Firewall Throughput: 890 Mbps (Firewall + AVC, Threat Defense); 2 Gbps stateful inspection (varies by source and test profile)
Threat Prevention Throughput: 650-900 Mbps NGIPS (varies by source)
IPsec VPN Throughput: 300-500 Mbps (varies by source and software image)
Max Sessions: 100,000 concurrent
New Sessions/sec: 6,000 (single listing, unverified)
Interfaces: 8 x 1GbE RJ-45 (10/100/1000BASE-T), ports 7-8 PoE+ capable, 1 x 1GbE RJ-45 management
Form Factor: Desktop, fanless
Curation Review
✔ Pros:Compact fanless desktop form factor suited to branch and small-office deployments; Eight GbE RJ-45 ports, with ports 7-8 supporting PoE+; Runs either Cisco Secure Firewall Threat Defense or ASA software; Low entry price compared with larger Secure Firewall models; Around 100,000 concurrent sessions is adequate for small sites
✘ Cons:Modest inspection throughput (roughly 650-900 Mbps) limits use at higher bandwidths; IPsec VPN throughput of roughly 300-500 Mbps is low for site-to-site-heavy deployments; No SFP or 10GbE uplink ports appear in published specs; Published throughput figures vary widely across resellers, and no authoritative Cisco datasheet figure was confirmed; Price varies by seller, and listings do not say whether software licences or support are included
✔ Pros:25G SFP28 and 10G SFP+ uplinks at a gateway price point; 23.5 Gbps routing throughput; 1 million concurrent sessions; 18-core ARM CPU with 16 GB RAM; hot-swappable redundant PSUs; supports 500+ UniFi devices and 5,000+ clients; manages through UniFi Network controller with a single pane of glass
✘ Cons:IPsec VPN throughput of 580 Mbps is low for a gateway at this price; IDS/IPS throughput of 12.5 Gbps halves routing performance when threat inspection is enabled; SSL/TLS inspection is limited to about 10,000 concurrent sessions; port configuration differs across listings and should be verified; frequently out of stock at major US retailers, with a $170 memory surcharge at some resellers; no built-in Wi-Fi, so it depends on separate UniFi APs and switches; reviewers cite a steeper learning curve than consumer-grade routers