PACKETPERF

Primary Device

Select Primary Hardware... Aruba 6000 24G 4SFP Aruba AP-515 Aruba AP-535 Aruba (HPE) 6300M Aruba (HPE) 7030 Aruba (HPE) 9004 Gateway Aruba (HPE) 9240 Campus Gateway Aruba (HPE) AP-735 Aruba (HPE) Aruba 6400 Switch Aruba (HPE) Aruba 8320 Aruba (HPE) Aruba 9004 Gateway Aruba (HPE) Aruba 9106 Gateway Aruba (HPE) Aruba 9114 Gateway Aruba (HPE) Aruba 9240 Campus Gateway Aruba (HPE) Aruba AP-655 Aruba (HPE) Aruba AP-755 Aruba (HPE) Aruba CX 6100 Aruba (HPE) Aruba CX 6100 Switch Aruba (HPE) Aruba CX 6200 Aruba (HPE) Aruba CX 6200F Switch Aruba (HPE) Aruba CX 6300 Aruba (HPE) Aruba CX 6300M Switch Aruba (HPE) Instant On AP33 Aruba (HPE) Instant On AP45 Cisco C9200L-24T-4G Cisco C9200L-48T-4G Cisco Catalyst 9120AX Cisco Catalyst 9136 Cisco Catalyst 9136I Cisco Catalyst 9164 (CW9164I) Cisco Catalyst 9166 Cisco Catalyst 9166 Series (CW9166) Cisco Catalyst 9176I (CW9176I) Cisco Catalyst 9176I (CW9176I-CFG) Cisco Catalyst 9178i Cisco Catalyst 9200 Cisco Catalyst 9200 Series Cisco Catalyst 9200L Cisco Catalyst 9300 Cisco Catalyst 9300-48P Cisco Catalyst 9300X Cisco Catalyst 9500 Cisco Catalyst 9500 Series Cisco Catalyst 9500-48Y4C Cisco Catalyst 9500X Cisco Catalyst CW9164 Cisco Catalyst CW9166 Cisco Catalyst CW9166I Cisco Catalyst CW9171 Cisco Catalyst CW9172I Cisco Catalyst CW9174 Cisco Catalyst CW9176 Cisco Catalyst CW9176I Cisco Catalyst CW9178I Cisco Catalyst CW9179F Cisco Cisco Catalyst 9166I Cisco Cisco Catalyst 9200 Cisco Cisco Catalyst 9200L Cisco Cisco Catalyst 9300X Cisco Cisco Catalyst 9500 Cisco Cisco Secure Firewall 1210 Cisco Cisco Secure Firewall 3105 Cisco Cisco Secure Firewall 3110 Cisco Cisco Wireless 9178I (CW9178I) Cisco CW9176 Cisco Nexus 9300-GX2 Cisco Nexus 9300-GX2 (N9K-C9332D-GX2B) Cisco Nexus 93180YC-FX3 Cisco Secure Firewall 1010 Cisco Secure Firewall 1120 Cisco Secure Firewall 1140 Cisco Secure Firewall 1150 Cisco Secure Firewall 1210 Cisco Secure Firewall 1220 (1220CX) Cisco Secure Firewall 220 Cisco Secure Firewall 3105 Cisco Secure Firewall 3110 Cisco Secure Firewall 3120 Cisco Secure Firewall 3130 Cisco Secure Firewall 3140 Cisco Secure Firewall 4215 Cisco Secure Firewall 4225 Cisco Secure Firewall 4245 Fortinet FortiAP 231G Fortinet FortiAP 231K Fortinet FortiAP 241K Fortinet FortiAP 431G Fortinet FortiAP 441K Fortinet FortiGate 1000F Fortinet FortiGate 120G Fortinet FortiGate 200G Fortinet FortiGate 3500G Fortinet FortiGate 400G Fortinet FortiGate 40F Fortinet FortiGate 60F Fortinet FortiGate 70G Fortinet FortiGate 90G Fortinet FortiGate Rugged 60G (FGR-60G) Fortinet FortiSwitch 1048G Fortinet FortiSwitch 124G Fortinet FortiSwitch 124G (FS-124G) Fortinet FortiSwitch 124G-FPOE Fortinet FortiSwitch 148F Fortinet FortiSwitch 148G Fortinet FortiSwitch 2048F Fortinet FortiSwitch 3032G Fortinet FortiSwitch 648F Fortinet FortiSwitch 648F-FPOE Fortinet FortiSwitch-124F Juniper Networks AP34 Juniper Networks AP36 Juniper Networks AP37 Juniper Networks AP45 Juniper Networks AP47 Juniper Networks AP66 Juniper Networks EX4000 Juniper Networks EX4100 Juniper Networks EX4100-48P Juniper Networks EX4400 Juniper Networks EX4400-48P Juniper Networks Mist AP33 Juniper Networks Mist AP37 Juniper Networks Mist AP43 Juniper Networks QFX5120-48Y Juniper Networks QFX5220-32CD Juniper Networks QFX5230-64CD Juniper Networks QFX5240 Juniper Networks SRX1600 Juniper Networks SRX2300 Juniper Networks SRX4120 Juniper Networks SRX4300 Juniper Networks SRX440 Juniper Networks SRX4600 Juniper Networks SRX4700 Netgate 4100 Netgate 6100 Palo Alto Networks ION 1200-S Palo Alto Networks ION 1200-W Palo Alto Networks ION 3200 Palo Alto Networks ION 3200-S Palo Alto Networks ION 3200-W Palo Alto Networks ION 3200H Palo Alto Networks ION 3200H-C5G-WW Palo Alto Networks PA-1410 Palo Alto Networks PA-3410 Palo Alto Networks PA-410 Palo Alto Networks PA-415 Palo Alto Networks PA-440 Palo Alto Networks PA-445 Palo Alto Networks PA-445-W Palo Alto Networks PA-5410 Palo Alto Networks PA-545-PoE Palo Alto Networks PA-5450 Palo Alto Networks PA-555-POE Palo Alto Networks PA-7500 Palo Alto Networks Prisma SD-WAN ION 3200H Ubiquiti Cloud Gateway Max Ubiquiti Cloud Gateway Max (UCG-Max) Ubiquiti Cloud Gateway Ultra Ubiquiti Dream Machine Pro Max Ubiquiti Dream Machine Pro Max (UDM-Pro-Max) Ubiquiti Dream Machine Special Edition (UDM-SE) Ubiquiti Enterprise 24 PoE (USW-Enterprise-24-PoE) Ubiquiti Enterprise 8 PoE Ubiquiti Enterprise Fortress Gateway (EFG) Ubiquiti Pro Max 24 PoE Ubiquiti Pro Max 48 PoE Ubiquiti Pro Max Aggregation (USW-Pro-Max-Aggregation) Ubiquiti Switch Enterprise 24 PoE (USW-Enterprise-24-PoE) Ubiquiti Switch Pro Max 24 PoE Ubiquiti Switch Pro Max 48 PoE Ubiquiti U6 Pro Ubiquiti U6-Enterprise Ubiquiti U6-Pro Ubiquiti U7 Pro Ubiquiti U7 Pro Max Ubiquiti U7 Pro Outdoor Ubiquiti UniFi Cloud Gateway Fiber Ubiquiti UniFi Cloud Gateway Max (UCG-Max) Ubiquiti UniFi Dream Machine Beast Ubiquiti UniFi Dream Machine Pro Max Ubiquiti UniFi Dream Machine Pro Max (UDM-Pro-Max) Ubiquiti UniFi Enterprise 7 Ubiquiti UniFi Pro Max 24 PoE Ubiquiti UniFi Pro Max 48 PoE Ubiquiti UniFi Standard 24 PoE (USW-24-POE) Ubiquiti UniFi Switch Pro Max 16 PoE Ubiquiti UniFi Switch Ultra Ubiquiti UniFi U7 Pro Ubiquiti UniFi U7 Pro Max Ubiquiti UniFi U7 Pro Outdoor Ubiquiti UniFi U7 Pro Wall Ubiquiti UniFi U7 Pro XGS Ubiquiti UniFi6 Mesh (U6 Mesh) Ubiquiti USW Pro Max 24 PoE Ubiquiti USW Pro Max 48 PoE Ubiquiti USW-Enterprise-24-PoE Ubiquiti USW-Pro-24-PoE

