Interfaces: 16x GE RJ45 switch ports; 2x GE RJ45 HA/management ports; 8x GE SFP; 4x 10GE SFP+ FortiLink slots (transceivers sold separately); 1x RJ45 console; 1x USB
Form Factor: 1RU rackmount (44 x 432 x 254 mm)
Curation Review
✔ Pros:Strong firewall and IPsec VPN throughput for its class; 3M concurrent sessions and 140K new sessions/sec handle busy branch or mid-size office traffic; Dense port layout with 16 hardware-accelerated GE RJ45 ports plus 8 GE SFP and 4 10GE SFP+ slots; Built-in FortiLink support lets it manage FortiSwitch units from the firewall; Single FortiOS platform with IPS, application control, and SD-WAN features under one license model
✘ Cons:Threat prevention throughput (2.8 Gbps) is much lower than the firewall and VPN figures, so full inspection is the real bottleneck; 4x 10GE SFP+ slots ship empty and transceivers cost extra; Security services such as IPS, AV, and FortiGuard updates require paid FortiCare/FortiGuard bundles on top of the hardware price; 1RU rackmount chassis is a poor fit for desktop or small-branch deployments without a rack; Pricing varies widely between resellers and list prices are inconsistent, so total cost of ownership is hard to pin down
IPsec VPN Throughput: Not published by Ubiquiti; WireGuard/Site-Magic VPN up to 500 Mbps (third-party review, untested method)
Max Sessions: Not published
New Sessions/sec: Not published
Interfaces: 5x 2.5GbE RJ45 (1 WAN + 4 LAN, one LAN port can be remapped to a second WAN)
Form Factor: Compact desktop, 142 x 127 x 30 mm, USB-C 5V/5A power (max 16.1 W)
Curation Review
✔ Pros:2.5GbE WAN and LAN ports on a compact, low-power chassis (max 16.1 W); 512GB built-in NVMe storage on the standard SKU for local UniFi data; Integrated UniFi controller with IDS/IPS and no license or subscription fees; Supports 300+ clients and 30+ UniFi devices; Multi-WAN capable through the remappable LAN port
✘ Cons:Only 1.5 Gbps with IDS/IPS enabled, well below the 2.5 Gbps routing figure; IPsec VPN throughput, session counts and new sessions per second are not published; No PoE output and no built-in Wi-Fi access point; No LAG/LACP support; 500 Mbps VPN throughput is limiting for high-volume site-to-site tunnels