Cisco CISCO3945-HSEC+/K9
VPN ISM module HSEC bundles for 3945 ISR platform
Product Highlights
What's Included
256MB Flash (1x MEM-CF-256MB)
(1) PWR-3900-AC
(1) AC Power Cord
(1) Rackmount Kit (ACS-3900-RM-19)
(1) ISM-VPN-39
Securing branch-office traffic shouldn't mean sacrificing throughput or adding standalone appliances to an already crowded rack. The CISCO3945-HSEC+/K9 solves this by bundling the Cisco 3945 Integrated Services Router with the ISM-VPN-39 VPN Internal Service Module, delivering hardware-accelerated IPsec encryption right out of the box.
Built on the Cisco ISR Generation 2 (ISR G2) platform, the Cisco 3945 provides a modular, services-rich architecture with 3 onboard Gigabit Ethernet ports, 4 EHWIC slots, 4 DSP slots, 4 service module slots, and a dedicated ISM slot — all in a 3U rack-mountable chassis. The pre-installed ISM-VPN-39 module features a dedicated multicore processor that operates independently of the router's main CPU, offloading cryptographic workloads so encrypted VPN traffic can flow at up to 1200 Mbps (1400-byte packets) without degrading routing, voice, or application performance.
This HSEC bundle ships with 1 GB DRAM, 256 MB CompactFlash, an AC power supply, power cord, and a 19-inch rackmount kit — everything needed for a rapid deployment. Whether you're connecting branch offices over site-to-site IPsec tunnels, enabling secure remote access via SSL VPN, or consolidating WAN edge services onto a single platform, the CISCO3945-HSEC+/K9 delivers enterprise-grade security performance with the flexibility and density the Cisco 3900 Series is known for.
Features & Benefits
Hardware-Accelerated VPN Encryption
The included ISM-VPN-39 module provides a dedicated multicore crypto processor that offloads IPsec and SSL VPN encryption from the router's main CPU. This enables the Cisco 3945 to deliver up to 1200 Mbps of IPsec throughput (1400-byte packets) without impacting routing or application services — critical for branches running concurrent voice, video, and data over encrypted tunnels.
Suite B & Advanced Cryptography
The VPN ISM supports the latest cryptographic standards including AES, 3DES, DES, SHA-1, MD5, RSA, ECDSA, and GMAC, as well as NSA-regulated Suite B Cryptography. This ensures compliance with stringent government and enterprise security policies while future-proofing your encryption infrastructure.
Modular Services Architecture
The Cisco 3945 chassis provides 4 EHWIC slots, 4 DSP slots, 4 service module (SM) slots, and 1 ISM slot, enabling you to layer on WAN interfaces, voice DSPs, application modules, and wireless controllers as your branch requirements evolve. The modular SPE150 services engine can also be upgraded for increased performance over time.
Integrated Gigabit Ethernet Connectivity
Three onboard 10/100/1000 Ethernet ports — two of which support both SFP and RJ-45 connectivity — provide flexible LAN and WAN uplink options. This eliminates the need to consume expansion slots for basic connectivity, preserving them for value-added service modules.
Simplified Deployment
This HSEC bundle ships complete with 1 GB DRAM, 256 MB CompactFlash, AC power supply, power cord, and a 19-inch rackmount kit. The ISM-VPN-39 is pre-installed in the ISM slot, so there's no additional module procurement or installation — just rack, cable, configure, and go.
Deployment Scenarios
Secure Branch-Office WAN Edge
Deploy the CISCO3945-HSEC+/K9 as the primary WAN edge router at medium-to-large branch offices that require high-throughput IPsec tunnels back to headquarters or data centers. The hardware-accelerated VPN module ensures encrypted traffic flows at line rate without impacting concurrent voice and video services.
Multi-Site VPN Hub Router
Use the Cisco 3945 HSEC bundle as a VPN hub aggregating encrypted tunnels from dozens of remote sites. The ISM-VPN-39's dedicated multicore processor handles the crypto workload independently, freeing the router's CPU for routing protocol processing, QoS, and firewall inspection.
Compliance-Driven Enterprise Networks
Organizations subject to PCI DSS, HIPAA, or government security mandates can leverage the Suite B cryptography and FIPS-capable encryption of the VPN ISM to meet regulatory requirements for data-in-transit protection — all within a single, manageable ISR G2 platform.
Consolidated Branch Services Platform
Combine VPN encryption with voice gateway, wireless controller, and application services on a single Cisco 3945 chassis. The 4 SM slots and 4 EHWIC slots allow you to add DSP modules for unified communications, WAN optimization, or WLAN controllers alongside the pre-installed VPN ISM.
General
Interfaces & Expansion
VPN ISM Module (ISM-VPN-39)
Memory
Power
Physical
Environmental
Compliance
Compatibility Notes
Platform: This is a complete Cisco 3945 ISR G2 router bundle — not a standalone module. The ISM-VPN-39 is pre-installed in the chassis ISM slot.
Cisco IOS: Requires Cisco IOS 15.x Universal image. The HSEC (High Security) designation includes the necessary encryption license (FL-39-HSEC-K9) for payload encryption features.
Memory: Ships with 1 GB DRAM (MEM-3900-1GB) and 256 MB CompactFlash (MEM-CF-256MB). DRAM is expandable up to 2 GB using matched DIMMs.
Power: Includes one PWR-3900-AC power supply. The Cisco 3945 chassis supports a second AC or DC power supply for redundancy (ordered separately).
Rackmount: Includes ACS-3900-RM-19 kit for standard 19-inch rack installation (3U height).
Downloads & Resources
Frequently Asked Questions
| Part Number | Product | Key Difference |
|---|---|---|
| CISCO3945/K9 | Cisco 3945 ISR (Base IP) | Base 3945 router without VPN ISM module or HSEC license — add ISM-VPN-39 separately if VPN acceleration is needed later. |
| CISCO3945-SEC/K9 | Cisco 3945 Security Bundle | Includes Security license but no ISM-VPN-39 module — relies on onboard SPE crypto engine rather than dedicated VPN hardware acceleration. |
| CISCO3925-HSEC+/K9 | Cisco 3925 HSEC+ Bundle | Similar HSEC bundle on the smaller 3925 platform — 2 SM slots instead of 4, lower VPN throughput (up to 1100 Mbps with ISM-VPN-39). |
| CISCO3945E/K9 | Cisco 3945E ISR | Enhanced 3945E with higher onboard crypto performance — comparable VPN throughput to 3945+ISM-VPN-39 without requiring the ISM module. |