PACKETPERF

Primary Device

Select Primary Hardware... Aruba 6000 24G 4SFP Aruba AP-515 Aruba AP-535 Aruba (HPE) 6300M Aruba (HPE) 7030 Aruba (HPE) 9004 Gateway Aruba (HPE) 9240 Campus Gateway Aruba (HPE) AP-735 Aruba (HPE) Aruba 6400 Switch Aruba (HPE) Aruba 8320 Aruba (HPE) Aruba 9004 Gateway Aruba (HPE) Aruba 9106 Gateway Aruba (HPE) Aruba 9114 Gateway Aruba (HPE) Aruba 9240 Campus Gateway Aruba (HPE) Aruba AP-655 Aruba (HPE) Aruba AP-755 Aruba (HPE) Aruba CX 6100 Aruba (HPE) Aruba CX 6100 Switch Aruba (HPE) Aruba CX 6200 Aruba (HPE) Aruba CX 6200F Switch Aruba (HPE) Aruba CX 6300 Aruba (HPE) Aruba CX 6300M Switch Aruba (HPE) Instant On AP33 Aruba (HPE) Instant On AP45 Cisco C9200L-24T-4G Cisco C9200L-48T-4G Cisco Catalyst 9120AX Cisco Catalyst 9136 Cisco Catalyst 9136I Cisco Catalyst 9164 (CW9164I) Cisco Catalyst 9166 Cisco Catalyst 9166 Series (CW9166) Cisco Catalyst 9176I (CW9176I) Cisco Catalyst 9176I (CW9176I-CFG) Cisco Catalyst 9178i Cisco Catalyst 9200 Cisco Catalyst 9200 Series Cisco Catalyst 9200L Cisco Catalyst 9300 Cisco Catalyst 9300-48P Cisco Catalyst 9300X Cisco Catalyst 9500 Cisco Catalyst 9500 Series Cisco Catalyst 9500-48Y4C Cisco Catalyst 9500X Cisco Catalyst CW9164 Cisco Catalyst CW9166 Cisco Catalyst CW9166I Cisco Catalyst CW9171 Cisco Catalyst CW9172I Cisco Catalyst CW9174 Cisco Catalyst CW9176 Cisco Catalyst CW9176I Cisco Catalyst CW9178I Cisco Catalyst CW9179F Cisco Cisco Catalyst 9166I Cisco Cisco Catalyst 9200 Cisco Cisco Catalyst 9200L Cisco Cisco Catalyst 9300X Cisco Cisco Catalyst 9500 Cisco Cisco Secure Firewall 1210 Cisco Cisco Secure Firewall 3105 Cisco Cisco Secure Firewall 3110 Cisco Cisco Wireless 9178I (CW9178I) Cisco CW9176 Cisco Nexus 9300-GX2 Cisco Nexus 9300-GX2 (N9K-C9332D-GX2B) Cisco Nexus 93180YC-FX3 Cisco Secure Firewall 1010 Cisco Secure Firewall 1120 Cisco Secure Firewall 1140 Cisco Secure Firewall 1150 Cisco Secure Firewall 1210 Cisco Secure Firewall 1220 (1220CX) Cisco Secure Firewall 220 Cisco Secure Firewall 3105 Cisco Secure Firewall 3110 Cisco Secure Firewall 3120 Cisco Secure Firewall 3130 Cisco Secure Firewall 3140 Cisco Secure Firewall 4215 Cisco Secure Firewall 4225 Cisco Secure Firewall 4245 Fortinet FortiAP 231G Fortinet FortiAP 231K Fortinet FortiAP 241K Fortinet FortiAP 431G Fortinet FortiAP 441K Fortinet FortiGate 1000F Fortinet FortiGate 120G Fortinet FortiGate 200G Fortinet FortiGate 3500G Fortinet FortiGate 400G Fortinet FortiGate 40F Fortinet FortiGate 60F Fortinet FortiGate 70G Fortinet FortiGate 90G Fortinet FortiGate Rugged 60G (FGR-60G) Fortinet FortiSwitch 1048G Fortinet FortiSwitch 124G Fortinet FortiSwitch 124G (FS-124G) Fortinet FortiSwitch 124G-FPOE Fortinet FortiSwitch 148F Fortinet FortiSwitch 148G Fortinet FortiSwitch 2048F Fortinet FortiSwitch 3032G Fortinet FortiSwitch 648F Fortinet FortiSwitch 648F-FPOE Fortinet FortiSwitch-124F Juniper Networks AP34 Juniper Networks AP36 Juniper Networks AP37 Juniper Networks AP45 Juniper Networks AP47 Juniper Networks AP66 Juniper Networks EX4000 Juniper Networks EX4100 Juniper Networks EX4100-48P Juniper Networks EX4400 Juniper Networks EX4400-48P Juniper Networks Mist AP33 Juniper Networks Mist AP37 Juniper Networks Mist AP43 Juniper Networks QFX5120-48Y Juniper Networks QFX5220-32CD Juniper Networks QFX5230-64CD Juniper Networks QFX5240 Juniper Networks SRX1600 Juniper Networks SRX2300 Juniper Networks SRX4120 Juniper Networks SRX4300 Juniper Networks SRX440 Juniper Networks SRX4600 Juniper Networks SRX4700 Netgate 4100 Netgate 6100 Palo Alto Networks ION 1200-S Palo Alto Networks ION 1200-W Palo Alto Networks ION 3200 Palo Alto Networks ION 3200-S Palo Alto Networks ION 3200-W Palo Alto Networks ION 3200H Palo Alto Networks ION 3200H-C5G-WW Palo Alto Networks PA-1410 Palo Alto Networks PA-3410 Palo Alto Networks PA-410 Palo Alto Networks PA-415 Palo Alto Networks PA-440 Palo Alto Networks PA-445 Palo Alto Networks PA-445-W Palo Alto Networks PA-5410 Palo Alto Networks PA-545-PoE Palo Alto Networks PA-5450 Palo Alto Networks PA-555-POE Palo Alto Networks PA-7500 Palo Alto Networks Prisma SD-WAN ION 3200H Ubiquiti Cloud Gateway Max Ubiquiti Cloud Gateway Max (UCG-Max) Ubiquiti Cloud Gateway Ultra Ubiquiti Dream Machine Pro Max Ubiquiti Dream Machine Pro Max (UDM-Pro-Max) Ubiquiti Dream Machine Special Edition (UDM-SE) Ubiquiti Enterprise 24 PoE (USW-Enterprise-24-PoE) Ubiquiti Enterprise 8 PoE Ubiquiti Enterprise Fortress Gateway (EFG) Ubiquiti Pro Max 24 PoE Ubiquiti Pro Max 48 PoE Ubiquiti Pro Max Aggregation (USW-Pro-Max-Aggregation) Ubiquiti Switch Enterprise 24 PoE (USW-Enterprise-24-PoE) Ubiquiti Switch Pro Max 24 PoE Ubiquiti Switch Pro Max 48 PoE Ubiquiti U6 Pro Ubiquiti U6-Enterprise Ubiquiti U6-Pro Ubiquiti U7 Pro Ubiquiti U7 Pro Max Ubiquiti U7 Pro Outdoor Ubiquiti UniFi Cloud Gateway Fiber Ubiquiti UniFi Cloud Gateway Max (UCG-Max) Ubiquiti UniFi Dream Machine Beast Ubiquiti UniFi Dream Machine Pro Max Ubiquiti UniFi Dream Machine Pro Max (UDM-Pro-Max) Ubiquiti UniFi Enterprise 7 Ubiquiti UniFi Pro Max 24 PoE Ubiquiti UniFi Pro Max 48 PoE Ubiquiti UniFi Standard 24 PoE (USW-24-POE) Ubiquiti UniFi Switch Pro Max 16 PoE Ubiquiti UniFi Switch Ultra Ubiquiti UniFi U7 Pro Ubiquiti UniFi U7 Pro Max Ubiquiti UniFi U7 Pro Outdoor Ubiquiti UniFi U7 Pro Wall Ubiquiti UniFi U7 Pro XGS Ubiquiti UniFi6 Mesh (U6 Mesh) Ubiquiti USW Pro Max 24 PoE Ubiquiti USW Pro Max 48 PoE Ubiquiti USW-Enterprise-24-PoE Ubiquiti USW-Pro-24-PoE

