Firewall Throughput: Not published by Ubiquiti; 5 Gbps IDS/IPS-secured routing throughput is the only headline figure (reviewer and retailer listings)
Threat Prevention Throughput: 5 Gbps IDS/IPS
IPsec VPN Throughput: Not published
Max Sessions: Not published; 500+ simultaneous users and 4,000-entry MAC address table
New Sessions/sec: Not published
Interfaces: 2x 10G SFP+; 1x 10GbE RJ45 (10G/2.5G/1G); 4x 2.5GbE RJ45 (2.5G/1G/100M/10M); 2 of the 6 WAN-capable ports are default WAN (1x 10G SFP+ and 1x 10GbE RJ45), with the other ports selectable as WAN
Form Factor: Compact desktop; 212.8 x 127.6 x 30 mm; 675 g without SSD
CPU / RAM: Quad-core ARM Cortex-A73 at 2.2 GHz / 3 GB RAM
Storage: Optional NVMe SSD up to 2 TB (NVR storage)
PoE Budget: 30W total from one PoE+ port (port 4)
Max Power Consumption: 29.4W excluding PoE output
Curation Review
✔ Pros:Lowest-cost Ubiquiti gateway with 5 Gbps IDS/IPS, rated above the UDM-SE's 3.5 Gbps at a lower launch price ($279 MSRP vs. $499); Multi-gig flexibility with 10GBASE-T, dual SFP+ and four 2.5GbE ports; Compact desktop design with optional NVMe storage for UniFi Protect/NVR use; Supports site-to-site VPN plus OpenVPN, WireGuard and L2TP server functions, with integrated PoE+ for one device; Managed through the UniFi Network controller with 500+ simultaneous user capacity
✘ Cons:No official routing, IPsec or WireGuard throughput figures published by Ubiquiti; community WireGuard numbers (around 400-500 Mbps) are unverified; Only one PoE+ output port (30W total) versus eight PoE ports on the UDM-SE; Lower device and user capacity and less storage expansion than the UDM-SE; No published IPsec tunnel or concurrent session limits; Reseller prices now often run above the launch MSRP (about $320-$346 USD at US resellers)
Est. Price:
$279 - $346
Compare Against
Palo Alto Networks ION 3200H-C5G-WW
★ 4.3 Value Score
Technical Specifications
Firewall Throughput: Not published by Palo Alto Networks. Third-party listings cite 1.5-1.7 Gbps, unverified
Threat Prevention Throughput: Not published
IPsec VPN Throughput: Not published by Palo Alto Networks. Third-party listings cite 1.5 Gbps, unverified
Max Sessions: Not published (third-party listing cites 80,000, unverified)
New Sessions/sec: Not published
Interfaces: 6 x 10/100/1000 RJ-45 + 2 x RJ-45/SFP combo WAN ports; 1 x Ethernet 1Gbps Port 0; 4 x 1Gbps RJ-45 L2 switch LAN ports (C5G-WW); 2 x RJ-45 bypass pair; 1 x RJ-45 console; 2 x USB 3.0 Type-A; 4 x 5G antennas; dual nano-SIM slot
Form Factor: Desktop, rack or wall-mount appliance, 9 x 13 x 1.73 in (228.6 x 330.2 x 43.9 mm), 9.85 lb, fanless, IP40
Cellular / 5G: 5G (worldwide), dual nano-SIM; cellular certifications listed for AT&T, T-Mobile, PTCRB and Verizon
PoE: Not listed for ION 3200H-C5G-WW (the base ION 3200 lists 90W system / 60W per port PoE)
Power Input: Redundant DC 12-48 V, 4 A; 180W power adapter option
Memory / Storage: 8 GB RAM / 128 GB eMMC
Operating Temperature: -40C to 70C (-40F to 158F); 0C to 60C when using the provided power adapter
Certifications: FCC Class A, CE Class A, VCCI Class A, UL/CSA/IEC 62368-1, IEEE 1613, IEC 61850-3
Curation Review
✔ Pros:Temperature-hardened, fanless design rated for -40C to 70C operation; Integrated 4-port L2 switch with 5G cellular and dual-SIM failover in one branch device; Redundant DC 12-48 V power input suits harsh or remote sites; Cellular carrier certifications for AT&T, T-Mobile and Verizon; Part of the Prisma SD-WAN ecosystem with centralized management and IP40 rating
✘ Cons:Palo Alto Networks does not publish firewall, threat prevention, IPsec or session throughput figures for this model; Only 8 GB RAM and 128 GB eMMC storage, limiting it for heavier workloads; Designed as an SD-WAN branch device, not a full next-generation firewall; Heavier at 9.85 lb than comparable compact branch units; Pricing is quote-only from some vendors and third-party listings vary widely; PoE budget for the C5G-WW variant is not documented