Ubiquiti Enterprise Fortress Gateway (EFG) vs Aruba (HPE) Aruba 9240 Campus Gateway: Specs & Price Comparison

Ubiquiti Enterprise Fortress Gateway (EFG)

★ 4.9 Value Score

Firewall Throughput: 23.5 Gbps (routing, iPerf3, DHCP WAN)
Threat Prevention Throughput: 12.5 Gbps (IDS/IPS)
IPsec VPN Throughput: 580 Mbps (site-to-site, single tunnel)
Max Sessions: 1,000,000 concurrent
New Sessions/sec: 71,000 (listed under general capacity; not specific to VPN or IPsec)
Interfaces: 2x 2.5GbE RJ45, 2x 25G SFP28, 2x 10G SFP+ (some listings show 2x RJ45 + 4x SFP28; verify against the Ubiquiti datasheet)
Form Factor: 1U rack-mount, dual hot-swappable PSUs
SSL/TLS Inspection Concurrent Sessions: 10,000 (5,000 recommended under heavy traffic)
CPU / Memory: 18-core ARM v8.2 @ 2 GHz, 16 GB DDR4
UniFi Capacity: 500+ UniFi devices, 5,000+ clients

✔ Pros: 25G SFP28 and 10G SFP+ uplinks at a gateway price point; 23.5 Gbps routing throughput; 1 million concurrent sessions; 18-core ARM CPU with 16 GB RAM; hot-swappable redundant PSUs; supports 500+ UniFi devices and 5,000+ clients; manages through UniFi Network controller with a single pane of glass
✘ Cons: IPsec VPN throughput of 580 Mbps is low for a gateway at this price; IDS/IPS throughput of 12.5 Gbps halves routing performance when threat inspection is enabled; SSL/TLS inspection is limited to about 10,000 concurrent sessions; port configuration differs across listings and should be verified; frequently out of stock at major US retailers, with a $170 memory surcharge at some resellers; no built-in Wi-Fi, so it depends on separate UniFi APs and switches; reviewers cite a steeper learning curve than consumer-grade routers
Est. Price: $1,999 - $2,892

Aruba (HPE) Aruba 9240 Campus Gateway

★ 4.3 Value Score

Firewall Throughput: 20 Gbps base; 30 Gbps with Silver capacity license; 40 Gbps with Gold capacity license (per AOS10 capacity license tiers; not confirmed against HPE datasheet)
Threat Prevention Throughput: Not published in sources reviewed
IPsec VPN Throughput: Not published in sources reviewed
Max Sessions: 4M active firewall sessions (AOS10 capacity license page, all tiers); a second datasheet-style source lists 2,015,291 active firewall sessions
New Sessions/sec: Not published in sources reviewed
Interfaces: 4 x 25GbE SFP28 ports plus 1 expansion slot; USB console (RJ-45 serial) and 2 x USB 2.0
Form Factor: 1U rack-mount
Concurrent IPsec Tunnels: 32K base; 64K Silver; 128K Gold (AOS10 capacity license page); a datasheet-style source lists 16,384 / 24,576 / 32,768 concurrent IPsec sessions
Managed Device Capacity: Sources conflict: 2,000 devices, 2,048 APs, or 4,000 APs per gateway; verify against HPE datasheet
Power Input: 100-240 V AC
Dimensions: 1.7 in H x 17.4 in W x 15.6 in D; approx. 18.08 lb
Licensing: Capacity tiers (base/Silver/Gold) sold as separate licenses; Silver and Gold licenses are priced separately from the appliance
SKU Variants: Region- and variant-specific SKUs include R7H97A (RW), R7J02A (US FIPS/TAA), R7J06A, R7H95A, R7J05A; confirm SKU before purchase

✔ Pros: 25GbE SFP28 uplinks for high-speed campus and data center aggregation; 1U rack form factor with 1 expansion slot for added connectivity; tiered capacity licensing lets buyers scale throughput and tunnel counts without new hardware; large active session capacity (4M) for campus and branch aggregation; Aruba/HPE AOS10 and Central management integration; US FIPS/TAA variant available for government procurement
✘ Cons: Firewall throughput tops out at 40 Gbps with Gold license, below many current-generation high-end firewalls; threat prevention, IPsec throughput, and new sessions/sec figures not clearly published; capacity figures conflict across sources and need verification against HPE's official datasheet; capacity licenses are sold separately and add substantial cost; price varies widely by region, variant, and reseller; some listings show backorder or end-of-life status, so availability should be confirmed before purchase
Est. Price: $23,415 - $39,595

PACKETPERF