Technical Specifications

• Firewall Throughput: 23.5 Gbps (routing, iPerf3, DHCP WAN)
• Threat Prevention Throughput: 12.5 Gbps (IDS/IPS)
• IPsec VPN Throughput: 580 Mbps (site-to-site, single tunnel)
• Max Sessions: 1,000,000 concurrent
• New Sessions/sec: 71,000 (listed under general capacity; not specific to VPN or IPsec)
• Interfaces: 2x 2.5GbE RJ45, 2x 25G SFP28, 2x 10G SFP+ (some listings show 2x RJ45 + 4x SFP28; verify against the Ubiquiti datasheet)
• Form Factor: 1U rack-mount, dual hot-swappable PSUs
• SSL/TLS Inspection Concurrent Sessions: 10,000 (5,000 recommended under heavy traffic)
• CPU / Memory: 18-core ARM v8.2 @ 2 GHz, 16 GB DDR4
• UniFi Capacity: 500+ UniFi devices, 5,000+ clients

Curation Review

• ✔ Pros: 25G SFP28 and 10G SFP+ uplinks at a gateway price point; 23.5 Gbps routing throughput; 1 million concurrent sessions; 18-core ARM CPU with 16 GB RAM; hot-swappable redundant PSUs; supports 500+ UniFi devices and 5,000+ clients; manages through UniFi Network controller with a single pane of glass
• ✘ Cons: IPsec VPN throughput of 580 Mbps is low for a gateway at this price; IDS/IPS throughput of 12.5 Gbps halves routing performance when threat inspection is enabled; SSL/TLS inspection is limited to about 10,000 concurrent sessions; port configuration differs across listings and should be verified; frequently out of stock at major US retailers, with a $170 memory surcharge at some resellers; no built-in Wi-Fi, so it depends on separate UniFi APs and switches; reviewers cite a steeper learning curve than consumer-grade routers
• Est. Price: $1,999 - $2,892

