New Sessions/sec: 35,000 new TCP sessions per second
Interfaces: 10 x GE RJ45 ports (2 x WAN, 1 x DMZ, 7 x internal; port roles vary by listing); no SFP ports on base model; 1 x USB; 1 x console
Form Factor: Desktop
Curation Review
✔ Pros:Strong firewall and IPsec VPN throughput for its class (10 Gbps firewall, 6.5 Gbps IPsec); Dense 10-port GE RJ45 layout suits small and branch offices; Full FortiOS feature set with NGFW, IPS, SD-WAN and FortiGuard security services; High session capacity (700,000 concurrent, 35,000 new per second); Competitive hardware-only pricing (roughly $491 to $566) compared with many enterprise-grade firewalls; Simple desktop form factor that needs no rack
✘ Cons:Threat protection throughput (700 Mbps in Fortinet's datasheet) is far below the headline firewall figure, so full inspection is a bottleneck; Subscription licensing (UTP/ATP/Enterprise bundles) is required for full security features and raises total cost substantially (about $900 to $2,600 for bundles); SSL VPN capacity is modest (about 900 Mbps and 200 concurrent users) and not suited to large remote-access deployments; Only 10 copper GE ports and no SFP uplinks limit fiber and high-speed uplink options; No built-in Wi-Fi on the base model (FortiWiFi-60F variant required)
IPsec VPN Throughput: Not published by Ubiquiti; WireGuard/Site-Magic VPN up to 500 Mbps (third-party review, untested method)
Max Sessions: Not published
New Sessions/sec: Not published
Interfaces: 5x 2.5GbE RJ45 (1 WAN + 4 LAN, one LAN port can be remapped to a second WAN)
Form Factor: Compact desktop, 142 x 127 x 30 mm, USB-C 5V/5A power (max 16.1 W)
Curation Review
✔ Pros:2.5GbE WAN and LAN ports on a compact, low-power chassis (max 16.1 W); 512GB built-in NVMe storage on the standard SKU for local UniFi data; Integrated UniFi controller with IDS/IPS and no license or subscription fees; Supports 300+ clients and 30+ UniFi devices; Multi-WAN capable through the remappable LAN port
✘ Cons:Only 1.5 Gbps with IDS/IPS enabled, well below the 2.5 Gbps routing figure; IPsec VPN throughput, session counts and new sessions per second are not published; No PoE output and no built-in Wi-Fi access point; No LAG/LACP support; 500 Mbps VPN throughput is limiting for high-volume site-to-site tunnels