IPsec VPN Throughput: 22.4 Gbps (1024B TCP with fastpath); projected 39.4 Gbps with VPN offload on FTD 7.2
Max Sessions: 10 million concurrent (with AVC)
New Sessions/sec: 300,000 (with AVC, Cisco datasheet; some resellers cite 1.1 million)
Interfaces: 8 x 1/10/25G SFP Ethernet, 8 x 10M/100M/1G RJ-45 Ethernet, 1 x 1/10G SFP management, 1 x RJ-45 console, 1 x USB 3.0; 4 x 40G network module options; up to 24 total Ethernet ports
Form Factor: 1RU rack-mount (1.75 x 17 x 20 in), dual 400W AC PSUs standard with 1+1 redundancy
Curation Review
✔ Pros:Strong 45 Gbps firewall and threat prevention throughput in a 1RU chassis; 8 x 25G SFP ports for high-speed uplinks and server connectivity; 10 million concurrent sessions suits large enterprise and data-center edges; Clustering support of up to 8 chassis for scale-out and high availability; Dual redundant power supplies (1+1) improve uptime; Runs either FTD (Threat Defense) or ASA software, with a 20,000 VPN peer capacity; VPN offload on FTD 7.2 projects roughly 39.4 Gbps IPsec throughput
✘ Cons:High acquisition cost; reseller prices range widely, roughly $40k to $115k+ before subscriptions; Threat prevention and IPS licenses are sold separately and add significant recurring cost; Throughput figures use 1024B test packets and ideal conditions, so real-world results with mixed traffic and full inspection will be lower; The 1.1M vs 300K new-connections-per-second figures conflict across sources, so sizing requires verification; Software-dependent feature set (FTD vs ASA SKUs have different part numbers and capabilities); No PoE or built-in Wi-Fi, so it cannot serve as a switch or access point; 1RU form factor with 25 lb weight and 400W PSUs needs rack space and adequate power and cooling
Est. Price:
$40,451 - $115,575
Compare Against
Ubiquiti UniFi Cloud Gateway Fiber
★ 5.0 Value Score
Technical Specifications
Firewall Throughput: Not published by Ubiquiti; 5 Gbps IDS/IPS-secured routing throughput is the only headline figure (reviewer and retailer listings)
Threat Prevention Throughput: 5 Gbps IDS/IPS
IPsec VPN Throughput: Not published
Max Sessions: Not published; 500+ simultaneous users and 4,000-entry MAC address table
New Sessions/sec: Not published
Interfaces: 2x 10G SFP+; 1x 10GbE RJ45 (10G/2.5G/1G); 4x 2.5GbE RJ45 (2.5G/1G/100M/10M); 2 of the 6 WAN-capable ports are default WAN (1x 10G SFP+ and 1x 10GbE RJ45), with the other ports selectable as WAN
Form Factor: Compact desktop; 212.8 x 127.6 x 30 mm; 675 g without SSD
CPU / RAM: Quad-core ARM Cortex-A73 at 2.2 GHz / 3 GB RAM
Storage: Optional NVMe SSD up to 2 TB (NVR storage)
PoE Budget: 30W total from one PoE+ port (port 4)
Max Power Consumption: 29.4W excluding PoE output
Curation Review
✔ Pros:Lowest-cost Ubiquiti gateway with 5 Gbps IDS/IPS, rated above the UDM-SE's 3.5 Gbps at a lower launch price ($279 MSRP vs. $499); Multi-gig flexibility with 10GBASE-T, dual SFP+ and four 2.5GbE ports; Compact desktop design with optional NVMe storage for UniFi Protect/NVR use; Supports site-to-site VPN plus OpenVPN, WireGuard and L2TP server functions, with integrated PoE+ for one device; Managed through the UniFi Network controller with 500+ simultaneous user capacity
✘ Cons:No official routing, IPsec or WireGuard throughput figures published by Ubiquiti; community WireGuard numbers (around 400-500 Mbps) are unverified; Only one PoE+ output port (30W total) versus eight PoE ports on the UDM-SE; Lower device and user capacity and less storage expansion than the UDM-SE; No published IPsec tunnel or concurrent session limits; Reseller prices now often run above the launch MSRP (about $320-$346 USD at US resellers)