PACKETPERF

Primary Device

Select Primary Hardware... Aruba 6000 24G 4SFP Aruba AP-515 Aruba AP-535 Aruba (HPE) 6300M Aruba (HPE) 7030 Aruba (HPE) 9004 Gateway Aruba (HPE) 9240 Campus Gateway Aruba (HPE) AP-735 Aruba (HPE) Aruba 6400 Switch Aruba (HPE) Aruba 8320 Aruba (HPE) Aruba 9004 Gateway Aruba (HPE) Aruba 9106 Gateway Aruba (HPE) Aruba 9114 Gateway Aruba (HPE) Aruba 9240 Campus Gateway Aruba (HPE) Aruba AP-655 Aruba (HPE) Aruba AP-755 Aruba (HPE) Aruba CX 6100 Aruba (HPE) Aruba CX 6100 Switch Aruba (HPE) Aruba CX 6200 Aruba (HPE) Aruba CX 6200F Switch Aruba (HPE) Aruba CX 6300 Aruba (HPE) Aruba CX 6300M Switch Aruba (HPE) Instant On AP33 Aruba (HPE) Instant On AP45 Cisco C9200L-24T-4G Cisco C9200L-48T-4G Cisco Catalyst 9120AX Cisco Catalyst 9136 Cisco Catalyst 9136I Cisco Catalyst 9164 (CW9164I) Cisco Catalyst 9166 Cisco Catalyst 9166 Series (CW9166) Cisco Catalyst 9176I (CW9176I) Cisco Catalyst 9176I (CW9176I-CFG) Cisco Catalyst 9178i Cisco Catalyst 9200 Cisco Catalyst 9200 Series Cisco Catalyst 9200L Cisco Catalyst 9300 Cisco Catalyst 9300-48P Cisco Catalyst 9300X Cisco Catalyst 9500 Cisco Catalyst 9500 Series Cisco Catalyst 9500-48Y4C Cisco Catalyst 9500X Cisco Catalyst CW9164 Cisco Catalyst CW9166 Cisco Catalyst CW9166I Cisco Catalyst CW9171 Cisco Catalyst CW9172I Cisco Catalyst CW9174 Cisco Catalyst CW9176 Cisco Catalyst CW9176I Cisco Catalyst CW9178I Cisco Catalyst CW9179F Cisco Cisco Catalyst 9166I Cisco Cisco Catalyst 9200 Cisco Cisco Catalyst 9200L Cisco Cisco Catalyst 9300X Cisco Cisco Catalyst 9500 Cisco Cisco Secure Firewall 1210 Cisco Cisco Secure Firewall 3105 Cisco Cisco Secure Firewall 3110 Cisco Cisco Wireless 9178I (CW9178I) Cisco CW9176 Cisco Nexus 9300-GX2 Cisco Nexus 9300-GX2 (N9K-C9332D-GX2B) Cisco Nexus 93180YC-FX3 Cisco Secure Firewall 1010 Cisco Secure Firewall 1120 Cisco Secure Firewall 1140 Cisco Secure Firewall 1150 Cisco Secure Firewall 1210 Cisco Secure Firewall 1220 (1220CX) Cisco Secure Firewall 220 Cisco Secure Firewall 3105 Cisco Secure Firewall 3110 Cisco Secure Firewall 3120 Cisco Secure Firewall 3130 Cisco Secure Firewall 3140 Cisco Secure Firewall 4215 Cisco Secure Firewall 4225 Cisco Secure Firewall 4245 Fortinet FortiAP 231G Fortinet FortiAP 231K Fortinet FortiAP 241K Fortinet FortiAP 431G Fortinet FortiAP 441K Fortinet FortiGate 1000F Fortinet FortiGate 120G Fortinet FortiGate 200G Fortinet FortiGate 3500G Fortinet FortiGate 400G Fortinet FortiGate 40F Fortinet FortiGate 60F Fortinet FortiGate 70G Fortinet FortiGate 90G Fortinet FortiGate Rugged 60G (FGR-60G) Fortinet FortiSwitch 1048G Fortinet FortiSwitch 124G Fortinet FortiSwitch 124G (FS-124G) Fortinet FortiSwitch 124G-FPOE Fortinet FortiSwitch 148F Fortinet FortiSwitch 148G Fortinet FortiSwitch 2048F Fortinet FortiSwitch 3032G Fortinet FortiSwitch 648F Fortinet FortiSwitch 648F-FPOE Fortinet FortiSwitch-124F Juniper Networks AP34 Juniper Networks AP36 Juniper Networks AP37 Juniper Networks AP45 Juniper Networks AP47 Juniper Networks AP66 Juniper Networks EX4000 Juniper Networks EX4100 Juniper Networks EX4100-48P Juniper Networks EX4400 Juniper Networks EX4400-48P Juniper Networks Mist AP33 Juniper Networks Mist AP37 Juniper Networks Mist AP43 Juniper Networks QFX5120-48Y Juniper Networks QFX5220-32CD Juniper Networks QFX5230-64CD Juniper Networks QFX5240 Juniper Networks SRX1600 Juniper Networks SRX2300 Juniper Networks SRX4120 Juniper Networks SRX4300 Juniper Networks SRX440 Juniper Networks SRX4600 Juniper Networks SRX4700 Netgate 4100 Netgate 6100 Palo Alto Networks ION 1200-S Palo Alto Networks ION 1200-W Palo Alto Networks ION 3200 Palo Alto Networks ION 3200-S Palo Alto Networks ION 3200-W Palo Alto Networks ION 3200H Palo Alto Networks ION 3200H-C5G-WW Palo Alto Networks PA-1410 Palo Alto Networks PA-3410 Palo Alto Networks PA-410 Palo Alto Networks PA-415 Palo Alto Networks PA-440 Palo Alto Networks PA-445 Palo Alto Networks PA-445-W Palo Alto Networks PA-5410 Palo Alto Networks PA-545-PoE Palo Alto Networks PA-5450 Palo Alto Networks PA-555-POE Palo Alto Networks PA-7500 Palo Alto Networks Prisma SD-WAN ION 3200H Ubiquiti Cloud Gateway Max Ubiquiti Cloud Gateway Max (UCG-Max) Ubiquiti Cloud Gateway Ultra Ubiquiti Dream Machine Pro Max Ubiquiti Dream Machine Pro Max (UDM-Pro-Max) Ubiquiti Dream Machine Special Edition (UDM-SE) Ubiquiti Enterprise 24 PoE (USW-Enterprise-24-PoE) Ubiquiti Enterprise 8 PoE Ubiquiti Enterprise Fortress Gateway (EFG) Ubiquiti Pro Max 24 PoE Ubiquiti Pro Max 48 PoE Ubiquiti Pro Max Aggregation (USW-Pro-Max-Aggregation) Ubiquiti Switch Enterprise 24 PoE (USW-Enterprise-24-PoE) Ubiquiti Switch Pro Max 24 PoE Ubiquiti Switch Pro Max 48 PoE Ubiquiti U6 Pro Ubiquiti U6-Enterprise Ubiquiti U6-Pro Ubiquiti U7 Pro Ubiquiti U7 Pro Max Ubiquiti U7 Pro Outdoor Ubiquiti UniFi Cloud Gateway Fiber Ubiquiti UniFi Cloud Gateway Max (UCG-Max) Ubiquiti UniFi Dream Machine Beast Ubiquiti UniFi Dream Machine Pro Max Ubiquiti UniFi Dream Machine Pro Max (UDM-Pro-Max) Ubiquiti UniFi Enterprise 7 Ubiquiti UniFi Pro Max 24 PoE Ubiquiti UniFi Pro Max 48 PoE Ubiquiti UniFi Standard 24 PoE (USW-24-POE) Ubiquiti UniFi Switch Pro Max 16 PoE Ubiquiti UniFi Switch Ultra Ubiquiti UniFi U7 Pro Ubiquiti UniFi U7 Pro Max Ubiquiti UniFi U7 Pro Outdoor Ubiquiti UniFi U7 Pro Wall Ubiquiti UniFi U7 Pro XGS Ubiquiti UniFi6 Mesh (U6 Mesh) Ubiquiti USW Pro Max 24 PoE Ubiquiti USW Pro Max 48 PoE Ubiquiti USW-Enterprise-24-PoE Ubiquiti USW-Pro-24-PoE

