Max Sessions: 40M concurrent connections (Cisco datasheet; some resellers list 15M)
New Sessions/sec: 350K
Interfaces: 8x 1/10/25GbE SFP28 fixed (some listings say SFP+); 2x NetMod bays for expansion
Form Factor: 1RU rack-mountable
Curation Review
✔ Pros:Up to 90 Gbps stateful firewall throughput in a 1RU chassis; 40M concurrent connections and 350K new connections/sec suit high-session data center and campus workloads; 2x NetMod bays allow port expansion; Supports up to 20,000 VPN peers; Runs Cisco FTD or ASA software for flexible deployment
✘ Cons:Threat prevention throughput (65 Gbps) is well below the headline firewall figure; Reseller pricing is high, typically well over $100K, which puts it out of reach for small or branch deployments; Published specs and port types conflict across Cisco and third-party sources, which complicates sizing; Threat, malware, and URL protection require separate subscription licenses on top of the hardware cost
IPsec VPN Throughput: Not published by Ubiquiti; WireGuard/Site-Magic VPN up to 500 Mbps (third-party review, untested method)
Max Sessions: Not published
New Sessions/sec: Not published
Interfaces: 5x 2.5GbE RJ45 (1 WAN + 4 LAN, one LAN port can be remapped to a second WAN)
Form Factor: Compact desktop, 142 x 127 x 30 mm, USB-C 5V/5A power (max 16.1 W)
Curation Review
✔ Pros:2.5GbE WAN and LAN ports on a compact, low-power chassis (max 16.1 W); 512GB built-in NVMe storage on the standard SKU for local UniFi data; Integrated UniFi controller with IDS/IPS and no license or subscription fees; Supports 300+ clients and 30+ UniFi devices; Multi-WAN capable through the remappable LAN port
✘ Cons:Only 1.5 Gbps with IDS/IPS enabled, well below the 2.5 Gbps routing figure; IPsec VPN throughput, session counts and new sessions per second are not published; No PoE output and no built-in Wi-Fi access point; No LAG/LACP support; 500 Mbps VPN throughput is limiting for high-volume site-to-site tunnels