Power Supply: Dual load-sharing 450W, AC or DC (100-240VAC or -48 to -60VDC); max draw 170W, average 133W
Curation Review
✔ Pros:Strong mid-range throughput for a 1U appliance; 4x 25G SFP28 ports for high-speed uplinks or server connectivity; Mixed copper and fiber port layout with 10G RJ-45 support; Dual redundant power supplies with AC or DC options; Full PAN-OS feature set including App-ID, User-ID, and Threat Prevention; Relatively low power draw (max 170W) for its performance class
✘ Cons:Threat Prevention throughput (7.5 Gbps) is well below the firewall rating, so real-world security performance depends heavily on enabled features; Vendor-listed performance figures vary between datasheet revisions and resellers, so verify against the current PAN-OS release; Pricing is high and bundled with required subscriptions and support; Hardware is not upgradeable, so growth beyond its throughput class means a forklift replacement; Lacks QSFP28 40G/100G uplinks, which are limited to the PA-3430 and PA-3440; Requires an active support or subscription contract for full functionality and updates
IPsec VPN Throughput: Not published by Ubiquiti; WireGuard/Site-Magic VPN up to 500 Mbps (third-party review, untested method)
Max Sessions: Not published
New Sessions/sec: Not published
Interfaces: 5x 2.5GbE RJ45 (1 WAN + 4 LAN, one LAN port can be remapped to a second WAN)
Form Factor: Compact desktop, 142 x 127 x 30 mm, USB-C 5V/5A power (max 16.1 W)
Curation Review
✔ Pros:2.5GbE WAN and LAN ports on a compact, low-power chassis (max 16.1 W); 512GB built-in NVMe storage on the standard SKU for local UniFi data; Integrated UniFi controller with IDS/IPS and no license or subscription fees; Supports 300+ clients and 30+ UniFi devices; Multi-WAN capable through the remappable LAN port
✘ Cons:Only 1.5 Gbps with IDS/IPS enabled, well below the 2.5 Gbps routing figure; IPsec VPN throughput, session counts and new sessions per second are not published; No PoE output and no built-in Wi-Fi access point; No LAG/LACP support; 500 Mbps VPN throughput is limiting for high-volume site-to-site tunnels