IPsec VPN Throughput: Not published by Ubiquiti; WireGuard/Site-Magic VPN up to 500 Mbps (third-party review, untested method)
Max Sessions: Not published
New Sessions/sec: Not published
Interfaces: 5x 2.5GbE RJ45 (1 WAN + 4 LAN, one LAN port can be remapped to a second WAN)
Form Factor: Compact desktop, 142 x 127 x 30 mm, USB-C 5V/5A power (max 16.1 W)
Curation Review
✔ Pros:2.5GbE WAN and LAN ports on a compact, low-power chassis (max 16.1 W); 512GB built-in NVMe storage on the standard SKU for local UniFi data; Integrated UniFi controller with IDS/IPS and no license or subscription fees; Supports 300+ clients and 30+ UniFi devices; Multi-WAN capable through the remappable LAN port
✘ Cons:Only 1.5 Gbps with IDS/IPS enabled, well below the 2.5 Gbps routing figure; IPsec VPN throughput, session counts and new sessions per second are not published; No PoE output and no built-in Wi-Fi access point; No LAG/LACP support; 500 Mbps VPN throughput is limiting for high-volume site-to-site tunnels
Est. Price:
$240 - $279
Compare Against
Aruba (HPE) Aruba 9106 Gateway
★ 4.3 Value Score
Technical Specifications
Firewall Throughput: 10 Gbps (HPE QuickSpecs, via reseller-cited sources; 9114 is rated 20 Gbps)
Threat Prevention Throughput: Not published in sources found
Form Factor: 1U rack-mount (RW/S5H01A) or desktop (S0B85A); cloud-managed hybrid gateway
IPsec Tunnels: Up to 8K concurrent IPsec sessions per QuickSpecs; one datasheet excerpt lists 16K concurrent / 20K total; one reseller lists 1K (outlier)
PoE Budget: 2x 60W 802.3bt-class PoE ports on RW SKU; no system-wide budget found
Max Clients/Devices: Up to 2,000 APs per gateway; up to 8,000 client MACs (reseller listings)
Product Status: Listed as end of life by at least one reseller; verify availability before purchase
Curation Review
✔ Pros:Carrier-class 10GbE uplinks (SFP+) for branch and campus WAN or core aggregation; Integrated SD-WAN and cloud management via Aruba Central; 2 million firewall sessions suits busy branch or campus edge; Built-in PoE ports on RW model can power APs or cameras without a separate injector; Works as both branch gateway and Aruba Mobility controller in one 1U box; Strong IPsec and GRE support for site-to-site VPN
✘ Cons:Firewall throughput of 10 Gbps is well below 9114 (20 Gbps); Threat prevention throughput is not published, so IPS/URL-filter performance is hard to size; Conflicting IPsec tunnel and VPN throughput figures across sources; Sessions-per-second rate not published; Listed as end of life by some resellers, which raises support and roadmap risk; Price is high relative to competing branch firewalls with similar throughput; SKU variants (desktop vs rack, RW vs US) differ in ports and price, which complicates comparisons