Firewall Throughput: Not published by Ubiquiti; 5 Gbps IDS/IPS-secured routing throughput is the only headline figure (reviewer and retailer listings)
Threat Prevention Throughput: 5 Gbps IDS/IPS
IPsec VPN Throughput: Not published
Max Sessions: Not published; 500+ simultaneous users and 4,000-entry MAC address table
New Sessions/sec: Not published
Interfaces: 2x 10G SFP+; 1x 10GbE RJ45 (10G/2.5G/1G); 4x 2.5GbE RJ45 (2.5G/1G/100M/10M); 2 of the 6 WAN-capable ports are default WAN (1x 10G SFP+ and 1x 10GbE RJ45), with the other ports selectable as WAN
Form Factor: Compact desktop; 212.8 x 127.6 x 30 mm; 675 g without SSD
CPU / RAM: Quad-core ARM Cortex-A73 at 2.2 GHz / 3 GB RAM
Storage: Optional NVMe SSD up to 2 TB (NVR storage)
PoE Budget: 30W total from one PoE+ port (port 4)
Max Power Consumption: 29.4W excluding PoE output
Curation Review
✔ Pros:Lowest-cost Ubiquiti gateway with 5 Gbps IDS/IPS, rated above the UDM-SE's 3.5 Gbps at a lower launch price ($279 MSRP vs. $499); Multi-gig flexibility with 10GBASE-T, dual SFP+ and four 2.5GbE ports; Compact desktop design with optional NVMe storage for UniFi Protect/NVR use; Supports site-to-site VPN plus OpenVPN, WireGuard and L2TP server functions, with integrated PoE+ for one device; Managed through the UniFi Network controller with 500+ simultaneous user capacity
✘ Cons:No official routing, IPsec or WireGuard throughput figures published by Ubiquiti; community WireGuard numbers (around 400-500 Mbps) are unverified; Only one PoE+ output port (30W total) versus eight PoE ports on the UDM-SE; Lower device and user capacity and less storage expansion than the UDM-SE; No published IPsec tunnel or concurrent session limits; Reseller prices now often run above the launch MSRP (about $320-$346 USD at US resellers)
Est. Price:
$279 - $346
Compare Against
Juniper Networks SRX4600
★ 4.1 Value Score
Technical Specifications
Firewall Throughput: Up to 400 Gbps (1518B and IMIX, per Juniper HCT hardware specs). Older datasheet figures differ and should be checked against the current Junos release.
Threat Prevention Throughput: Not confirmed in verified sources. An older datasheet cites roughly 80-90 Gbps with application security enabled; treat as unverified.
Form Factor: 1U fixed chassis (1.72 in / 4.37 cm height); 2x hot-swappable PSUs in 1+1 redundancy; front-to-back airflow; AC max 800 W, AC average 650 W; DC variant also available
PoE: Not applicable (security gateway, no PoE)
Curation Review
✔ Pros:Up to 400 Gbps rated firewall throughput in a 1U chassis; 4x QSFP28 ports allow 40/100GbE uplinks alongside 8x 10GbE; Dedicated SFP+ chassis cluster ports support active/passive HA; Very high concurrent session capacity (about 60M) and 7,500 IPsec tunnels; Redundant hot-swappable 1+1 power supplies with front-to-back airflow; Junos-based SRX platform with full security service options
✘ Cons:New units list at roughly $117,000-$211,000 before subscriptions, far above most SMB and mid-market needs; Threat prevention throughput is not clearly published, and the 400 Gbps figure is an up-to rating under Juniper's test conditions; Published new-connections-per-second and older AppSecure/IPsec figures conflict across sources; Advanced security subscriptions add substantial cost (one listing shows about $255,000 for a 7-year Advanced bundle); No PoE or wireless capability, so it serves only as a security gateway; Juniper's official spec pages redirected to HPE during research, so confirm current support and lifecycle status before purchase