistency, while those modernising security operations can transition to FTD for integrated intrusion prevention, application visibility, and advanced threat controls. Its throughput and session scale support high-traffic environments, while strong VPN performance enables secure site-to-site and remote connectivity. The platform is appropriate for environments where policy continuity, software flexibility, and long-term hardware reuse are operational priorities.

Key Features​

  • Supported software: Cisco ASA or Cisco Firepower Threat Defense (FTD)
  • Firewall throughput (FTD): Up to 17.0 Gbps (firewall + AVC)
  • Threat inspection throughput (FTD): Up to 17.0 Gbps (firewall + AVC + IPS)
  • Concurrent sessions: Up to 2 million
  • New connections per second: Up to 130,000
  • TLS/SSL inspection throughput: Up to 4.8 Gbps
  • IPsec VPN throughput: Up to 8 Gbps (up to 11 Gbps with VPN offload)
  • Form factor: 1RU rack-mountable appliance
  • Interfaces: Integrated RJ-45 and SFP interfaces with optional network module expansion
  • High availability: Redundant power supplies and hot-swappable cooling

Specification

Additional information

Additional information

Cisco offers a wide portfolio of subscription-based services that enhance visibility, security, and operational resilience across enterprise and data center networks.

With the right combination of platforms and licenses, you can simplify management, protect critical infrastructure, and unlock advanced analytics. Explore Cisco service options below.

What is Cisco SMARTnet (Smart Net Total Care)?

Cisco Smart Net Total Care is a subscription support contract providing 24/7 TAC access, software updates, and rapid hardware replacement. This service ensures your firewall remains secure, supported, and operational.

SMARTnet Service Levels Features Advantages
Next Business Day (add-on) Replacement hardware shipped by the next business day. Cost-effective option for non-critical infrastructure locations.
4-Hour Onsite (add-on) 24/7 support with 4-hour onsite replacement. Minimise downtime for mission-critical firewalls and data centre infrastructure.
2-Hour Onsite (add-on) 24/7 support with 2-hour replacement (where available). Protect core network security with the fastest recovery option.

Why work with a Cisco partner?

SMARTnet can only be purchased via authorised partners. We’ll handle contract creation, registration, and renewal in the Smart Net portal, ensuring serials and coverage are correctly aligned.

What is Cisco Advanced Malware Protection (AMP)?

Cisco AMP extends firewall inspection capabilities, with advanced file analytics and continuous monitoring. It is licensed per firewall or via term-based Smart Account subscriptions.

Licence Tier Features Advantages
AMP for Networks (add-on) File reputation and continuous threat telemetry Detect unknown and evolving malware within encrypted traffic.
AMP + Cloud Sandboxing (upgrade option) Dynamic behavioural analysis in Cisco Threat Grid Identify zero-day threats without adding inspection latency.

Why work with a Cisco partner?

AMP licences can only be provisioned and attached to devices via authorised partners under Cisco Smart Licensing.

We can handle entitlement allocation, telemetry routing, and configure alerts to ensure AMP delivers complete visibility and measurable threat reduction.

What is Cisco SecureX & Talos Threat Intelligence?

SecureX is Cisco’s cloud-based orchestration and XDR platform that correlates events across Firepower, endpoints, and cloud services. Talos threat intelligence underpins all Cisco security products, delivering continuous signature and reputation updates.

Service Features Advantages
SecureX (add-on) Unified incident response, automation playbooks, cross-domain analytics Reduce investigation time and accelerate containment through automation.
Talos Intelligence (included with active licences) Global threat feeds and signature updates Maintain up-to-date protection against emerging exploits and campaigns.

Why work with a Cisco partner?

SecureX setup and integration must be completed by a Cisco partner, as it involves registering APIs and linking data between Cisco products. We deploy SecureX workspaces, connect Firepower telemetry, and optimise automation playbooks tailored to your workflows.

What is Cisco Secure Firewall Threat Defence?

Cisco Secure Firewall Threat Defence (FTD) powers a wide range of Cisco firewalls with unified next-generation firewall capabilities. Every appliance includes a base licence, with advanced threat module add-ons available via Cisco’s Smart Licensing ecosystem.

