Cisco Secure Firewall 1230 1U Rackmount Appliance

1U Rackmount 13 Gbps NGFW 8x 1GbE + 4x SFP+ SnortML Zero-Day SD-WAN Built-In

Cisco Secure Firewall 1230 Branch Security Appliance

Protect medium-sized branch offices with enterprise-grade firewalling, AI-powered threat detection, and built-in SD-WAN in a compact 1U rackmount chassis. The Firewall 1230 delivers 13 Gbps of NGFW throughput and simplifies branch security with zero-touch provisioning across hundreds of sites.

Read Data Sheet Get a Quote

Enterprise Security for Medium Branches

13 Gbps Firewall Throughput

The 1230 delivers 13 Gbps of NGFW throughput (FW + AVC) and 9 Gbps with full IPS active — providing the performance head room that medium branch offices need as bandwidth demands continue to grow.

AI-Powered Threat Defense

SnortML machine learning engine detects and blocks zero-day exploits inline. The Encrypted Visibility Engine (EVE) identifies threats in TLS 1.3 and QUIC traffic without decryption, powered by Cisco Talos intelligence.

Built-In SD-WAN Routing

Eliminate the need for a separate router at every branch. The 1230 integrates SD-WAN with advanced firewalling, delivering optimized connectivity to cloud, SaaS, and data center resources from a single appliance.

Zero-Touch Provisioning

Deploy the 1230 to new branch locations without on-site IT staff. Zero-touch provisioning and built-in secure branch routing templates let you push unified policy to hundreds of firewalls at once from a central console.

8x 1GbE + 4x SFP+ Ports

Connect your branch network with 8 copper Gigabit Ethernet ports and 4 SFP+ uplinks that support 1G and 10G transceivers — giving you the port density and flexibility needed for mid-size branch deployments.

Flexible Management Options

Manage from Cisco Security Cloud Control for centralized cloud operations, Firewall Management Center (FMC) for on-premises control, or Firewall Device Manager (FDM) for local administration — your choice.

Features and Benefits

Designed for the Distributed Enterprise

The Firewall 1230 runs the same Threat Defense software as Cisco’s largest data center firewalls, giving branch administrators access to the full Cisco security platform without a separate appliance for each function.

SnortML Zero-Day Detection

Machine-learning detection engine blocks zero-day exploit patterns inline — trained on Cisco Talos threat data from 193 countries. Protects against threats before signatures are available.

Encrypted Visibility Engine

Detect and block threats in encrypted traffic without decryption overhead. EVE uses AI-assisted behavioral fingerprinting to identify malicious applications hiding in TLS 1.3 and QUIC sessions.

Cisco AI Assistant

Automate policy creation, identify unused rules, and generate compliance reports using natural language queries — available in both cloud-delivered and on-premises management options.

Cisco Talos Threat Intelligence

Backed by one of the world’s largest commercial threat intelligence organizations, analyzing 900 billion security events daily to keep your branch defenses current.

Hardware Root of Trust

Built with Cisco Trustworthy Technologies including a hardware root of trust, cryptographically signed software image validation, and anti-tamper protections for supply chain security.

Active/Standby High Availability

Maintain branch connectivity during planned maintenance or hardware failure with Active/Standby HA pairs, ensuring business continuity for your distributed locations.

Key Features at a Glance

Feature

Benefit

13 Gbps NGFW Throughput

Protects medium branch traffic without degrading user experience, even with full threat inspection active.

2.5 Gbps TLS Decryption

Hardware-accelerated crypto offload closes blind spots in encrypted traffic at branch scale.

13 Gbps IPSec VPN

Secures site-to-site and remote access VPN without a separate concentrator appliance.

500 VPN Peers

Scales to support branch offices and remote workers connecting through hub-and-spoke or full-mesh VPN topologies.

400K Concurrent Sessions

Handles the connection density of medium enterprise branch environments with room to grow.

FTD and ASA Software

Choose Threat Defense for full NGFW capabilities or ASA for maximum stateful inspection performance at 18 Gbps.

Technical Specifications

Performance (FTD Software)

NGFW Throughput (FW + AVC)13 Gbps

NGIPS Throughput11 Gbps

NGFW (FW + AVC + IPS)9.0 Gbps

IPSec VPN Throughput13 Gbps

TLS Decryption2.5 Gbps

Scalability (FTD Software)

Max Concurrent Sessions400,000

New Connections per Second50,000

Max VPN Peers500

Virtual Router Instances (VRF)10

High AvailabilityActive/Standby

Interfaces & Connectivity

Integrated interfaces8x 1000BASE-T Gigabit Ethernet

Transceiver slots4x SFP+ (1G/10G)

Management Ethernet1x 1000BASE-T

Console portUSB Type-C and RJ-45

USB portUSB 3 Type A

Physical

Form factor1U Rackmount

Dimensions (HxWxD)1.72″ x 11.22″ x 17.25″

Weight9.35 lb (4.24 kg)

Storage960 GB SSD (field-replaceable)

CoolingFront-to-back airflow

Power

Power supplySingle integrated PSU

AC input voltage100–240V AC

AC input frequency50–60 Hz

Max power consumption57W

Environmental

Operating temperature32°F – 104°F (0°C – 40°C)

Operating humidity5% – 85% (non-condensing)

Operating altitude0 – 10,000 ft.

Max acoustic noise52.1 dBA

Ordering Information

CSF1230-TD-K9

Cisco Secure Firewall 1230 with Threat Defense software — full NGFW, IPS, SD-WAN, and TLS decryption capabilities.

CSF1230-ASA-K9

Cisco Secure Firewall 1230 with ASA software — optimized for maximum stateful inspection throughput.

Documentation

Data Sheet

Cisco Secure Firewall 1200 Series Data Sheet. Full performance specifications, hardware details, scalability tables, feature comparisons, and ordering information for all 1200 Series models.

Download PDF ›

Compare 1200 Series Models

Compare all 1200 Series models including the 1210CE, 1210CP, 1220CX, 1230, 1240, and 1250. Find the right fit based on your branch size, throughput, and port requirements.

View 1200 Series ›

Get a Custom Quote for the Firewall 1230

Our Cisco-certified security specialists will help you select the right model, configure licensing, and plan deployment across your branch locations.

Volume and multi-year pricing available
Cisco Smart Net Total Care bundling
Professional deployment & migration services
Response within one business day

Get a Quote Contact Sales