Technical Specifications

• Firewall Throughput: 38 Gbps (Firewall + AVC, 1024-byte packets)
• Threat Prevention Throughput: 38 Gbps (Firewall + AVC + IPS, 1024-byte packets); threat/malware-enabled figure not published
• IPsec VPN Throughput: 17.8 Gbps (FTD, 1024-byte TCP, fastpath); 33 Gbps projected with VPN offload on FTD 7.2
• Max Sessions: 6,000,000 concurrent sessions (FTD with AVC)
• New Sessions/sec: 240,000 new connections per second (FTD with AVC)
• Interfaces: 8 x 10M/100M/1GBASE-T (RJ-45); 8 x 1/10/25G SFP; optional network module with 4 x 40G or 8 x 1/10/25G; up to 24 Ethernet ports total; 1 x 1/10G SFP management; 1 x RJ-45 console
• Form Factor: 1RU rack-mount; dual 400W AC PSUs (1+1), optional DC

Curation Review

• ✔ Pros: Up to 38 Gbps firewall and AVC/IPS throughput (1024-byte packets); 6 million concurrent sessions and 240,000 new connections per second; 15,000 max VPN peers with 33 Gbps projected VPN throughput under offload on FTD 7.2; Up to 24 Ethernet ports with optional 40G network module for flexible uplink and segment design; Redundant 1+1 AC power supplies in a 1RU chassis, with an optional DC power variant
• ✘ Cons: High acquisition cost compared with mid-range firewalls, and reseller prices vary widely; Threat prevention throughput is not separately published, since the AVC+IPS figure matches the firewall figure and no malware-enabled number is listed; Headline VPN offload figure requires FTD 7.2 or later and is a projection; Published throughput uses 1024-byte lab traffic, so real-world mixed-traffic performance will likely be lower; Network module bay adds cost and configuration complexity for the 40G option
• Est. Price: $59,480 - $138,825

