IPsec VPN Throughput: Not published by Ubiquiti; WireGuard/Site-Magic VPN up to 500 Mbps (third-party review, untested method)
Max Sessions: Not published
New Sessions/sec: Not published
Interfaces: 5x 2.5GbE RJ45 (1 WAN + 4 LAN, one LAN port can be remapped to a second WAN)
Form Factor: Compact desktop, 142 x 127 x 30 mm, USB-C 5V/5A power (max 16.1 W)
Curation Review
✔ Pros:2.5GbE WAN and LAN ports on a compact, low-power chassis (max 16.1 W); 512GB built-in NVMe storage on the standard SKU for local UniFi data; Integrated UniFi controller with IDS/IPS and no license or subscription fees; Supports 300+ clients and 30+ UniFi devices; Multi-WAN capable through the remappable LAN port
✘ Cons:Only 1.5 Gbps with IDS/IPS enabled, well below the 2.5 Gbps routing figure; IPsec VPN throughput, session counts and new sessions per second are not published; No PoE output and no built-in Wi-Fi access point; No LAG/LACP support; 500 Mbps VPN throughput is limiting for high-volume site-to-site tunnels
Est. Price:
$240 - $279
Compare Against
Aruba (HPE) Aruba 9004 Gateway
★ 4.3 Value Score
Technical Specifications
Firewall Throughput: 4 Gbps (per Aruba 9000 Series datasheet; some retailer listings state 2-4 Gbps depending on SKU/release)
Threat Prevention Throughput: Not published in available sources
Form Factor: Rackmount branch/campus gateway; rack mount kit (9004-MNT-19) sold separately
Curation Review
✔ Pros:Supports up to 2,048 concurrent clients and 32 APs per gateway; Concurrent IPsec tunnels up to 2,048 for branch VPN deployments; Managed through Aruba Central and part of the 9000 Series gateway family with centralized policy and SD-WAN features; LTE variant (9004-LTE) provides cellular failover; Multiple regional SKUs (US, RW, EG, IL, JP, TAA) for compliance and deployment needs
✘ Cons:Only 4 x 1GbE ports with no multi-gig or 10GbE uplink option; Throughput figures differ between datasheets and software releases, making sizing harder; Threat prevention throughput is not published; Rack mount kit is an extra purchase; Replaced by newer 9012 gateway with higher throughput (6 Gbps firewall)