Max Sessions: 3,000,000 concurrent TCP (some listings cite 1,500,000)
New Sessions/sec: 124,000 (TCP)
Interfaces: 2x shared-media WAN pairs (each RJ45 10/5/2.5/1 GE or SFP+/SFP 10GE/GE); 8x GE RJ45 internal; 1x RJ45 console; 1x USB
Form Factor: Desktop
Curation Review
✔ Pros:Strong firewall throughput of 28 Gbps for a desktop-class appliance; 25 Gbps IPsec VPN throughput; Supports 200 gateway-to-gateway and 2,500 client-to-gateway IPsec tunnels; Flexible WAN options with shared RJ45 2.5G/5G/10G and SFP+ 10G pairs; 124,000 new TCP sessions per second; Part of the FortiOS ecosystem with centralized management and Fortinet security services
✘ Cons:Threat prevention throughput (2.2 Gbps) is far below the headline firewall figure once security inspection is enabled; SSL VPN removed in FortiOS 7.2.12, 7.4.8 and 7.6.1 (7.0.x footnote applies); No PoE variant, so it cannot power PoE devices; Premium price relative to small-office alternatives, with security subscriptions needed on top of hardware; Concurrent session figure is inconsistent across sources (1.5M vs 3M)
IPsec VPN Throughput: Not published by Ubiquiti; WireGuard/Site-Magic VPN up to 500 Mbps (third-party review, untested method)
Max Sessions: Not published
New Sessions/sec: Not published
Interfaces: 5x 2.5GbE RJ45 (1 WAN + 4 LAN, one LAN port can be remapped to a second WAN)
Form Factor: Compact desktop, 142 x 127 x 30 mm, USB-C 5V/5A power (max 16.1 W)
Curation Review
✔ Pros:2.5GbE WAN and LAN ports on a compact, low-power chassis (max 16.1 W); 512GB built-in NVMe storage on the standard SKU for local UniFi data; Integrated UniFi controller with IDS/IPS and no license or subscription fees; Supports 300+ clients and 30+ UniFi devices; Multi-WAN capable through the remappable LAN port
✘ Cons:Only 1.5 Gbps with IDS/IPS enabled, well below the 2.5 Gbps routing figure; IPsec VPN throughput, session counts and new sessions per second are not published; No PoE output and no built-in Wi-Fi access point; No LAG/LACP support; 500 Mbps VPN throughput is limiting for high-volume site-to-site tunnels