IPsec VPN Throughput: 8 Gbps (1024B TCP, fastpath); ~11 Gbps projected with VPN offload on FTD 7.2
Max Sessions: 2,000,000 concurrent
New Sessions/sec: 130,000 (FTD with AVC); a separate ASA-style table lists 300,000, unverified
Interfaces: 8 x 1G RJ45, 8 x 1/10G SFP+
Form Factor: 1RU appliance
Curation Review
✔ Pros:Compact 1RU form factor for internet edge and private cloud perimeters; 17 Gbps threat prevention throughput (FW+AVC+IPS) at 1024B; 2M concurrent sessions and 3,000 maximum VPN peers; Supports both ASA and Firewall Threat Defense (FTD) software images; 8 x 10G SFP+ ports for high-speed uplinks
✘ Cons:Threat prevention throughput of 17 Gbps is modest for large enterprise or data center deployments; 8 Gbps base IPsec VPN throughput; Subscription licenses for threat defense, URL filtering and malware protection are sold separately and add significant ongoing cost; Cisco's official list price was not found, and retailer prices vary widely by SKU, refurbished status and software image; Some spec figures conflict across reseller pages and should be checked against Cisco's official datasheet
IPsec VPN Throughput: Not published by Ubiquiti; WireGuard/Site-Magic VPN up to 500 Mbps (third-party review, untested method)
Max Sessions: Not published
New Sessions/sec: Not published
Interfaces: 5x 2.5GbE RJ45 (1 WAN + 4 LAN, one LAN port can be remapped to a second WAN)
Form Factor: Compact desktop, 142 x 127 x 30 mm, USB-C 5V/5A power (max 16.1 W)
Curation Review
✔ Pros:2.5GbE WAN and LAN ports on a compact, low-power chassis (max 16.1 W); 512GB built-in NVMe storage on the standard SKU for local UniFi data; Integrated UniFi controller with IDS/IPS and no license or subscription fees; Supports 300+ clients and 30+ UniFi devices; Multi-WAN capable through the remappable LAN port
✘ Cons:Only 1.5 Gbps with IDS/IPS enabled, well below the 2.5 Gbps routing figure; IPsec VPN throughput, session counts and new sessions per second are not published; No PoE output and no built-in Wi-Fi access point; No LAG/LACP support; 500 Mbps VPN throughput is limiting for high-volume site-to-site tunnels