We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Silver rack-mount security router, two gigabit LAN ports, compact 1U chassis

Cisco Systems, Inc.

Cisco Systems, Inc. ISR4321-SEC/K9 firewall appliance

SKU CH-HPFQ-BF94D MPN ISR4321-SEC/K9

Delivers 50-100 Mbps throughput with zone-based firewall, IPsec VPN, and two Gigabit LAN ports

  • ProtocolsIPv4, IPv6, static routes, Routing Information Protocol Vers
  • Speed10/100/1000Mbps
  • SecurityUL 60950-1 CAN/CSA C22.2 No. 60950-1 EN 60950-1 AS/NZS 60950
  • LAN Ports2 x 10/100/1000Mbps
  • Throughput50 Mbps to 100 Mbps
  • Console Port1 GE (Integrated Out of Band)
  • Enterprise-grade routing with 10/100/1000 Mbps dual LAN ports
  • Integrated security bundle includes Zone Based Firewall and IPSec VPN
  • Compact 1U form factor fits standard racks at 14.55 x 11.6 x 1.75 inches
  • Reliable operation from 32 to 104 °F up to 10000 ft altitude
  • Certified to UL 60950-1 CAN/CSA C22.2 No. 60950-1 EN 60950-1 IEC 60950-1 GB-4943

Cisco ISR 4321 Security Bundle

The Cisco ISR 4321-SEC/K9 is a compact firewall and router appliance built for small enterprise branches. It delivers integrated security services and WAN connectivity in a 1U form factor with two onboard Gigabit Ethernet ports. The SEC license activates zone-based firewall, IPsec VPN, EZVPN, DMVPN and FlexVPN features out of the box.

Throughput headroom 50 to 100 Mbps

Aggregated throughput sits between 50 Mbps and 100 Mbps, suitable for broadband or MPLS links up to that ceiling. Two 10/100/1000 Mbps LAN ports handle local switching, while a dedicated 1 GE out-of-band console port provides management access. Performance scales with the activated security services; sustained encryption traffic will approach the upper bound.

Replaces older branch routers

This unit upgrades legacy ISR G2 or similar platforms that lack the SEC license and modern multicore architecture. The jump is worthwhile when a branch needs application-aware routing, built-in VPN topologies and a single device for security and WAN. Sites requiring throughput above 100 Mbps or additional NIM module density should evaluate larger 4000 series models.

Highlights

  • Enterprise-grade routing with 10/100/1000 Mbps dual LAN ports
  • Integrated security bundle includes Zone Based Firewall and IPSec VPN
  • Compact 1U form factor fits standard racks at 14.55 x 11.6 x 1.75 inches
  • Reliable operation from 32 to 104 °F up to 10000 ft altitude
  • Certified to UL 60950-1 CAN/CSA C22.2 No. 60950-1 EN 60950-1 IEC 60950-1 GB-4943

Specifications

BrandCisco Small Business
ModelISR4321-SEC/K9
ProtocolsIPv4, IPv6, static routes, Routing Information Protocol Versions 1 and 2 (RIP and RIPv2), Open Shortest Path First (OSPF), Enhanced IGRP (EIGRP), Border Gateway Protocol (BGP), BGP Router Reflector, Intermediate System-to-Intermediate System (IS-IS), Multicast Internet Group Management Protocol Version 3 (IGMPv3), Protocol Independent Multicast sparse mode (PIM SM), PIM Source Specific Multicast (SSM), RSVP, CDP, ERSPAN, IPSLA, CNS, Call Home, EEM, IKE, ACL, EVC, DHCP, FR, DNS, LISP, OTV, HSRP, RADIUS, AAA, AVC, Distance Vector Multicast Routing Protocol (DVMRP), IPv4-to-IPv6 Multica
Speed10/100/1000Mbps
SecurityUL 60950-1
CAN/CSA C22.2 No. 60950-1
EN 60950-1
AS/NZS 60950-1
IEC 60950-1
GB-4943
LAN Ports2 x 10/100/1000Mbps
Throughput50 Mbps to 100 Mbps
Console Port1 GE (Integrated Out of Band)
TemperatureOperating Conditions:
32 to 104ºF (0 to 40ºC) (altitude 0-10000 ft) (altitude 0-3000m)
32 to 95ºF (0 to 35ºC) (altitude 10000-15000ft) (altitude 3000m-4600m)
Nonoperating Conditions: -13 to 158ºF (-25 to 70ºC)
HumidityOperating Conditions:
Relative humidity: 5% to 85%
Short-term humidity: 5% to 90%, not to exceed 0.024 kg water/kg of dry air
Nonoperating Conditions:
Relative humidity: 5% to 95%
FeaturesSecurity (SEC) Feature
IP Base + Advanced Security: Zone Based Firewall, IPSec VPN, EZVPN, DMVPN, FlexVPN
Dimensions14.55" x 11.6" x 1.75"
Weight9.14 lbs. + 1.2 lbs. Typical weight (fully loaded with modules)
Package ContentsISR 4321 with 2 onboard GE, 2 NIM slots, 1 ISC slot, 4 GB Flash Memory default, 4 GB DRAM default
Shipping weight5.90 kg
Package size546 × 410 × 178 mm

Questions about this item

Will the two 10/100/1000 Mbps LAN ports connect directly to my existing 100 Mbps switches?

Yes, each onboard Gigabit Ethernet port auto-negotiates down to 10 or 100 Mbps full-duplex, so legacy 100 Mbps switches link without configuration changes.

How can I confirm the SEC bundle licence is active after initial boot?

Enter privileged EXEC and run 'show license udi' followed by 'show license detail'; the output lists the SEC entitlement with status 'Authorized' when the security package is registered.

Does the package include rack-mount brackets and a console cable, or must I order them separately?

The box ships with the ISR 4321 chassis, 4 GB flash, 4 GB DRAM, two NIM slots, one ISC slot and integrated out-of-band GE console port; rack-mount kit and serial console cable are optional accessories.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.