Max Sessions: 1,400,000 concurrent TCP sessions; 5,000 firewall policies; 200 gateway-to-gateway and 500 client-to-gateway IPsec VPN tunnels
New Sessions/sec: 85,000 new TCP sessions per second
Interfaces: 6x GE RJ45 (4 LAN and 2 WAN per product description); 1 GE RJ45 bypass pair (PORT1/PORT2); 2x GE SFP slots; 1x RJ45 serial (data); 1x RJ45 console; 1x USB 2.0; 1x microSD slot; digital I/O module. No cellular or Wi-Fi.
Form Factor: Ruggedized fanless desktop, DIN-rail, or wall mount; 42.7 x 216 x 159 mm (1.68 x 8.50 x 6.26 in); 1.24 kg (2.74 lb); IP40
Processor: FortiSP5 with TPM
Power Input: Redundant 12-125 VDC dual inputs (DC cables not included); 15.2 W average / 18.7 W max; 12 V DC / 1.67 A max; 64 BTU/h max heat dissipation
Operating Temperature: -40u00b0C to 75u00b0C (-40u00b0F to 167u00b0F); storage -40u00b0C to 85u00b0C; 5-95% non-condensing humidity; up to 3,048 m (10,000 ft) altitude
PoE: Not listed (no PoE)
Curation Review
✔ Pros:Ruggedized, fanless design rated for -40°C to 75°C operation, suited to harsh industrial and OT sites; Redundant 12-125 VDC dual power inputs improve availability in substations, vehicles and industrial plants; Strong throughput for an industrial unit at 8 Gbps firewall and 7.1 Gbps IPsec VPN; Built-in SD-WAN and FortiOS with FortiGuard security services and OT-focused IPS; Two SFP slots plus a bypass port pair and a digital I/O module support fiber uplinks and fail-safe deployment; Supports DIN-rail, desktop and wall mounting; TPM and FortiSP5 hardware for security
✘ Cons:Only 1.1 Gbps threat protection and 1.25 Gbps NGFW throughput, well below the headline firewall figure once security services are enabled; No PoE, cellular or Wi-Fi built in, so separate hardware is needed for those; IP40 rating is weaker than IP67-class enclosures for washdown or dusty environments; Bundled security subscriptions (UTP, FortiCare) are a recurring cost and add significantly to the total price; DC power cables are not included and must be sourced separately; Public spec sources conflict on IP rating (IP30 vs IP40), and some spec tables come from resellers rather than Fortinet
IPsec VPN Throughput: Not published by Ubiquiti; WireGuard/Site-Magic VPN up to 500 Mbps (third-party review, untested method)
Max Sessions: Not published
New Sessions/sec: Not published
Interfaces: 5x 2.5GbE RJ45 (1 WAN + 4 LAN, one LAN port can be remapped to a second WAN)
Form Factor: Compact desktop, 142 x 127 x 30 mm, USB-C 5V/5A power (max 16.1 W)
Curation Review
✔ Pros:2.5GbE WAN and LAN ports on a compact, low-power chassis (max 16.1 W); 512GB built-in NVMe storage on the standard SKU for local UniFi data; Integrated UniFi controller with IDS/IPS and no license or subscription fees; Supports 300+ clients and 30+ UniFi devices; Multi-WAN capable through the remappable LAN port
✘ Cons:Only 1.5 Gbps with IDS/IPS enabled, well below the 2.5 Gbps routing figure; IPsec VPN throughput, session counts and new sessions per second are not published; No PoE output and no built-in Wi-Fi access point; No LAG/LACP support; 500 Mbps VPN throughput is limiting for high-volume site-to-site tunnels