Firewall Throughput: Not published by Ubiquiti; 5 Gbps IDS/IPS-secured routing throughput is the only headline figure (reviewer and retailer listings)
Threat Prevention Throughput: 5 Gbps IDS/IPS
IPsec VPN Throughput: Not published
Max Sessions: Not published; 500+ simultaneous users and 4,000-entry MAC address table
New Sessions/sec: Not published
Interfaces: 2x 10G SFP+; 1x 10GbE RJ45 (10G/2.5G/1G); 4x 2.5GbE RJ45 (2.5G/1G/100M/10M); 2 of the 6 WAN-capable ports are default WAN (1x 10G SFP+ and 1x 10GbE RJ45), with the other ports selectable as WAN
Form Factor: Compact desktop; 212.8 x 127.6 x 30 mm; 675 g without SSD
CPU / RAM: Quad-core ARM Cortex-A73 at 2.2 GHz / 3 GB RAM
Storage: Optional NVMe SSD up to 2 TB (NVR storage)
PoE Budget: 30W total from one PoE+ port (port 4)
Max Power Consumption: 29.4W excluding PoE output
Curation Review
✔ Pros:Lowest-cost Ubiquiti gateway with 5 Gbps IDS/IPS, rated above the UDM-SE's 3.5 Gbps at a lower launch price ($279 MSRP vs. $499); Multi-gig flexibility with 10GBASE-T, dual SFP+ and four 2.5GbE ports; Compact desktop design with optional NVMe storage for UniFi Protect/NVR use; Supports site-to-site VPN plus OpenVPN, WireGuard and L2TP server functions, with integrated PoE+ for one device; Managed through the UniFi Network controller with 500+ simultaneous user capacity
✘ Cons:No official routing, IPsec or WireGuard throughput figures published by Ubiquiti; community WireGuard numbers (around 400-500 Mbps) are unverified; Only one PoE+ output port (30W total) versus eight PoE ports on the UDM-SE; Lower device and user capacity and less storage expansion than the UDM-SE; No published IPsec tunnel or concurrent session limits; Reseller prices now often run above the launch MSRP (about $320-$346 USD at US resellers)
Max Sessions: 1,400,000 concurrent TCP sessions; 5,000 firewall policies; 200 gateway-to-gateway and 500 client-to-gateway IPsec VPN tunnels
New Sessions/sec: 85,000 new TCP sessions per second
Interfaces: 6x GE RJ45 (4 LAN and 2 WAN per product description); 1 GE RJ45 bypass pair (PORT1/PORT2); 2x GE SFP slots; 1x RJ45 serial (data); 1x RJ45 console; 1x USB 2.0; 1x microSD slot; digital I/O module. No cellular or Wi-Fi.
Form Factor: Ruggedized fanless desktop, DIN-rail, or wall mount; 42.7 x 216 x 159 mm (1.68 x 8.50 x 6.26 in); 1.24 kg (2.74 lb); IP40
Processor: FortiSP5 with TPM
Power Input: Redundant 12-125 VDC dual inputs (DC cables not included); 15.2 W average / 18.7 W max; 12 V DC / 1.67 A max; 64 BTU/h max heat dissipation
Operating Temperature: -40u00b0C to 75u00b0C (-40u00b0F to 167u00b0F); storage -40u00b0C to 85u00b0C; 5-95% non-condensing humidity; up to 3,048 m (10,000 ft) altitude
PoE: Not listed (no PoE)
Curation Review
✔ Pros:Ruggedized, fanless design rated for -40°C to 75°C operation, suited to harsh industrial and OT sites; Redundant 12-125 VDC dual power inputs improve availability in substations, vehicles and industrial plants; Strong throughput for an industrial unit at 8 Gbps firewall and 7.1 Gbps IPsec VPN; Built-in SD-WAN and FortiOS with FortiGuard security services and OT-focused IPS; Two SFP slots plus a bypass port pair and a digital I/O module support fiber uplinks and fail-safe deployment; Supports DIN-rail, desktop and wall mounting; TPM and FortiSP5 hardware for security
✘ Cons:Only 1.1 Gbps threat protection and 1.25 Gbps NGFW throughput, well below the headline firewall figure once security services are enabled; No PoE, cellular or Wi-Fi built in, so separate hardware is needed for those; IP40 rating is weaker than IP67-class enclosures for washdown or dusty environments; Bundled security subscriptions (UTP, FortiCare) are a recurring cost and add significantly to the total price; DC power cables are not included and must be sourced separately; Public spec sources conflict on IP rating (IP30 vs IP40), and some spec tables come from resellers rather than Fortinet