IPsec VPN Throughput: 580 Mbps per site-to-site tunnel (single tunnel); WireGuard server 1.2 Gbps; WireGuard client 980 Mbps
Max Sessions: 1,000,000 concurrent (SSL/TLS inspection limited to 10,000, recommended 5,000)
New Sessions/sec: 71,000
Interfaces: 2 x 25G SFP28; 2 x 10G SFP+; 2 x 2.5GbE RJ45 (LAN/WAN remappable)
Form Factor: 1U rack-mount, dual hot-swappable PSUs
Curation Review
✔ Pros:Strong firewall and IPS throughput for its class (23.5 Gbps firewall, 12.5 Gbps IDS/IPS); 25G and 10G uplinks for high-speed backbones; redundant hot-swappable dual PSUs; supports up to 500 UniFi devices and 5,000 clients; WireGuard VPN performance of about 1 Gbps; LAN/WAN ports are remappable; managed through the UniFi ecosystem with centralised monitoring
✘ Cons:Requires a 25G backbone to realise its full value, which adds cost; runs the UniFi Network Application for only one site and cannot be adopted into HostiFi; SSL/TLS inspection is capped at 10,000 sessions; site-to-site IPsec throughput is modest at about 580 Mbps per tunnel; 1U hot-running chassis needs rack space and cooling; ties buyers to Ubiquiti ecosystem lock-in; published specs conflict across sources (routing 12.5 vs 25 Gbps, port layout), and no independent in-depth review was found
Est. Price:
$1,999 - $4,255
Compare Against
Fortinet FortiGate-70G
★ 0.0 Value Score
Technical Specifications
Firewall Throughput: 10 Gbps (1518/512/64-byte UDP); 15 Mpps packets per second; 2.46 us latency (64-byte UDP)
New Sessions/sec: 100,000 new TCP sessions per second
Interfaces: 10x GE RJ45 total: 2x GE RJ45 WAN (hardware accelerated), 2x GE RJ45 FortiLink (default), 6x GE RJ45 internal Ethernet; 1x RJ45 console; 1x USB; 1x signed firmware hardware switch (not a network port)
Form Factor: Desktop (wall-mount capable)
Internal Storage: None (64GB SSD is on the 71G variant only)
Security Processor: Fortinet SP5 SD-WAN ASIC; TPM 2.0 and BLE present
Curation Review
✔ Pros:Fortinet SP5 ASIC gives hardware-accelerated firewall, IPsec, and SSL inspection; Built-in SD-WAN and FortiGate NGFW features at no extra hardware cost; Strong concurrency at 1.4 million TCP sessions and 100,000 new sessions per second for a desktop unit; Integrated FortiLink support for managing FortiSwitch and FortiAP devices from one console; Trusted Platform Module and signed firmware hardware switch add physical and boot-level protection; Compact, fanless-class desktop form factor suited to branch and small offices; Managed centrally through FortiManager or FortiManagement Cloud
✘ Cons:Only 1 Gbps copper ports, with no multi-gig or SFP uplinks; Threat Protection throughput of 1.3 Gbps is modest for full UTM inspection; No PoE on the base model (PoE variant is a separate SKU); No onboard storage on the 70G (64GB SSD is only on the 71G); Gateway-to-gateway VPN tunnels capped at 200; Full FortiGuard security services (IPS, AV, web filtering, SaaS/DLP) are separate paid subscriptions; Hardware-only pricing is modest, but the full UTP bundle roughly doubles total cost