We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Silver rack-mount security router, two gigabit LAN ports, compact 1U chassis

Cisco Systems, Inc.

Cisco Systems, Inc. ISR4321-SEC/K9 firewall appliance

SKU CH-HPFQ-BF94D MPN ISR4321-SEC/K9

Delivers 50-100 Mbps throughput with zone-based firewall, IPsec VPN, and two Gigabit LAN ports

  • Rated speed10/100/1000 Mbit/s
  • Supported protocolsIPv4, IPv6, static routes, Routing Information Protocol Vers
  • Security featuresUL 60950-1 CAN/CSA C22.2 No. 60950-1 EN 60950-1 AS/NZS 60950
  • Network ports2 × 10/100/1000 Mbit/s
  • Data throughput50 Mbit/s to 100 Mbit/s
  • Console port1 GE (Integrated Out of Band)
  • Enterprise-grade routing with 10/100/1000 Mbps dual LAN ports
  • Integrated security bundle includes Zone Based Firewall and IPSec VPN
  • Compact 1U form factor fits standard racks at 14.55 x 11.6 x 1.75 inches
  • Reliable operation from 32 to 104 °F up to 10000 ft altitude
  • Certified to UL 60950-1 CAN/CSA C22.2 No. 60950-1 EN 60950-1 IEC 60950-1 GB-4943

Cisco ISR 4321 Security Bundle

The Cisco ISR 4321-SEC/K9 is a compact firewall and router appliance built for small enterprise branches. It delivers integrated security services and WAN connectivity in a 1U form factor with two onboard Gigabit Ethernet ports. The SEC license activates zone-based firewall, IPsec VPN, EZVPN, DMVPN and FlexVPN features out of the box.

Throughput headroom 50 to 100 Mbps

Aggregated throughput sits between 50 Mbps and 100 Mbps, suitable for broadband or MPLS links up to that ceiling. Two 10/100/1000 Mbps LAN ports handle local switching, while a dedicated 1 GE out-of-band console port provides management access. Performance scales with the activated security services; sustained encryption traffic will approach the upper bound.

Replaces older branch routers

This unit upgrades legacy ISR G2 or similar platforms that lack the SEC license and modern multicore architecture. The jump is worthwhile when a branch needs application-aware routing, built-in VPN topologies and a single device for security and WAN. Sites requiring throughput above 100 Mbps or additional NIM module density should evaluate larger 4000 series models.

How it compares

Measured against everything we stock in Firewall Appliances & VPN Gateways, at today’s prices. Recalculated every night.

Price $1,894.99
Pricier than about 73% of the 669 comparable items (median $806.99).

Specifications

Product
Brand nameCisco Small Business
Model nameISR4321-SEC/K9
Performance
Rated speed10/100/1000 Mbit/s
Data throughput50 Mbit/s to 100 Mbit/s
Connectivity
Supported protocolsIPv4, IPv6, static routes, Routing Information Protocol Versions 1 and 2 (RIP and RIPv2), Open Shortest Path First (OSPF), Enhanced IGRP (EIGRP), Border Gateway Protocol (BGP), BGP Router Reflector, Intermediate System-to-Intermediate System (IS-IS), Multicast Internet Group Management Protocol Version 3 (IGMPv3), Protocol Independent Multicast sparse mode (PIM SM), PIM Source Specific Multicast (SSM), RSVP, CDP, ERSPAN, IPSLA, CNS, Call Home, EEM, IKE, ACL, EVC, DHCP, FR, DNS, LISP, OTV, HSRP, RADIUS, AAA, AVC, Distance Vector Multicast Routing Protocol (DVMRP), IPv4-to-IPv6 Multica
Ports & slots
Network ports2 × 10/100/1000 Mbit/s
Console port1 GE (Integrated Out of Band)
Size & build
Product dimensions14.55 in × 11.6 in × 1.75 in
Product weight9.14 lb + 1.2 lb Typical weight (fully loaded with modules)
Shipping weight5.90 kg
Package size546 × 410 × 178 mm
In the box
In the boxISR 4321 with 2 onboard GE, 2 NIM slots, 1 ISC slot, 4 GB Flash Memory default, 4 GB DRAM default
Environment & compliance
Humidity rangeOperating Conditions:
Relative humidity: 5% to 85%
Short-term humidity: 5% to 90%, not to exceed 0.024 kg water/kg of dry air
Nonoperating Conditions:
Relative humidity: 5% to 95%
More details
Security featuresUL 60950-1
CAN/CSA C22.2 No. 60950-1
EN 60950-1
AS/NZS 60950-1
IEC 60950-1 GB-4943

Questions about this item

Will the two 10/100/1000 Mbps LAN ports connect directly to my existing 100 Mbps switches?

Yes, each onboard Gigabit Ethernet port auto-negotiates down to 10 or 100 Mbps full-duplex, so legacy 100 Mbps switches link without configuration changes.

How can I confirm the SEC bundle licence is active after initial boot?

Enter privileged EXEC and run 'show license udi' followed by 'show license detail'; the output lists the SEC entitlement with status 'Authorized' when the security package is registered.

Does the package include rack-mount brackets and a console cable, or must I order them separately?

The box ships with the ISR 4321 chassis, 4 GB flash, 4 GB DRAM, two NIM slots, one ISC slot and integrated out-of-band GE console port; rack-mount kit and serial console cable are optional accessories.

More in Firewall Appliances & VPN Gateways

Similar items