Firewall Throughput: 890 Mbps (Firewall + AVC, Threat Defense); 2 Gbps stateful inspection (varies by source and test profile)
Threat Prevention Throughput: 650-900 Mbps NGIPS (varies by source)
IPsec VPN Throughput: 300-500 Mbps (varies by source and software image)
Max Sessions: 100,000 concurrent
New Sessions/sec: 6,000 (single listing, unverified)
Interfaces: 8 x 1GbE RJ-45 (10/100/1000BASE-T), ports 7-8 PoE+ capable, 1 x 1GbE RJ-45 management
Form Factor: Desktop, fanless
Curation Review
✔ Pros:Compact fanless desktop form factor suited to branch and small-office deployments; Eight GbE RJ-45 ports, with ports 7-8 supporting PoE+; Runs either Cisco Secure Firewall Threat Defense or ASA software; Low entry price compared with larger Secure Firewall models; Around 100,000 concurrent sessions is adequate for small sites
✘ Cons:Modest inspection throughput (roughly 650-900 Mbps) limits use at higher bandwidths; IPsec VPN throughput of roughly 300-500 Mbps is low for site-to-site-heavy deployments; No SFP or 10GbE uplink ports appear in published specs; Published throughput figures vary widely across resellers, and no authoritative Cisco datasheet figure was confirmed; Price varies by seller, and listings do not say whether software licences or support are included
IPsec VPN Throughput: Not published by Ubiquiti; WireGuard/Site-Magic VPN up to 500 Mbps (third-party review, untested method)
Max Sessions: Not published
New Sessions/sec: Not published
Interfaces: 5x 2.5GbE RJ45 (1 WAN + 4 LAN, one LAN port can be remapped to a second WAN)
Form Factor: Compact desktop, 142 x 127 x 30 mm, USB-C 5V/5A power (max 16.1 W)
Curation Review
✔ Pros:2.5GbE WAN and LAN ports on a compact, low-power chassis (max 16.1 W); 512GB built-in NVMe storage on the standard SKU for local UniFi data; Integrated UniFi controller with IDS/IPS and no license or subscription fees; Supports 300+ clients and 30+ UniFi devices; Multi-WAN capable through the remappable LAN port
✘ Cons:Only 1.5 Gbps with IDS/IPS enabled, well below the 2.5 Gbps routing figure; IPsec VPN throughput, session counts and new sessions per second are not published; No PoE output and no built-in Wi-Fi access point; No LAG/LACP support; 500 Mbps VPN throughput is limiting for high-volume site-to-site tunnels