Firewall Throughput: 8.9 Gbps HTTP / 6.8 Gbps appmix (reseller-listed; not confirmed against the official datasheet, which defers to the Product Selection tool)
Threat Prevention Throughput: 3.3 Gbps HTTP / 3.2 Gbps appmix (reseller-listed; other listings show 4.2 to 4.5 Gbps, unverified)
IPsec VPN Throughput: 4.6 Gbps (reseller-listed; other listings show 3.5 Gbps, unverified)
Form Factor: 1U rack-mount, two load-sharing 450W AC/DC power supplies (redundant)
Curation Review
✔ Pros:Large session capacity (945,000 concurrent, 100,000 new sessions/sec) for a 1U appliance; Dual redundant 450W AC/DC power supplies; Built-in PoE on ports 9-12 with a 150W PoE load per Palo Alto docs; Multi-gig (2.5G/5G) copper ports for modern access and uplinks; Dedicated HA port and out-of-band management port; ML-powered NGFW aimed at branch and midsize enterprise deployments
✘ Cons:Single IPsec tunnel throughput is capped by one CPU core (Palo Alto KB), so the headline VPN figure does not scale per tunnel; Published throughput numbers vary widely across resellers and the official performance figures were not verifiable; Premium price (about $9,995 USD at Newegg, roughly CAD 16,815 at CDW Canada); Threat Prevention and URL subscriptions add significant recurring cost; Listed US pricing is from a single retailer and was out of stock at the time of the search
IPsec VPN Throughput: Not published by Ubiquiti; WireGuard/Site-Magic VPN up to 500 Mbps (third-party review, untested method)
Max Sessions: Not published
New Sessions/sec: Not published
Interfaces: 5x 2.5GbE RJ45 (1 WAN + 4 LAN, one LAN port can be remapped to a second WAN)
Form Factor: Compact desktop, 142 x 127 x 30 mm, USB-C 5V/5A power (max 16.1 W)
Curation Review
✔ Pros:2.5GbE WAN and LAN ports on a compact, low-power chassis (max 16.1 W); 512GB built-in NVMe storage on the standard SKU for local UniFi data; Integrated UniFi controller with IDS/IPS and no license or subscription fees; Supports 300+ clients and 30+ UniFi devices; Multi-WAN capable through the remappable LAN port
✘ Cons:Only 1.5 Gbps with IDS/IPS enabled, well below the 2.5 Gbps routing figure; IPsec VPN throughput, session counts and new sessions per second are not published; No PoE output and no built-in Wi-Fi access point; No LAG/LACP support; 500 Mbps VPN throughput is limiting for high-volume site-to-site tunnels