Licence Tier Features Advantages
Base (included) Stateful inspection, NAT, VLANs, app control, routing Immediate network protection and visibility on deployment.
Threat / NGIPS (add-on) Signature-based intrusion prevention with Talos intelligence Detect and block exploits in real time across all zones.
Malware Defence / AMP (add-on) File reputation, sandboxing, and retrospective analysis Contain advanced malware and trace infection sources quickly.
URL Filtering (add-on) Cloud URL categorisation and policy enforcement Enforce browsing policy and prevent command-and-control traffic.

Why work with a Cisco partner?

Advanced FTD subscriptions must be procured and activated through an authorised Cisco partner. We’ll configure Smart Licensing and device registration to your Smart Account, validate entitlement mapping, and ensure all modules are correctly deployed.

What is Cisco Secure Client?

Cisco Secure Client (formerly AnyConnect) delivers secure VPN access and endpoint control for remote users connecting through Cisco security appliances. VPN access is not included and requires additional user-based licences.

License Tier Features Advantages
VPN (add-on) SSL/IPsec VPN access with central policy control Extend secure access to remote or hybrid users.
Advantage / Premier (upgrade option) Endpoint posture validation, device compliance, identity integration Enforce Zero Trust principles and reduce remote-access risk.

Why work with a Cisco partner?

Secure Client licences are distributed exclusively through Cisco partners. We’ll assess user requirements, size your VPN capacity, and integrate identity and policies through ISE and SecureX. Our deployment ensures compliance, scalability, and cost alignment across your remote access network.

Not sure where to begin?

Talk to a certified Cisco expert. We’ll help you choose the right combination of hardware, licenses, and services.

Contact us today or book a 30-minute consultation.

Through Cisco’s Capital Finance and Flexible Payment Solutions, we help enterprises and data centres fund new initiatives in ways that fit both IT and business priorities.

Speak with our team today to explore how Cisco financing can help to launch your next IT project sooner.

Cisco Refresh gives you access to certified remanufactured equipment that performs like new and has the same warranty, but at a lower cost and environmental impact.

Cisco Refresh must be purchased via authorised partners like Steel City Consulting. Ask us to check Cisco Refresh stock availability and provide a cost comparison for your next upgrade or expansion project today.

As a certified partner, we provide access to Cisco promotions that reduce upfront spend and accelerate upgrades.

When you work with us, we can bundle and stack multiple offers, navigate application processes, and secure pricing that often isn’t accessible without a Cisco partner. Visit our promotions hub for current Cisco offers and to discuss your eligibility

Expert guidance for the right fit

We don’t just sell IT hardware. Every security solution we recommend is assessed against your organisation’s specific concerns, performance requirements, and infrastructure plans. This consultative approach ensures that our guidance is aligned with your bespoke needs, so that you can invest in a new firewall with complete confidence.

Exclusive discounts and strategic advantages

When your business purchases security solutions from Steel City Consulting, you will gain access to partner-only promotions, bundled licensing offers, and advanced training resources. Combined with our technical expertise and ongoing support, this ensures your new firewall is not only secure and cost-optimised, but also supported by a team that is skilled and future-ready.

Enterprise security solutions

Backed by extensive technical knowledge, our network of certified specialists deliver end-to-end support to keep your IT infrastructure secure, optimised, and resilient. Our enterprise security solutions include…

Our services What to expect
Installation & Configuration + Expert firewall pre-configuration and setup, tailored to your exact settings.
+ Custom rule creation & least-privilege access
+ Ongoing log analysis and incident alerts
+ Intrusion prevention system (IPS) integration
Penetration Testing + Internal and external testing
+ Real-world threat simulations
+ Risk scoring and remediation planning
+ Fully documented audit reports
Managed Detection & Response (MDR) + Full-spectrum endpoint, cloud, and network protection
+ 24/7 monitoring and incident response
+ Threat intelligence integration
+ Rapid containment and recovery
Ongoing Support UK-based help when you need it most - accessed through our in-house security experts and extensive network of certified technicians.

Need to define the right IT solution?

Alternatively, If you’re unsure whether this product fully meets your project’s needs, we’re here to help.
A group discussing IT solutions

Looking for a Different Model?

Not sure which model is right for your environment? Our specialists can help you select the right platform for your infrastructure requirements.