Firewall Throughput: Not published by Ubiquiti; no firewall-only rating on the official spec sheet
Threat Prevention Throughput: 1 Gbps (IDS/IPS, vendor rating); reviews report roughly 900-950 Mbps sustained, and lower on faster or PPPoE links
IPsec VPN Throughput: Not published by Ubiquiti; WireGuard about 300-600 Mbps in server mode (community-reported)
Max Sessions: Not published; spec sheet lists 300+ simultaneous users and 2,000 MAC address table entries
New Sessions/sec: Not published
Interfaces: 1x 2.5GbE RJ45 WAN (default, reassignable); 4x 1GbE RJ45 LAN; up to 4 WAN-capable ports for multi-WAN
Form Factor: Compact desktop, fanless, 141.8 x 127.6 x 30 mm, 520 g, 6.2 W max, USB-C 5V/3A power
Curation Review
✔ Pros:Built-in UniFi controller, so no separate Cloud Key needed; Low price for a gateway with IDS/IPS and controller included; Built-in IDS/IPS with no subscription fee; 2.5GbE WAN port for multi-gig internet; Multi-WAN failover or load balancing; Low power draw and fanless design; VPN (IPsec, OpenVPN, WireGuard) and VLANs without a subscription
✘ Cons:IDS/IPS ceiling of 1 Gbps limits secure throughput on links above about 1 Gbps; Real-world throughput drops further with PPPoE or threat detection enabled; No Wi-Fi radio, so separate access points are required; No PoE output and no UniFi Protect, Access, or Talk support; Only one 2.5GbE port; the other four are 1GbE; Runs warm and should not be stacked on heat-generating equipment; Firewall and VPN throughput figures are not published by Ubiquiti, so buyers must rely on third-party tests
✔ Pros:25G SFP28 and 10G SFP+ uplinks at a gateway price point; 23.5 Gbps routing throughput; 1 million concurrent sessions; 18-core ARM CPU with 16 GB RAM; hot-swappable redundant PSUs; supports 500+ UniFi devices and 5,000+ clients; manages through UniFi Network controller with a single pane of glass
✘ Cons:IPsec VPN throughput of 580 Mbps is low for a gateway at this price; IDS/IPS throughput of 12.5 Gbps halves routing performance when threat inspection is enabled; SSL/TLS inspection is limited to about 10,000 concurrent sessions; port configuration differs across listings and should be verified; frequently out of stock at major US retailers, with a $170 memory surcharge at some resellers; no built-in Wi-Fi, so it depends on separate UniFi APs and switches; reviewers cite a steeper learning curve than consumer-grade routers