/ Products / CISCO / ISA-3000-4C-K9
ISA-3000-4C-K9

ISA-3000-4C-K9

CISCO Refurbished

Manufacturer
CISCO
Condition
Refurbished
Lead Time
2-3 days
Availability
Not In Stock
List Price/RRP
US$3,995.00

Description

The ISA-3000-4C-K9 is a network security platform produced by CISCO for small to medium-sized businesses. It is designed to secure and protect networks from cyber threats by providing firewall, VPN, and intrusion prevention capabilities. The platform is equipped with four Gigabit Ethernet ports for network connectivity and can support up to 400 VPN tunnels. It also has application visibility and control features to manage network traffic and prioritize critical applications. The ISA-3000-4C-K9 is easy to install and manage with a user-friendly interface and centralized management tools. It supports multiple security technologies, including advanced threat defense and malware protection. The platform is designed to help businesses keep their networks secure while minimizing downtime and maintaining productivity. It is an ideal solution for organizations looking for a comprehensive network security solution that is easy to deploy and manage.

Make an enquiry

about ISA-3000-4C-K9

We are Refurbished Network Equipment specialists and we may have ISA-3000-4C-K9 available to us if it’s not in stock. Please complete the form and we'll get back to you as soon as we can. We have a vast amount of experience and knowledge with all legacy CISCO components and will be happy to provide you with expert after-sales advice, should you need it.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Part Code
ISA-3000-4C-K9
Description
Industrial Security Appliance 3000 4 copper ports
Manufacturer
CISCO
End of Hardware Support
Yes
End of Sale
Yes
End of Life
Yes
Warranty
2 year warranty icon

Capabilities of Cisco ISA 3000

Expand

Capabilities of Cisco ISA 3000

Robust Industrial Design
Built for harsh environment and temperature range (-40° to 70°C).
Hardened for vibration, shock, surge, and electrical noise immunity.
Four 1 Gigabit Ethernet uplink ports provide multiple resilient design options. (4 copper or 2 copper plus 2 fiber)
Complies with multi-industry specifications for industrial automation, ITS, and electrical substation environments.
Improves uptime, performance, and safety of industrial systems and equipment.
Compact DIN rail unit design with industrial LED features allowing easy monitoring.
Fanless, convection cooled with no moving parts for extended durability.
IEEE 1588v2 PTP (default profile is supported).
Alarm I/O for monitoring and signaling to external equipment.
User-Friendly GUI Device Manager
On-device management for local awareness immediate control.
Multi-device management can handle 100s of devices.
User specific access and control customizations.
Traffic Continuity/Protection
Full “lights out” traffic bypass copper ports.
Default passive deployment learning mode.
Software updates possible without traffic loss.
Connection limitations protect from DOS causing traffic.
Latency detection and mitigation functions.
Quality of Service policies.
Proven, Extensible Access Control
Enforces ISA-95/IEC 62264 segmentation needs.
Full stateful inspection
Layer 2 and Layer 3 Firewall operation modes.
Downloadable Access Control Lists.
Identity based access control policies.
Users/User Groups.
Policy based routing ACLs.
Extended ACLs.
WebVPN ACLs.
Dynamic ACLs.
TrustSec ACLs.
Uncompromising Threat Detection
Over 25,000 rules provide the widest range of protection anywhere.
Hundreds of industrial focused rules.
Industrial equipment exploit protection rules.
Protocol abuse identification.
Protects web based control systems.
Network behavior analytics.
Passive device discovery.
Application Control
Visibility and Control of all DMZ infrastructure.
Visibility and Control of Industrial applications.
Visibility and Control of individual protocol commands and values.
ICS/OT Protocol Visibility and/or Control.
Remote Access Enablement/Controls
Network Access Control via Cisco AnyConnect.
Identity Services Engine support.
Site to Site VPN.
Remote Access VPN.
Clientless SSL VPN offering.
Cisco Secure Desktop.
Support for Citrix and VMware clientless connections.
DMZ Infrastructure
DNS Services.
DHCP Services.
AAA Support.
IP Routing.
OT/ICS Protocol support – Application Identifiers
Modbus.
DNP3.
BACNet.
COTP.
COSEM.
ENIP – Ethernet/IP.
GOOSE.
GSE.
Emission Control Protocol.
Fujitsu Device Control.
Honeywell Control Station/NIF Server.
Honeywell Esperion DSA Server Monitor.
IEC-60870-5-104.
ISO MMS.
OPC-UA.
Q.931.
SRC.
TPKT.
CIP (Common Industrial Protocol).
CIP Admin.
CIP Infrastructure.
CIP Malformed.
CIP RA Admin Download.
CIP RA Admin Firmware Update.
CIP RA Admin Other.
CIP RA Infrastructure.
CIP A Read Other.
CIP RA Read Tag.
CIP RA Write Other.
CIP RA Write Tag.
CIP Read.
CIP Unknown.
CIP Write.
OT Protocol pre-processors and Intrusion Rules
Modbus.
DNP3.
CIP.
IEC-60870-5-4.
IEC-61850-MMS.