Compare Against

Select Comparison Hardware... Aruba (HPE) 9004 Gateway Aruba (HPE) 9240 Campus Gateway Aruba (HPE) Aruba 9004 Gateway Aruba (HPE) Aruba 9106 Gateway Aruba (HPE) Aruba 9114 Gateway Aruba (HPE) Aruba 9240 Campus Gateway Cisco Cisco Secure Firewall 1210 Cisco Cisco Secure Firewall 3105 Cisco Cisco Secure Firewall 3110 Cisco Secure Firewall 1010 Cisco Secure Firewall 1120 Cisco Secure Firewall 1140 Cisco Secure Firewall 1150 Cisco Secure Firewall 1210 Cisco Secure Firewall 1220 (1220CX) Cisco Secure Firewall 220 Cisco Secure Firewall 3105 Cisco Secure Firewall 3110 Cisco Secure Firewall 3120 Cisco Secure Firewall 3130 Cisco Secure Firewall 3140 Cisco Secure Firewall 4215 Cisco Secure Firewall 4225 Cisco Secure Firewall 4245 Fortinet FortiGate 1000F Fortinet FortiGate 120G Fortinet FortiGate 200G Fortinet FortiGate 3500G Fortinet FortiGate 400G Fortinet FortiGate 40F Fortinet FortiGate 60F Fortinet FortiGate 70G Fortinet FortiGate 90G Fortinet FortiGate Rugged 60G (FGR-60G) Juniper Networks SRX1600 Juniper Networks SRX2300 Juniper Networks SRX4120 Juniper Networks SRX4300 Juniper Networks SRX440 Juniper Networks SRX4600 Juniper Networks SRX4700 Netgate 4100 Netgate 6100 Palo Alto Networks ION 1200-S Palo Alto Networks ION 1200-W Palo Alto Networks ION 3200 Palo Alto Networks ION 3200-S Palo Alto Networks ION 3200-W Palo Alto Networks ION 3200H Palo Alto Networks ION 3200H-C5G-WW Palo Alto Networks PA-1410 Palo Alto Networks PA-3410 Palo Alto Networks PA-410 Palo Alto Networks PA-415 Palo Alto Networks PA-440 Palo Alto Networks PA-445 Palo Alto Networks PA-445-W Palo Alto Networks PA-5410 Palo Alto Networks PA-545-PoE Palo Alto Networks PA-5450 Palo Alto Networks PA-555-POE Palo Alto Networks PA-7500 Palo Alto Networks Prisma SD-WAN ION 3200H Ubiquiti Cloud Gateway Max Ubiquiti Cloud Gateway Max (UCG-Max) Ubiquiti Cloud Gateway Ultra Ubiquiti Dream Machine Pro Max Ubiquiti Dream Machine Pro Max (UDM-Pro-Max) Ubiquiti Dream Machine Special Edition (UDM-SE) Ubiquiti Enterprise Fortress Gateway (EFG) Ubiquiti UniFi Cloud Gateway Fiber Ubiquiti UniFi Cloud Gateway Max (UCG-Max) Ubiquiti UniFi Dream Machine Beast Ubiquiti UniFi Dream Machine Pro Max Ubiquiti UniFi Dream Machine Pro Max (UDM-Pro-Max)

Technical Specifications

• Firewall Throughput: 2.5 Gbps (routing, IDS/IPS off)
• Threat Prevention Throughput: 1.5 Gbps (IDS/IPS on)
• IPsec VPN Throughput: Not published by Ubiquiti; WireGuard/Site-Magic VPN up to 500 Mbps (third-party review, untested method)
• Max Sessions: Not published
• New Sessions/sec: Not published
• Interfaces: 5x 2.5GbE RJ45 (1 WAN + 4 LAN, one LAN port can be remapped to a second WAN)
• Form Factor: Compact desktop, 142 x 127 x 30 mm, USB-C 5V/5A power (max 16.1 W)

Curation Review

• ✔ Pros: 2.5GbE WAN and LAN ports on a compact, low-power chassis (max 16.1 W); 512GB built-in NVMe storage on the standard SKU for local UniFi data; Integrated UniFi controller with IDS/IPS and no license or subscription fees; Supports 300+ clients and 30+ UniFi devices; Multi-WAN capable through the remappable LAN port
• ✘ Cons: Only 1.5 Gbps with IDS/IPS enabled, well below the 2.5 Gbps routing figure; IPsec VPN throughput, session counts and new sessions per second are not published; No PoE output and no built-in Wi-Fi access point; No LAG/LACP support; 500 Mbps VPN throughput is limiting for high-volume site-to-site tunnels
• Est. Price: $240 - $279