Technical Specifications

• Firewall Throughput: 45 Gbps (FW + AVC, 1024B packets, Cisco datasheet)
• Threat Prevention Throughput: 45 Gbps (FW + AVC + IPS, 1024B packets, Cisco datasheet)
• IPsec VPN Throughput: 22.4 Gbps (1024B TCP with fastpath); projected 39.4 Gbps with VPN offload on FTD 7.2
• Max Sessions: 10 million concurrent (with AVC)
• New Sessions/sec: 300,000 (with AVC, Cisco datasheet; some resellers cite 1.1 million)
• Interfaces: 8 x 1/10/25G SFP Ethernet, 8 x 10M/100M/1G RJ-45 Ethernet, 1 x 1/10G SFP management, 1 x RJ-45 console, 1 x USB 3.0; 4 x 40G network module options; up to 24 total Ethernet ports
• Form Factor: 1RU rack-mount (1.75 x 17 x 20 in), dual 400W AC PSUs standard with 1+1 redundancy

Curation Review

• ✔ Pros: Strong 45 Gbps firewall and threat prevention throughput in a 1RU chassis; 8 x 25G SFP ports for high-speed uplinks and server connectivity; 10 million concurrent sessions suits large enterprise and data-center edges; Clustering support of up to 8 chassis for scale-out and high availability; Dual redundant power supplies (1+1) improve uptime; Runs either FTD (Threat Defense) or ASA software, with a 20,000 VPN peer capacity; VPN offload on FTD 7.2 projects roughly 39.4 Gbps IPsec throughput
• ✘ Cons: High acquisition cost; reseller prices range widely, roughly $40k to $115k+ before subscriptions; Threat prevention and IPS licenses are sold separately and add significant recurring cost; Throughput figures use 1024B test packets and ideal conditions, so real-world results with mixed traffic and full inspection will be lower; The 1.1M vs 300K new-connections-per-second figures conflict across sources, so sizing requires verification; Software-dependent feature set (FTD vs ASA SKUs have different part numbers and capabilities); No PoE or built-in Wi-Fi, so it cannot serve as a switch or access point; 1RU form factor with 25 lb weight and 400W PSUs needs rack space and adequate power and cooling
• Est. Price: $40,451 - $115,575

