Interfaces: Ports 1-20 SFP/SFP+ (1G/10G); ports 21-24 SFP28 (25G); QSFP28 40G/100G ports with breakout support (port count varies by source); dedicated management port
Form Factor: 2U rack-mountable
Curation Review
✔ Pros:High firewall and threat prevention throughput for a 2U appliance; 3.6M max sessions and 295,000 new sessions/sec suit data center and high-traffic edge deployments; 25G and 40G/100G port options with breakout support; optional redundant power supply; 4,094 802.1Q VLAN tags per device; supports L2, L3, tap, virtual wire and 802.3ad/LACP aggregation; full PAN-OS feature set and App-ID, Threat Prevention and WildFire subscriptions
✘ Cons:Premium price, with reseller pricing ranging from roughly $78K to $118K and quote-based pricing common; throughput figures differ across datasheet versions and resellers, so sizing requires checking the current official datasheet; threat prevention throughput is roughly 40% below firewall throughput with full inspection enabled; only 10 virtual systems in the base configuration, with extra VSYS requiring a separate license; full functionality depends on recurring subscription licenses; power, port layout and dimensions could not be verified from official sources
IPsec VPN Throughput: Not published by Ubiquiti; WireGuard/Site-Magic VPN up to 500 Mbps (third-party review, untested method)
Max Sessions: Not published
New Sessions/sec: Not published
Interfaces: 5x 2.5GbE RJ45 (1 WAN + 4 LAN, one LAN port can be remapped to a second WAN)
Form Factor: Compact desktop, 142 x 127 x 30 mm, USB-C 5V/5A power (max 16.1 W)
Curation Review
✔ Pros:2.5GbE WAN and LAN ports on a compact, low-power chassis (max 16.1 W); 512GB built-in NVMe storage on the standard SKU for local UniFi data; Integrated UniFi controller with IDS/IPS and no license or subscription fees; Supports 300+ clients and 30+ UniFi devices; Multi-WAN capable through the remappable LAN port
✘ Cons:Only 1.5 Gbps with IDS/IPS enabled, well below the 2.5 Gbps routing figure; IPsec VPN throughput, session counts and new sessions per second are not published; No PoE output and no built-in Wi-Fi access point; No LAG/LACP support; 500 Mbps VPN throughput is limiting for high-volume site-to-site tunnels