Firewall Throughput: Not officially published; about 2.3 Gbps routing with IDS/IPS enabled (UniFi OS 4.1+). Older firmware and some retailer listings show 1.5 Gbps
Interfaces: 5x 2.5GbE RJ45 (1G/2.5G auto); 1 WAN by default, up to 4 of 5 ports configurable as WAN (multi-WAN); no SFP
Form Factor: Compact desktop appliance, wired-only (no built-in Wi-Fi); storage variants: no storage, 512GB NVMe, 1TB, 2TB
Curation Review
✔ Pros:Low entry price (about $199 with no storage); five 2.5GbE ports with 1G fallback for older devices; multi-WAN failover and load balancing across up to 4 WAN ports; integrated UniFi controller with no licenses or subscriptions; optional NVMe storage for UniFi Protect/NVR use; fits small and mid-size office networks with UniFi APs and switches
✘ Cons:Modest IDS/IPS throughput (about 2.3 Gbps) limits deep inspection on faster links; OpenVPN throughput is weak (about 300-400 Mbps); no built-in Wi-Fi, so a separate UniFi AP is required; published specs and throughput figures conflict across sources and depend on firmware version; session capacity and VPN tunnel limits are not officially documented; regional retail prices vary widely
IPsec VPN Throughput: Not published by Ubiquiti; WireGuard/Site-Magic VPN up to 500 Mbps (third-party review, untested method)
Max Sessions: Not published
New Sessions/sec: Not published
Interfaces: 5x 2.5GbE RJ45 (1 WAN + 4 LAN, one LAN port can be remapped to a second WAN)
Form Factor: Compact desktop, 142 x 127 x 30 mm, USB-C 5V/5A power (max 16.1 W)
Curation Review
✔ Pros:2.5GbE WAN and LAN ports on a compact, low-power chassis (max 16.1 W); 512GB built-in NVMe storage on the standard SKU for local UniFi data; Integrated UniFi controller with IDS/IPS and no license or subscription fees; Supports 300+ clients and 30+ UniFi devices; Multi-WAN capable through the remappable LAN port
✘ Cons:Only 1.5 Gbps with IDS/IPS enabled, well below the 2.5 Gbps routing figure; IPsec VPN throughput, session counts and new sessions per second are not published; No PoE output and no built-in Wi-Fi access point; No LAG/LACP support; 500 Mbps VPN throughput is limiting for high-volume site-to-site tunnels