Compare Against

Select Comparison Hardware... Aruba (HPE) 9004 Gateway Aruba (HPE) 9240 Campus Gateway Aruba (HPE) Aruba 9004 Gateway Aruba (HPE) Aruba 9106 Gateway Aruba (HPE) Aruba 9114 Gateway Aruba (HPE) Aruba 9240 Campus Gateway Cisco Cisco Secure Firewall 1210 Cisco Cisco Secure Firewall 3105 Cisco Cisco Secure Firewall 3110 Cisco Secure Firewall 1010 Cisco Secure Firewall 1120 Cisco Secure Firewall 1140 Cisco Secure Firewall 1150 Cisco Secure Firewall 1210 Cisco Secure Firewall 1220 (1220CX) Cisco Secure Firewall 220 Cisco Secure Firewall 3105 Cisco Secure Firewall 3110 Cisco Secure Firewall 3120 Cisco Secure Firewall 3130 Cisco Secure Firewall 3140 Cisco Secure Firewall 4215 Cisco Secure Firewall 4225 Cisco Secure Firewall 4245 Fortinet FortiGate 1000F Fortinet FortiGate 120G Fortinet FortiGate 200G Fortinet FortiGate 3500G Fortinet FortiGate 400G Fortinet FortiGate 40F Fortinet FortiGate 60F Fortinet FortiGate 70G Fortinet FortiGate 90G Fortinet FortiGate Rugged 60G (FGR-60G) Juniper Networks SRX1600 Juniper Networks SRX2300 Juniper Networks SRX4120 Juniper Networks SRX4300 Juniper Networks SRX440 Juniper Networks SRX4600 Juniper Networks SRX4700 Netgate 4100 Netgate 6100 Palo Alto Networks ION 1200-S Palo Alto Networks ION 1200-W Palo Alto Networks ION 3200 Palo Alto Networks ION 3200-S Palo Alto Networks ION 3200-W Palo Alto Networks ION 3200H Palo Alto Networks ION 3200H-C5G-WW Palo Alto Networks PA-1410 Palo Alto Networks PA-3410 Palo Alto Networks PA-410 Palo Alto Networks PA-415 Palo Alto Networks PA-440 Palo Alto Networks PA-445 Palo Alto Networks PA-445-W Palo Alto Networks PA-5410 Palo Alto Networks PA-545-PoE Palo Alto Networks PA-5450 Palo Alto Networks PA-555-POE Palo Alto Networks PA-7500 Palo Alto Networks Prisma SD-WAN ION 3200H Ubiquiti Cloud Gateway Max Ubiquiti Cloud Gateway Max (UCG-Max) Ubiquiti Cloud Gateway Ultra Ubiquiti Dream Machine Pro Max Ubiquiti Dream Machine Pro Max (UDM-Pro-Max) Ubiquiti Dream Machine Special Edition (UDM-SE) Ubiquiti Enterprise Fortress Gateway (EFG) Ubiquiti UniFi Cloud Gateway Fiber Ubiquiti UniFi Cloud Gateway Max (UCG-Max) Ubiquiti UniFi Dream Machine Beast Ubiquiti UniFi Dream Machine Pro Max Ubiquiti UniFi Dream Machine Pro Max (UDM-Pro-Max)

Technical Specifications

• Firewall Throughput: 2.5 Gbps (routing, IDS/IPS off)
• Threat Prevention Throughput: 1.5 Gbps (IDS/IPS on)
• IPsec VPN Throughput: Not published by Ubiquiti; WireGuard/Site-Magic VPN up to 500 Mbps (third-party review, untested method)
• Max Sessions: Not published
• New Sessions/sec: Not published
• Interfaces: 5x 2.5GbE RJ45 (1 WAN + 4 LAN, one LAN port can be remapped to a second WAN)
• Form Factor: Compact desktop, 142 x 127 x 30 mm, USB-C 5V/5A power (max 16.1 W)

Curation Review

• ✔ Pros: 2.5GbE WAN and LAN ports on a compact, low-power chassis (max 16.1 W); 512GB built-in NVMe storage on the standard SKU for local UniFi data; Integrated UniFi controller with IDS/IPS and no license or subscription fees; Supports 300+ clients and 30+ UniFi devices; Multi-WAN capable through the remappable LAN port
• ✘ Cons: Only 1.5 Gbps with IDS/IPS enabled, well below the 2.5 Gbps routing figure; IPsec VPN throughput, session counts and new sessions per second are not published; No PoE output and no built-in Wi-Fi access point; No LAG/LACP support; 500 Mbps VPN throughput is limiting for high-volume site-to-site tunnels
• Est. Price: $240 - $279