Supported Cisco Ruggedized SFPs

Expand

Supported Cisco Ruggedized SFPs

Product Number
Product Number
Type
GLC-SX-MM-RGD=
1000 BASE-SX Ruggedized
GLC-LX-SM-RGD=
1000 BASE-LX/LH Ruggedized
GLC-FE-100FX-RGD=
100 BASE-FX Ruggedized
GLC-FE-100LX-RGD=
100 BASE-LX Ruggedized

Suggested power supply

Expand

Suggested power supply

Cisco Part number
Cisco Part number
Details
PWR-IE50W-AC-IEC
AC to DC 24V/2.1A DIN Rail power supply, input I00-240VAC/1.25A 50-60Hz, output 24VDC/2.1A, IEC Plug
PWR-IE50W-AC
AC to DC 24V/2.1A DIN Rail power supply, input 100-240VAC/1.25A or 125-250VDC/1A, output 24VDC

Physical product specifications

Expand

Physical product specifications

Description
Description
Specification
Hardware
4 Core Intel Rangely (I-temp).
8-GB DRAM (soldered down).
16-GB onboard flash memory.
mSATA 64Gb.
1-GB removable SD flash memory card - industrial temp (enabled in future release).
Mini-USB connector for console.
RJ-45 traditional console connector.
Dedicated 10/100/1000 Management port.
Hardware based anti-counterfeit, anti-tamper chip.
Factory reset option.
Alarm
Alarm I/O: two alarm inputs to detect dry contact open or closed, one Form C alarm output relay.
Dimensions, (H x W x D)
11.2cm (Width) x 13cm (Height) x 16cm (Depth).
Weight
1.9kg.
Power Supply and Ranges
Dual internal DC.
Nominal ± 12Vdc, 24Vdc, or 48Vdc.
Maximum Range 9.6 Vdc to 60 Vdc.
Power Consumption 24 Watts.
MTBF - Mean Time Between Failure
ISA-3000-4C 398,130 hours.
ISA-3000-2C2F 376,580 hours.

Device scalability

Expand

Device scalability

Description
Description
Specification
Throughput
Max 2Gbps - Min. 22Mbps
Varies with traffic type and security activity
(please work with Cisco SE for your traffic profile)
IPSec VPN Tunnels
5, 25 (with SecPlus license on ASA), 25 (FTD)
Defined Interfaces
200, 400 (with SecPlus license on ASA), 400 (FTD)
VLAN counts
5, 100 (with SecPlus license on ASA), 100 (FTD)
IPv4 MAC security ACEs
1,000 with default TCAM Template
NAT translation
Bidirectional, 128 unique subnet NAT translation entries, which can expand to tens of thousands of translated entries if designed properly

Cisco ISA 3000 Key network support features

Expand

Cisco ISA 3000 Key network support features

General Features
General Features
Features
NAT
Static NAT
With Port Translation, One-to-Many, Non-standard ports
Dynamic NAT
Dynamic PAT
Identity NAT
Layer 2 IPv6
IPv6 Host support, HTTP over IPv6, SNMP over IPv6
Layer 3 Routing
IPv4 Static Routing
Dynamic Routing - RIP, EIGRP, ISIS, OSPF and BGP
Utility
IEEE 1588 (PTP HW enabled)
Separate Routing for Management Traffic
Segregates data and management traffic routing
Trunking
802.1q trunks supported

Cisco ISA 3000 key security software features

Expand

Cisco ISA 3000 key security software features

Security Area
Security Area
Features
TrustSec Controls
In-band and out of band Identity
Active Directory integration
Policy based on Security Group Tags
802.1x support
MACSec and MAB support
Enforces end-point security state for remote access
Multi-Level Access Controls
Global Blacklists - automated or manual
Global Whitelists
Third party intelligence feed utilization
File Whitelists
File Blacklists
Application level access control
802.1x support
Threat Network Mapping
Passive device identification
Mobile device identification
Application host network mapping
Vulnerability/host network mapping
User/host network mapping
Threat Discovery
Indicators of Compromise tracking
OpenAppID - open community ID system
Correlation policies and responses
Traffic variance detection
Router based remediation actions
Netflow tracking
25,000+ threat identifiers
Customizable identifiers
Can create wholly new identifiers
Widest identifier contributorship
File Tracking
Approved file trace
Suspect file trace
Malware match

