Ubiquiti Enterprise Fortress Gateway (EFG) vs Cisco Cisco Secure Firewall 3105: Specs & Price Comparison

Ubiquiti Enterprise Fortress Gateway (EFG)

★ 4.9 Value Score

Firewall Throughput: 23.5 Gbps (routing, iPerf3, DHCP WAN)
Threat Prevention Throughput: 12.5 Gbps (IDS/IPS)
IPsec VPN Throughput: 580 Mbps (site-to-site, single tunnel)
Max Sessions: 1,000,000 concurrent
New Sessions/sec: 71,000 (listed under general capacity; not specific to VPN or IPsec)
Interfaces: 2x 2.5GbE RJ45, 2x 25G SFP28, 2x 10G SFP+ (some listings show 2x RJ45 + 4x SFP28; verify against the Ubiquiti datasheet)
Form Factor: 1U rack-mount, dual hot-swappable PSUs
SSL/TLS Inspection Concurrent Sessions: 10,000 (5,000 recommended under heavy traffic)
CPU / Memory: 18-core ARM v8.2 @ 2 GHz, 16 GB DDR4
UniFi Capacity: 500+ UniFi devices, 5,000+ clients

✔ Pros: 25G SFP28 and 10G SFP+ uplinks at a gateway price point; 23.5 Gbps routing throughput; 1 million concurrent sessions; 18-core ARM CPU with 16 GB RAM; hot-swappable redundant PSUs; supports 500+ UniFi devices and 5,000+ clients; manages through UniFi Network controller with a single pane of glass
✘ Cons: IPsec VPN throughput of 580 Mbps is low for a gateway at this price; IDS/IPS throughput of 12.5 Gbps halves routing performance when threat inspection is enabled; SSL/TLS inspection is limited to about 10,000 concurrent sessions; port configuration differs across listings and should be verified; frequently out of stock at major US retailers, with a $170 memory surcharge at some resellers; no built-in Wi-Fi, so it depends on separate UniFi APs and switches; reviewers cite a steeper learning curve than consumer-grade routers
Est. Price: $1,999 - $2,892

Cisco Cisco Secure Firewall 3105

★ 3.4 Value Score

Firewall Throughput: 10 Gbps (stateful inspection, 1024B FW+AVC; ASA stateful firewall throughput 10.0 Gbps)
Threat Prevention Throughput: 10 Gbps (FW+AVC+IPS, 1024B)
IPsec VPN Throughput: 5.5 Gbps (1024B TCP with FastPath, FTD); 5.5 Gbps (450B UDP L2L, ASA); ASA VPN offload projected at 7.0 Gbps
Max Sessions: 1.5 million concurrent connections (with AVC)
New Sessions/sec: 90,000 new connections per second with AVC (FTD); 150,000 new connections per second (ASA)
Interfaces: 8 x 10M/100M/1GBASE-T RJ-45 + 8 x 1/10G SFP+ fixed (16 ports); up to 24 total Ethernet ports with 8 x 1/10G network module option; 1 x 1/10G SFP management port
Form Factor: 1RU rack-mount appliance (1.75 x 17 x 20 in), single 400W AC PSU (dual optional), AC or DC input
Max VPN Peers: 2,000
Clustering: Not supported on 3105
Layer: L3 firewall (Layer 3 security appliance; no PoE)

✔ Pros: Delivers 10 Gbps firewall and threat prevention throughput in a compact 1RU form factor; Supports FTD and ASA software images, giving a choice of NGFW or classic ASA feature sets; Provides 1.5 million concurrent connections and up to 2,000 VPN peers for a small appliance; Offers 16 fixed ports (8 copper, 8 SFP+) with optional 8-port 1/10G expansion module; Dual power supply option improves availability; Carries a comparatively low price point within the Secure Firewall 3100 series
✘ Cons: No clustering support, so no horizontal scale-out or HA cluster beyond standard failover; IPsec VPN throughput of 5.5 Gbps is well below the 10 Gbps firewall rating; Stateful and threat prevention throughput are both capped at 10 Gbps, limiting use in high-throughput data centers; Optional 10G expansion and dual PSU raise the total cost well above base pricing; Reseller prices vary widely and no official Cisco list price is published on the datasheet; Requires Cisco Secure Firewall subscription licenses (threat, malware, URL) for full feature use, which are priced separately
Est. Price: $18,090 - $32,214

PACKETPERF