Cisco Secure Firewall 1250 1U Rackmount Appliance

1U Rackmount 24 Gbps NGFW 8x 2.5GbE + 4x SFP+ SnortML Zero-Day SD-WAN Built-In

Cisco Secure Firewall 1250 Branch Security Appliance

The top-of-line model in the Cisco Secure Firewall 1200 Series, the Firewall 1250 delivers 24 Gbps of NGFW throughput, 1 million concurrent sessions, and support for up to 1,500 VPN peers — all in a single 1U chassis with 8x 2.5 Gigabit Multigigabit ports and 4x SFP+ uplinks. Purpose-built for the most demanding branch and mid-size campus environments.

Read Data Sheet Get a Quote

Maximum Branch Performance in the 1200 Series

24 Gbps Firewall Throughput

The 1250 delivers the highest throughput in the 1200 Series — 24 Gbps of NGFW throughput with AVC active and 18 Gbps with full IPS enabled — giving the most demanding branch and campus deployments the performance they need today and room to grow.

8x 2.5 Gigabit Multigigabit Ports

The 1250 is the only 1200 Series model with 2.5 Gigabit copper ports — enabling higher-speed connections to multigigabit-capable switches, Wi-Fi 6/6E access points, and multigigabit endpoints without replacing your existing copper cabling.

AI-Powered Threat Defense

SnortML zero-day detection and Encrypted Visibility Engine work together to stop threats at line rate — including threats in encrypted TLS 1.3 and QUIC traffic — all backed by Cisco Talos intelligence analyzing 900 billion events daily.

1,500 VPN Peers & 1M Sessions

Scale to support up to 1,500 VPN peers and 1 million concurrent sessions — the highest scalability numbers in the 1200 Series — making the 1250 well suited for large regional offices, campus hubs, and aggregation points in distributed enterprise networks.

Integrated SD-WAN and Routing

Eliminate the dedicated router at your largest branch locations. The 1250 combines advanced firewalling, SD-WAN, and routing in a single platform — reducing hardware footprint, simplifying management, and lowering total cost of ownership.

Centralized Cloud Management

Manage the 1250 from Cisco Security Cloud Control alongside all your other Cisco firewalls. Zero-touch provisioning, device templates, and AI-assisted policy management simplify operations across your entire distributed enterprise.

Features and Benefits

The Most Capable 1200 Series Appliance for Demanding Branches

The Firewall 1250 brings together maximum throughput, the highest scalability in the 1200 Series, multigigabit copper ports, and the full Cisco Secure Firewall Threat Defense software stack in a power-efficient 1U chassis.

SnortML Zero-Day Detection

Block zero-day threats before signatures exist. The SnortML machine learning engine identifies exploit patterns inline using Talos-trained models, stopping attacks that traditional signature-based systems miss.

Encrypted Visibility Engine

Gain visibility into encrypted traffic without decryption overhead. EVE uses AI-powered behavioral analysis to identify threats in TLS 1.3 and QUIC protocols — closing the visibility gap that attackers rely on.

Cisco AI Assistant

Use natural language queries to create policies, find unused rules, and generate compliance reports. The AI Assistant in Security Cloud Control reduces the time your team spends on routine firewall administration.

2.5G Multigigabit Ports

The 1250’s 8x 2.5GBASE-T ports deliver higher bandwidth to multigigabit-capable infrastructure over standard Cat5e/Cat6 cabling, making it the ideal upgrade path for campus environments.

Talos Threat Intelligence

Powered by Cisco Talos — one of the world’s largest commercial threat intelligence organizations — analyzing 900 billion security events daily across 193 countries for real-time threat protection.

Cisco Trustworthy Technologies

Hardware root of trust, cryptographically signed images, and anti-tamper/anti-counterfeit protections ensure the integrity of your security appliance across its entire lifecycle.

Key Features at a Glance

Feature

Benefit

24 Gbps NGFW Throughput

Highest NGFW throughput in the 1200 Series — handles even the most demanding branch bandwidth requirements.

4.1 Gbps TLS Decryption

Hardware-accelerated encrypted traffic inspection at the highest rate in the 1200 Series.

22 Gbps IPSec VPN

High-throughput site-to-site and remote access VPN supporting up to 1,500 peers from a single appliance.

1 Million Concurrent Sessions

Highest session capacity in the 1200 Series — designed for large branch aggregation and campus deployments.

8x 2.5GBASE-T Ports

Multigigabit copper ports support higher-speed connections to Wi-Fi 6E APs and multigigabit switches over existing cabling.

15 VRF Instances

More VRF instances than any other 1200 Series model — enabling rich multi-tenant and multi-zone segmentation at larger branch sites.

Technical Specifications

Performance (FTD Software)

NGFW Throughput (FW + AVC)24 Gbps

NGIPS Throughput22 Gbps

NGFW (FW + AVC + IPS)18 Gbps

IPSec VPN Throughput22 Gbps

TLS Decryption4.1 Gbps

Scalability (FTD Software)

Max Concurrent Sessions1,000,000

New Connections per Second100,000

Max VPN Peers1,500

Virtual Router Instances (VRF)15

High AvailabilityActive/Standby

Interfaces & Connectivity

Integrated interfaces8x 2.5GBASE-T Multigigabit Ethernet

Transceiver slots4x SFP+ (1G/10G)

Management Ethernet1x 1000BASE-T

Console portUSB Type-C and RJ-45

USB portUSB 3 Type A

Physical

Form factor1U Rackmount

Dimensions (HxWxD)1.72″ x 11.22″ x 17.25″

Weight9.52 lb (4.32 kg)

Storage960 GB SSD (field-replaceable)

CoolingFront-to-back airflow

Power

Power supplySingle integrated PSU

AC input voltage100–240V AC

AC input frequency50–60 Hz

Max power consumption88W

Environmental

Operating temperature32°F – 104°F (0°C – 40°C)

Operating humidity5% – 85% (non-condensing)

Operating altitude0 – 10,000 ft.

Max acoustic noise57.8 dBA

Ordering Information

CSF1250-TD-K9

Cisco Secure Firewall 1250 with Threat Defense software — full NGFW, IPS, SD-WAN, AVC, and TLS decryption capabilities.

CSF1250-ASA-K9

Cisco Secure Firewall 1250 with ASA software — maximum stateful inspection throughput for high-volume branch environments.

Documentation

Data Sheet

Cisco Secure Firewall 1200 Series Data Sheet. Complete performance tables, hardware specifications, scalability data, feature details, and ordering information for all 1200 Series models.

Download PDF ›

Compare 1200 Series Models

The 1250 is the top-of-line 1U model in the 1200 Series. Compare all six models to find the right fit for each branch location in your network.

View 1200 Series ›

Get a Custom Quote for the Firewall 1250

Our Cisco-certified security specialists will configure the right platform, licensing, and services for your branch or campus environment.

Volume and multi-year pricing available
Cisco Smart Net Total Care bundling
Professional deployment & migration services
Response within one business day

Get a Quote Contact Sales