Ubiquiti UniFi Cloud Gateway Fiber vs Cisco Cisco Secure Firewall 3105: Specs & Price Comparison

Ubiquiti UniFi Cloud Gateway Fiber

★ 5.0 Value Score

Firewall Throughput: Not published by Ubiquiti; 5 Gbps IDS/IPS-secured routing throughput is the only headline figure (reviewer and retailer listings)
Threat Prevention Throughput: 5 Gbps IDS/IPS
IPsec VPN Throughput: Not published
Max Sessions: Not published; 500+ simultaneous users and 4,000-entry MAC address table
New Sessions/sec: Not published
Interfaces: 2x 10G SFP+; 1x 10GbE RJ45 (10G/2.5G/1G); 4x 2.5GbE RJ45 (2.5G/1G/100M/10M); 2 of the 6 WAN-capable ports are default WAN (1x 10G SFP+ and 1x 10GbE RJ45), with the other ports selectable as WAN
Form Factor: Compact desktop; 212.8 x 127.6 x 30 mm; 675 g without SSD
CPU / RAM: Quad-core ARM Cortex-A73 at 2.2 GHz / 3 GB RAM
Storage: Optional NVMe SSD up to 2 TB (NVR storage)
PoE Budget: 30W total from one PoE+ port (port 4)
Max Power Consumption: 29.4W excluding PoE output

✔ Pros: Lowest-cost Ubiquiti gateway with 5 Gbps IDS/IPS, rated above the UDM-SE's 3.5 Gbps at a lower launch price ($279 MSRP vs. $499); Multi-gig flexibility with 10GBASE-T, dual SFP+ and four 2.5GbE ports; Compact desktop design with optional NVMe storage for UniFi Protect/NVR use; Supports site-to-site VPN plus OpenVPN, WireGuard and L2TP server functions, with integrated PoE+ for one device; Managed through the UniFi Network controller with 500+ simultaneous user capacity
✘ Cons: No official routing, IPsec or WireGuard throughput figures published by Ubiquiti; community WireGuard numbers (around 400-500 Mbps) are unverified; Only one PoE+ output port (30W total) versus eight PoE ports on the UDM-SE; Lower device and user capacity and less storage expansion than the UDM-SE; No published IPsec tunnel or concurrent session limits; Reseller prices now often run above the launch MSRP (about $320-$346 USD at US resellers)
Est. Price: $279 - $346

Cisco Cisco Secure Firewall 3105

★ 3.4 Value Score

Firewall Throughput: 10 Gbps (stateful inspection, 1024B FW+AVC; ASA stateful firewall throughput 10.0 Gbps)
Threat Prevention Throughput: 10 Gbps (FW+AVC+IPS, 1024B)
IPsec VPN Throughput: 5.5 Gbps (1024B TCP with FastPath, FTD); 5.5 Gbps (450B UDP L2L, ASA); ASA VPN offload projected at 7.0 Gbps
Max Sessions: 1.5 million concurrent connections (with AVC)
New Sessions/sec: 90,000 new connections per second with AVC (FTD); 150,000 new connections per second (ASA)
Interfaces: 8 x 10M/100M/1GBASE-T RJ-45 + 8 x 1/10G SFP+ fixed (16 ports); up to 24 total Ethernet ports with 8 x 1/10G network module option; 1 x 1/10G SFP management port
Form Factor: 1RU rack-mount appliance (1.75 x 17 x 20 in), single 400W AC PSU (dual optional), AC or DC input
Max VPN Peers: 2,000
Clustering: Not supported on 3105
Layer: L3 firewall (Layer 3 security appliance; no PoE)

✔ Pros: Delivers 10 Gbps firewall and threat prevention throughput in a compact 1RU form factor; Supports FTD and ASA software images, giving a choice of NGFW or classic ASA feature sets; Provides 1.5 million concurrent connections and up to 2,000 VPN peers for a small appliance; Offers 16 fixed ports (8 copper, 8 SFP+) with optional 8-port 1/10G expansion module; Dual power supply option improves availability; Carries a comparatively low price point within the Secure Firewall 3100 series
✘ Cons: No clustering support, so no horizontal scale-out or HA cluster beyond standard failover; IPsec VPN throughput of 5.5 Gbps is well below the 10 Gbps firewall rating; Stateful and threat prevention throughput are both capped at 10 Gbps, limiting use in high-throughput data centers; Optional 10G expansion and dual PSU raise the total cost well above base pricing; Reseller prices vary widely and no official Cisco list price is published on the datasheet; Requires Cisco Secure Firewall subscription licenses (threat, malware, URL) for full feature use, which are priced separately
Est. Price: $18,090 - $32,214

PACKETPERF