Compliance specifications

Expand

Compliance specifications

Type
Type
Standards
Electromagnetic Emissions
FCC 47 CFR Part 15 Class A
EN 55022A Class A
VCCI Class A
AS/NZS CISPR 22 Class A
CISPR 11 Class A
CISPR 22 Class A
ICES 003 Class A
CNS13438 Class A
KN22
Electromagnetic Immunity
EN55024
CISPR 24
AS/NZS CISPR 24
KN24
EN 61000-4-2 Electro Static Discharge
EN 61000-4-3 Radiated RF
EN 61000-4-4 Electromagnetic Fast Transients
EN 61000-4-5 Surge
EN 61000-4-6 Conducted RF
EN 61000-4-8 Power Frequency Magnetic Field
EN 61000-4-9 Pulse Magnetic Field
EN 61000-4-18 Damped Oscillatory Wave
EN-61000-4-29 DC Voltage Dips and Interruptions
Industry Standards
EN 61000-6-1 Immunity for Light Industrial Environments
EN 61000-6-2 Immunity for Industrial Environments
EN 61000-6-4 Emission Standard for Industrial Environments
EN 61326 Industrial Control
EN 61131-2 Programmable Controllers
IEEE 1613 Electric Power Stations Communications Networking
IEC 61850-3 Electric Substations Communications Networking
NEMA TS-2
EN 50121-3-2
EN 50121-4
EN 50155
Safety Standards and Certifications
Information Technology Equipment:
UL/CSA 60950-1
EN 60950-1
CB to IEC 60950-1 with all country deviations
NOM to NOM-019-SCFI (through partners and distributor)
Industrial Floor (Control Equipment):
UL 508
CSA C22.2, No 142
EN/IEC 61010-2-201
UL/CSA 61010-1
Hazardous Locations*
ANSI/ISA 12.12.01 (Class I, Div 2 A-D
CSA C22.2 No 213 (Class 1, Div 2 A-D)
UL/CSA 60079-0, -15
IEC 60079-0, -15 (IECEx test report Class I, Zone 2, group II gases)
EN 60079-0, -15 ATEX certification (Class I, Zone 2, group II gases)
Must meet deployment requirements such as with IP 54 enclosure described in the following document: Product Documentation and Compliance Information for the Cisco ISA 3000 Industrial Security Appliance https://www.cisco.com/c/dam/en/us/td/docs/security/Firewalls/ISA3000/ISA3000-PDOC.pdf
Operating Environment
Operating Temperature: -40C to +74C
-40C to +70C (Vented Enclosure Operating)
-40C to +60C (Sealed Enclosure Operating)
-40C to +75C (Fan or Blower equipped Enclosure Operating)
EN 60068-2-21
EN 60068-2-2
EN 61163
Storage Environment
Temperature: -40 to +85 degrees C
Altitude: 0-15,000 feet
IEC 60068-2-14
Humidity
Relative humidity of 5% to 95% non-condensing.
IEC 60068-2-30
Shock and Vibration
IEC60068-2-6 and IEC60068-2-27
MIL-STD-810, Method 514.4
Marine EN60945
Industrial EN61131-2/IEC61131-2
Railway EN61373 CAT 1B
Smart Grid EN61850-3
IEEE 1613
Corrosion
ISO 9223: Corrosion
class C3-Medium
class C4-High
EN 60068-2-52 (Salt Fog)
EN 60068-2-60 (Flowing Mixed Gas)
Others
RoHS Compliance
China RoHS Compliance
TAA (Government)
CE (Europe)
Warranty
Five-year limited HW warranty on all ISA 3000 PIDS. See link at end of Datasheet for more details on warranty.

Why Buy Refurbished?

Workmen and forklift

Product Details

We provide refurbished Cisco kit, finished to exceptional standards: rigorously tested, immaculately packed and backed by the best customer service you'll find anywhere.

Race large

Committed to Cisco

Go Communications specialises in Refurbished Cisco Systems equipment. We can source virtually any Cisco part. Through our SAMEasNEW refurbished programme, we can even provide high quality, pre-owned parts that Cisco no longer makes - reducing your need to upgrade end-of-life equipment.

Power supply packaging home 2

Committed to quality

Go Communications is committed to the highest levels of reliability and quality. Our state-of-the-art Cisco Certified Internetwork Expert (CCIE) development facility 'soak tests' every device and component we sell: only if it meets our exceptionally high standards can it be accepted onto our market-leading two-year warranty programme.

For hire 2

Committed to service

We believe in honouring our commitments, providing outstanding quality and delivering fantastic customer service at prices which are very hard to beat. As a result we have built a reputation as a trusted, reliable and knowledgeable source of high quality refurbished Cisco components.

Cleaning 03 home large

Experience

Everyone at Go Communications has been involved with Cisco Systems products for more than fifteen years. That's not just those in our sales and engineering teams, but also our purchasing, logistics and even finance departments.

About us

Fast Delivery

We believe we are one of the UK's fastest and most efficient Cisco delivery services. For instance, 'in stock' items can be delivered within the M25 corridor within two hours, or to Scotland and Wales within eight hours.

Cleaning 01 home large

Two Year Warranty

We offer an industry-leading two year warranty* on all of our refurbished products. This includes overnight advanced replacement and ongoing technical support from our CCIE and CCNA certified technicians. We aim to replace all equipment under warranty within 24 hours. If the item isn't in stock, please allow up to 72 hours. If a replacement isn't available in time, we may offer a temporary solution free of charge. * Retail end-user clients only.

Brass band large

Terms and conditions of sale and purchase

Please follow the links for more details on our Terms of Purchase and Terms of Sale. For more information about our products, please call 01279 408 777 or email us at: sales@gocomsys.com.

Why Go Communications?