Compare Against

Select Comparison Hardware... Aruba (HPE) 9004 Gateway Aruba (HPE) 9240 Campus Gateway Aruba (HPE) Aruba 9004 Gateway Aruba (HPE) Aruba 9106 Gateway Aruba (HPE) Aruba 9114 Gateway Aruba (HPE) Aruba 9240 Campus Gateway Cisco Cisco Secure Firewall 1210 Cisco Cisco Secure Firewall 3105 Cisco Cisco Secure Firewall 3110 Cisco Secure Firewall 1010 Cisco Secure Firewall 1120 Cisco Secure Firewall 1140 Cisco Secure Firewall 1150 Cisco Secure Firewall 1210 Cisco Secure Firewall 1220 (1220CX) Cisco Secure Firewall 220 Cisco Secure Firewall 3105 Cisco Secure Firewall 3110 Cisco Secure Firewall 3120 Cisco Secure Firewall 3130 Cisco Secure Firewall 3140 Cisco Secure Firewall 4215 Cisco Secure Firewall 4225 Cisco Secure Firewall 4245 Fortinet FortiGate 1000F Fortinet FortiGate 120G Fortinet FortiGate 200G Fortinet FortiGate 3500G Fortinet FortiGate 400G Fortinet FortiGate 40F Fortinet FortiGate 60F Fortinet FortiGate 70G Fortinet FortiGate 90G Fortinet FortiGate Rugged 60G (FGR-60G) Juniper Networks SRX1600 Juniper Networks SRX2300 Juniper Networks SRX4120 Juniper Networks SRX4300 Juniper Networks SRX440 Juniper Networks SRX4600 Juniper Networks SRX4700 Netgate 4100 Netgate 6100 Palo Alto Networks ION 1200-S Palo Alto Networks ION 1200-W Palo Alto Networks ION 3200 Palo Alto Networks ION 3200-S Palo Alto Networks ION 3200-W Palo Alto Networks ION 3200H Palo Alto Networks ION 3200H-C5G-WW Palo Alto Networks PA-1410 Palo Alto Networks PA-3410 Palo Alto Networks PA-410 Palo Alto Networks PA-415 Palo Alto Networks PA-440 Palo Alto Networks PA-445 Palo Alto Networks PA-445-W Palo Alto Networks PA-5410 Palo Alto Networks PA-545-PoE Palo Alto Networks PA-5450 Palo Alto Networks PA-555-POE Palo Alto Networks PA-7500 Palo Alto Networks Prisma SD-WAN ION 3200H Ubiquiti Cloud Gateway Max Ubiquiti Cloud Gateway Max (UCG-Max) Ubiquiti Cloud Gateway Ultra Ubiquiti Dream Machine Pro Max Ubiquiti Dream Machine Pro Max (UDM-Pro-Max) Ubiquiti Dream Machine Special Edition (UDM-SE) Ubiquiti Enterprise Fortress Gateway (EFG) Ubiquiti UniFi Cloud Gateway Fiber Ubiquiti UniFi Cloud Gateway Max (UCG-Max) Ubiquiti UniFi Dream Machine Beast Ubiquiti UniFi Dream Machine Pro Max Ubiquiti UniFi Dream Machine Pro Max (UDM-Pro-Max)

Technical Specifications

• Firewall Throughput: 4 Gbps (per Aruba 9000 Series datasheet; some retailer listings state 2-4 Gbps depending on SKU/release)
• Threat Prevention Throughput: Not published in available sources
• IPsec VPN Throughput: 2 Gbps AES-CCM; 4 Gbps AES-CBC-256
• Max Sessions: 64K active firewall sessions (128K maximum datapath/firewall sessions on some releases)
• New Sessions/sec: Not verified (one unofficial mirror lists 1000 sessions/sec)
• Interfaces: 4 x 1GbE RJ-45 ports (9004-LTE variant adds 4G LTE cellular)
• Form Factor: Rackmount branch/campus gateway; rack mount kit (9004-MNT-19) sold separately

Curation Review

• ✔ Pros: Supports up to 2,048 concurrent clients and 32 APs per gateway; Concurrent IPsec tunnels up to 2,048 for branch VPN deployments; Managed through Aruba Central and part of the 9000 Series gateway family with centralized policy and SD-WAN features; LTE variant (9004-LTE) provides cellular failover; Multiple regional SKUs (US, RW, EG, IL, JP, TAA) for compliance and deployment needs
• ✘ Cons: Only 4 x 1GbE ports with no multi-gig or 10GbE uplink option; Throughput figures differ between datasheets and software releases, making sizing harder; Threat prevention throughput is not published; Rack mount kit is an extra purchase; Replaced by newer 9012 gateway with higher throughput (6 Gbps firewall)
• Est. Price: $1,511 - $2,993