Cisco Secure Firewall 1240 1U Rackmount Appliance

1U Rackmount 18 Gbps NGFW 8x 1GbE + 4x SFP+ SnortML Zero-Day SD-WAN Built-In

Cisco Secure Firewall 1240 Branch Security Appliance

Protect larger branch offices and mid-size campus locations with 18 Gbps of next-generation firewall throughput, AI-powered threat detection, and integrated SD-WAN in a single 1U rackmount appliance. The Firewall 1240 supports up to 1,000 VPN peers and 600,000 concurrent sessions for growing enterprise branch environments.

Read Data Sheet Get a Quote

Advanced Security for Larger Branches and Mid-Size Campuses

18 Gbps Firewall Throughput

Deliver 18 Gbps of NGFW throughput with application visibility and control active, and 12 Gbps with full IPS enabled — giving larger branches and campus sites the performance needed for demanding unified communications, cloud, and AI applications.

AI-Powered Threat Defense

SnortML detects and blocks zero-day exploits inline using machine learning trained on Cisco Talos threat data. The Encrypted Visibility Engine blocks threats in TLS 1.3 and QUIC traffic without decrypting every session.

SD-WAN and Direct Internet Access

Replace dedicated routers at your larger branches. The 1240 integrates SD-WAN with advanced firewalling, enabling direct internet access (DIA) and cloud-optimized connectivity from a single, manageable platform.

Up to 1,000 VPN Peers

Scale your secure remote access and site-to-site VPN to support up to 1,000 peers — covering employees, contractors, and partner connectivity across your entire branch network without a dedicated VPN concentrator.

8x 1GbE + 4x SFP+ Ports

Connect branch infrastructure with 8 copper Gigabit Ethernet ports and 4 SFP+ uplinks (1G/10G) for flexible, high-speed connectivity to distribution switches, WAN circuits, and uplink aggregation points.

Zero-Touch Mass Deployment

Deploy the 1240 across dozens of branches simultaneously using zero-touch provisioning and device templates in Cisco Security Cloud Control. Push unified security policies to the entire branch estate in a single operation.

Features and Benefits

The Right Balance of Performance and Security for Growing Branches

The Firewall 1240 runs the full Cisco Secure Firewall Threat Defense (FTD) software stack, giving your larger branch locations access to the same enterprise security platform used in your data center — in a compact 1U appliance.

SnortML Zero-Day Detection

Block emerging threats before signatures exist. The SnortML engine uses machine learning patterns trained on Talos threat intelligence to detect and stop zero-day exploits at line rate.

Encrypted Visibility Engine

Identify and block malicious applications in encrypted traffic — including TLS 1.3 and QUIC protocols — without the performance penalty of full decryption, using AI-assisted behavioral analysis.

Cisco AI Assistant

Streamline operations with natural language policy management. The AI Assistant identifies redundant rules, recommends optimizations, and auto-generates compliance reports across your branch estate.

Talos Threat Intelligence

Stay ahead of attackers with threat intelligence from Cisco Talos — the world’s largest commercial threat intelligence organization, analyzing 900 billion events daily across 193 countries.

Cisco Trustworthy Technologies

Hardware root of trust, cryptographically signed software images, and anti-tamper protections ensure the integrity of your branch security infrastructure from factory to field.

High Availability

Deploy Active/Standby HA pairs to maintain branch connectivity during maintenance windows or hardware failure, ensuring business continuity for critical branch operations.

Key Features at a Glance

Feature

Benefit

18 Gbps NGFW Throughput

Handles the bandwidth demands of larger branches with UC, cloud apps, and high-density Wi-Fi without compromise.

3.2 Gbps TLS Decryption

Hardware-accelerated crypto offload provides visibility into encrypted traffic at branch scale.

18 Gbps IPSec VPN

High-throughput site-to-site and remote access VPN without a dedicated VPN platform.

1,000 VPN Peers

Scales to support large branch offices, remote employees, and partner connectivity from a single appliance.

600K Concurrent Sessions

Supports the connection density of larger branch and mid-size campus environments.

10 VRF Instances

Segment branch traffic by department, tenant, or security zone using virtual routing and forwarding.

Technical Specifications

Performance (FTD Software)

NGFW Throughput (FW + AVC)18 Gbps

NGIPS Throughput15 Gbps

NGFW (FW + AVC + IPS)12 Gbps

IPSec VPN Throughput18 Gbps

TLS Decryption3.2 Gbps

Scalability (FTD Software)

Max Concurrent Sessions600,000

New Connections per Second70,000

Max VPN Peers1,000

Virtual Router Instances (VRF)10

High AvailabilityActive/Standby

Interfaces & Connectivity

Integrated interfaces8x 1000BASE-T Gigabit Ethernet

Transceiver slots4x SFP+ (1G/10G)

Management Ethernet1x 1000BASE-T

Console portUSB Type-C and RJ-45

USB portUSB 3 Type A

Physical

Form factor1U Rackmount

Dimensions (HxWxD)1.72″ x 11.22″ x 17.25″

Weight9.35 lb (4.24 kg)

Storage960 GB SSD (field-replaceable)

CoolingFront-to-back airflow

Power

Power supplySingle integrated PSU

AC input voltage100–240V AC

AC input frequency50–60 Hz

Max power consumption69W

Environmental

Operating temperature32°F – 104°F (0°C – 40°C)

Operating humidity5% – 85% (non-condensing)

Operating altitude0 – 10,000 ft.

Max acoustic noise57.8 dBA

Ordering Information

CSF1240-TD-K9

Cisco Secure Firewall 1240 with Threat Defense software — full NGFW, IPS, SD-WAN, and TLS decryption.

CSF12400-ASA-K9

Cisco Secure Firewall 1240 with ASA software — maximum stateful inspection throughput.

Documentation

Data Sheet

Cisco Secure Firewall 1200 Series Data Sheet. Complete performance specifications, hardware details, scalability tables, and ordering information for all 1200 Series models.

Download PDF ›

Compare 1200 Series Models

See all 1200 Series models compared side by side. The 1240 is the mid-range 1U model — step up to the 1250 for 24 Gbps throughput, or step down to the 1230 for cost-effective medium branch protection.

View 1200 Series ›

Get a Custom Quote for the Firewall 1240

Our Cisco-certified security specialists will help you select the right model, plan deployment, and configure licensing for your branch environment.

Volume and multi-year pricing available
Cisco Smart Net Total Care bundling
Professional deployment & migration services
Response within one business day

Get a Quote Contact Sales