ISR4431-SEC/K9 Cisco ISR 4431 Security Bundle Router

ISR 4431 Security Bundle

ISR4431-SEC/K9 is an exact Cisco order built on the ISR 4431 with four onboard Gigabit Ethernet interfaces, three NIM slots and one ISC slot. Bundle boundary: SEC identifies the security technology-package order; it does not identify UC voice DSP hardware or the APP package.

Platform performance boundary

500 Mbps default aggregate throughput, upgradeable to 1 Gbps with the documented performance license. This published aggregate value is a platform licensing boundary, not a guarantee for every mix of encryption, voice, application inspection or modular services.

Exact receiving evidence

Record the security entitlement, cryptographic eligibility, throughput license, WAN NIMs and software release. Do not accept a base ISR4431/K9 chassis as this SEC order merely because the faceplate is identical.

Workload-specific migration record

Build a security-policy migration sheet containing VPN peers, tunnel count, cipher requirements, NAT rules, zones and logging destinations. Test those controls on the replacement platform before retiring the ISR 4431.

Lifecycle decision

Cisco ended sale for this ISR 4000 generation and publishes 30 November 2028 as the last date of support for the affected platform family. Treat the recommended Catalyst 8300 family as a redesign starting point: interface modules, service-module functions, licenses, throughput, power and configuration are not automatically portable.

Acceptance checklist

Record the exact PID and serial, chassis inventory, memory, flash, power supplies, installed NIM/ISC/service modules, software release, performance license and every active entitlement. Preserve the final test evidence and configuration backup with the asset record.

Official sources: Cisco ISR 4000 Series data sheet and Cisco ISR 4000 lifecycle and migration notice.