Firewall Throughput: Not published by Ubiquiti in the sources reviewed
Threat Prevention Throughput: 2.3 Gbps IDS/IPS per Ubiquiti spec page (older listings show 1.5 Gbps)
IPsec VPN Throughput: Not published by Ubiquiti; third-party reviews report about 800-1,000 Mbps for WireGuard and 300-400 Mbps for OpenVPN
Max Sessions: Not published in the sources reviewed
New Sessions/sec: Not published in the sources reviewed
Interfaces: 1x 2.5GbE RJ45 WAN, 4x GbE RJ45 LAN (one LAN port can be reconfigured as a second WAN for multi-WAN)
Form Factor: Compact desktop; UCG-Max-NS variant includes 512GB NVMe storage
Curation Review
✔ Pros:Low entry price at $199 MSRP; Compact desktop form factor; Five-port layout with multi-WAN support via a reconfigurable LAN port; Runs UniFi OS with integrated IDS/IPS, site-to-site and remote VPN options (IPsec, WireGuard, OpenVPN, L2TP); Manages 30+ UniFi devices and 300+ clients per Ubiquiti listing
✘ Cons:Routing and IPS throughput (2.3 Gbps) is modest for multi-gigabit WANs with inspection enabled; Published throughput figures conflict across sources (1.5 vs 2.3 Gbps IPS, varying VPN numbers); Only one 2.5GbE port, with the remaining ports at 1GbE; Vendor does not publish IPsec tunnel, session, or new-connection limits; Some resellers list prices well above MSRP (one US listing at $394.79)
✔ Pros:5.0 Gbps IDS/IPS throughput at this price point; Two 3.5in HDD bays with RAID 1 for surveillance storage and hot-swap support; Acts as gateway, NVR, and UniFi controller in one 1U unit; Scales to 200+ devices and 2,000+ clients; Shadow Mode (VRRP) gateway failover available with a second unit; Near-silent at idle with a 1.3in touchscreen
✘ Cons:Fan noise rises noticeably under sustained 5 Gbps IDS/IPS load; Built-in 1G LAN ports bottleneck WiFi 7 APs, so a separate 2.5G/10G switch is usually needed; No PoE output, so PoE devices need a separate switch or injector; HDDs cost extra (about $140-280); PPPoE throughput with IDS/IPS may be lower because the Cortex-A57 has no PPPoE offload; Shadow Mode requires a second identical unit, which doubles gateway cost; CyberSecure subscription adds $99/year; Max sessions and new sessions/sec are not published