Firewall Throughput: Not published by Ubiquiti in the sources reviewed
Threat Prevention Throughput: 2.3 Gbps IDS/IPS per Ubiquiti spec page (older listings show 1.5 Gbps)
IPsec VPN Throughput: Not published by Ubiquiti; third-party reviews report about 800-1,000 Mbps for WireGuard and 300-400 Mbps for OpenVPN
Max Sessions: Not published in the sources reviewed
New Sessions/sec: Not published in the sources reviewed
Interfaces: 1x 2.5GbE RJ45 WAN, 4x GbE RJ45 LAN (one LAN port can be reconfigured as a second WAN for multi-WAN)
Form Factor: Compact desktop; UCG-Max-NS variant includes 512GB NVMe storage
Curation Review
✔ Pros:Low entry price at $199 MSRP; Compact desktop form factor; Five-port layout with multi-WAN support via a reconfigurable LAN port; Runs UniFi OS with integrated IDS/IPS, site-to-site and remote VPN options (IPsec, WireGuard, OpenVPN, L2TP); Manages 30+ UniFi devices and 300+ clients per Ubiquiti listing
✘ Cons:Routing and IPS throughput (2.3 Gbps) is modest for multi-gigabit WANs with inspection enabled; Published throughput figures conflict across sources (1.5 vs 2.3 Gbps IPS, varying VPN numbers); Only one 2.5GbE port, with the remaining ports at 1GbE; Vendor does not publish IPsec tunnel, session, or new-connection limits; Some resellers list prices well above MSRP (one US listing at $394.79)
Interfaces: 16x GE RJ45 switch ports; 2x GE RJ45 HA/management ports; 8x GE SFP; 4x 10GE SFP+ FortiLink slots (transceivers sold separately); 1x RJ45 console; 1x USB
Form Factor: 1RU rackmount (44 x 432 x 254 mm)
Curation Review
✔ Pros:Strong firewall and IPsec VPN throughput for its class; 3M concurrent sessions and 140K new sessions/sec handle busy branch or mid-size office traffic; Dense port layout with 16 hardware-accelerated GE RJ45 ports plus 8 GE SFP and 4 10GE SFP+ slots; Built-in FortiLink support lets it manage FortiSwitch units from the firewall; Single FortiOS platform with IPS, application control, and SD-WAN features under one license model
✘ Cons:Threat prevention throughput (2.8 Gbps) is much lower than the firewall and VPN figures, so full inspection is the real bottleneck; 4x 10GE SFP+ slots ship empty and transceivers cost extra; Security services such as IPS, AV, and FortiGuard updates require paid FortiCare/FortiGuard bundles on top of the hardware price; 1RU rackmount chassis is a poor fit for desktop or small-branch deployments without a rack; Pricing varies widely between resellers and list prices are inconsistent, so total cost of ownership is hard to pin down