Firewall Throughput: 20 Gbps base; 30 Gbps with Silver capacity license; 40 Gbps with Gold capacity license (per AOS10 capacity license tiers; not confirmed against HPE datasheet)
Threat Prevention Throughput: Not published in sources reviewed
IPsec VPN Throughput: Not published in sources reviewed
Max Sessions: 4M active firewall sessions (AOS10 capacity license page, all tiers); a second datasheet-style source lists 2,015,291 active firewall sessions
New Sessions/sec: Not published in sources reviewed
Interfaces: 4 x 25GbE SFP28 ports plus 1 expansion slot; USB console (RJ-45 serial) and 2 x USB 2.0
Managed Device Capacity: Sources conflict: 2,000 devices, 2,048 APs, or 4,000 APs per gateway; verify against HPE datasheet
Power Input: 100-240 V AC
Dimensions: 1.7 in H x 17.4 in W x 15.6 in D; approx. 18.08 lb
Licensing: Capacity tiers (base/Silver/Gold) sold as separate licenses; Silver and Gold licenses are priced separately from the appliance
SKU Variants: Region- and variant-specific SKUs include R7H97A (RW), R7J02A (US FIPS/TAA), R7J06A, R7H95A, R7J05A; confirm SKU before purchase
Curation Review
✔ Pros:25GbE SFP28 uplinks for high-speed campus and data center aggregation; 1U rack form factor with 1 expansion slot for added connectivity; tiered capacity licensing lets buyers scale throughput and tunnel counts without new hardware; large active session capacity (4M) for campus and branch aggregation; Aruba/HPE AOS10 and Central management integration; US FIPS/TAA variant available for government procurement
✘ Cons:Firewall throughput tops out at 40 Gbps with Gold license, below many current-generation high-end firewalls; threat prevention, IPsec throughput, and new sessions/sec figures not clearly published; capacity figures conflict across sources and need verification against HPE's official datasheet; capacity licenses are sold separately and add substantial cost; price varies widely by region, variant, and reseller; some listings show backorder or end-of-life status, so availability should be confirmed before purchase
IPsec VPN Throughput: Not published by Ubiquiti; WireGuard/Site-Magic VPN up to 500 Mbps (third-party review, untested method)
Max Sessions: Not published
New Sessions/sec: Not published
Interfaces: 5x 2.5GbE RJ45 (1 WAN + 4 LAN, one LAN port can be remapped to a second WAN)
Form Factor: Compact desktop, 142 x 127 x 30 mm, USB-C 5V/5A power (max 16.1 W)
Curation Review
✔ Pros:2.5GbE WAN and LAN ports on a compact, low-power chassis (max 16.1 W); 512GB built-in NVMe storage on the standard SKU for local UniFi data; Integrated UniFi controller with IDS/IPS and no license or subscription fees; Supports 300+ clients and 30+ UniFi devices; Multi-WAN capable through the remappable LAN port
✘ Cons:Only 1.5 Gbps with IDS/IPS enabled, well below the 2.5 Gbps routing figure; IPsec VPN throughput, session counts and new sessions per second are not published; No PoE output and no built-in Wi-Fi access point; No LAG/LACP support; 500 Mbps VPN throughput is limiting for high-volume site-to-site tunnels