PACKETPERF

Primary Device

Select Primary Hardware... Aruba 6000 24G 4SFP Aruba AP-515 Aruba AP-535 Aruba (HPE) 6300M Aruba (HPE) 7030 Aruba (HPE) 9004 Gateway Aruba (HPE) 9240 Campus Gateway Aruba (HPE) AP-735 Aruba (HPE) Aruba 6400 Switch Aruba (HPE) Aruba 8320 Aruba (HPE) Aruba 9004 Gateway Aruba (HPE) Aruba 9106 Gateway Aruba (HPE) Aruba 9114 Gateway Aruba (HPE) Aruba 9240 Campus Gateway Aruba (HPE) Aruba AP-655 Aruba (HPE) Aruba AP-755 Aruba (HPE) Aruba CX 6100 Aruba (HPE) Aruba CX 6100 Switch Aruba (HPE) Aruba CX 6200 Aruba (HPE) Aruba CX 6200F Switch Aruba (HPE) Aruba CX 6300 Aruba (HPE) Aruba CX 6300M Switch Aruba (HPE) Instant On AP33 Aruba (HPE) Instant On AP45 Cisco C9200L-24T-4G Cisco C9200L-48T-4G Cisco Catalyst 9120AX Cisco Catalyst 9136 Cisco Catalyst 9136I Cisco Catalyst 9164 (CW9164I) Cisco Catalyst 9166 Cisco Catalyst 9166 Series (CW9166) Cisco Catalyst 9176I (CW9176I) Cisco Catalyst 9176I (CW9176I-CFG) Cisco Catalyst 9178i Cisco Catalyst 9200 Cisco Catalyst 9200 Series Cisco Catalyst 9200L Cisco Catalyst 9300 Cisco Catalyst 9300-48P Cisco Catalyst 9300X Cisco Catalyst 9500 Cisco Catalyst 9500 Series Cisco Catalyst 9500-48Y4C Cisco Catalyst 9500X Cisco Catalyst CW9164 Cisco Catalyst CW9166 Cisco Catalyst CW9166I Cisco Catalyst CW9171 Cisco Catalyst CW9172I Cisco Catalyst CW9174 Cisco Catalyst CW9176 Cisco Catalyst CW9176I Cisco Catalyst CW9178I Cisco Catalyst CW9179F Cisco Cisco Catalyst 9166I Cisco Cisco Catalyst 9200 Cisco Cisco Catalyst 9200L Cisco Cisco Catalyst 9300X Cisco Cisco Catalyst 9500 Cisco Cisco Secure Firewall 1210 Cisco Cisco Secure Firewall 3105 Cisco Cisco Secure Firewall 3110 Cisco Cisco Wireless 9178I (CW9178I) Cisco CW9176 Cisco Nexus 9300-GX2 Cisco Nexus 9300-GX2 (N9K-C9332D-GX2B) Cisco Nexus 93180YC-FX3 Cisco Secure Firewall 1010 Cisco Secure Firewall 1120 Cisco Secure Firewall 1140 Cisco Secure Firewall 1150 Cisco Secure Firewall 1210 Cisco Secure Firewall 1220 (1220CX) Cisco Secure Firewall 220 Cisco Secure Firewall 3105 Cisco Secure Firewall 3110 Cisco Secure Firewall 3120 Cisco Secure Firewall 3130 Cisco Secure Firewall 3140 Cisco Secure Firewall 4215 Cisco Secure Firewall 4225 Cisco Secure Firewall 4245 Fortinet FortiAP 231G Fortinet FortiAP 231K Fortinet FortiAP 241K Fortinet FortiAP 431G Fortinet FortiAP 441K Fortinet FortiGate 1000F Fortinet FortiGate 120G Fortinet FortiGate 200G Fortinet FortiGate 3500G Fortinet FortiGate 400G Fortinet FortiGate 40F Fortinet FortiGate 60F Fortinet FortiGate 70G Fortinet FortiGate 90G Fortinet FortiGate Rugged 60G (FGR-60G) Fortinet FortiSwitch 1048G Fortinet FortiSwitch 124G Fortinet FortiSwitch 124G (FS-124G) Fortinet FortiSwitch 124G-FPOE Fortinet FortiSwitch 148F Fortinet FortiSwitch 148G Fortinet FortiSwitch 2048F Fortinet FortiSwitch 3032G Fortinet FortiSwitch 648F Fortinet FortiSwitch 648F-FPOE Fortinet FortiSwitch-124F Juniper Networks AP34 Juniper Networks AP36 Juniper Networks AP37 Juniper Networks AP45 Juniper Networks AP47 Juniper Networks AP66 Juniper Networks EX4000 Juniper Networks EX4100 Juniper Networks EX4100-48P Juniper Networks EX4400 Juniper Networks EX4400-48P Juniper Networks Mist AP33 Juniper Networks Mist AP37 Juniper Networks Mist AP43 Juniper Networks QFX5120-48Y Juniper Networks QFX5220-32CD Juniper Networks QFX5230-64CD Juniper Networks QFX5240 Juniper Networks SRX1600 Juniper Networks SRX2300 Juniper Networks SRX4120 Juniper Networks SRX4300 Juniper Networks SRX440 Juniper Networks SRX4600 Juniper Networks SRX4700 Netgate 4100 Netgate 6100 Palo Alto Networks ION 1200-S Palo Alto Networks ION 1200-W Palo Alto Networks ION 3200 Palo Alto Networks ION 3200-S Palo Alto Networks ION 3200-W Palo Alto Networks ION 3200H Palo Alto Networks ION 3200H-C5G-WW Palo Alto Networks PA-1410 Palo Alto Networks PA-3410 Palo Alto Networks PA-410 Palo Alto Networks PA-415 Palo Alto Networks PA-440 Palo Alto Networks PA-445 Palo Alto Networks PA-445-W Palo Alto Networks PA-5410 Palo Alto Networks PA-545-PoE Palo Alto Networks PA-5450 Palo Alto Networks PA-555-POE Palo Alto Networks PA-7500 Palo Alto Networks Prisma SD-WAN ION 3200H Ubiquiti Cloud Gateway Max Ubiquiti Cloud Gateway Max (UCG-Max) Ubiquiti Cloud Gateway Ultra Ubiquiti Dream Machine Pro Max Ubiquiti Dream Machine Pro Max (UDM-Pro-Max) Ubiquiti Dream Machine Special Edition (UDM-SE) Ubiquiti Enterprise 24 PoE (USW-Enterprise-24-PoE) Ubiquiti Enterprise 8 PoE Ubiquiti Enterprise Fortress Gateway (EFG) Ubiquiti Pro Max 24 PoE Ubiquiti Pro Max 48 PoE Ubiquiti Pro Max Aggregation (USW-Pro-Max-Aggregation) Ubiquiti Switch Enterprise 24 PoE (USW-Enterprise-24-PoE) Ubiquiti Switch Pro Max 24 PoE Ubiquiti Switch Pro Max 48 PoE Ubiquiti U6 Pro Ubiquiti U6-Enterprise Ubiquiti U6-Pro Ubiquiti U7 Pro Ubiquiti U7 Pro Max Ubiquiti U7 Pro Outdoor Ubiquiti UniFi Cloud Gateway Fiber Ubiquiti UniFi Cloud Gateway Max (UCG-Max) Ubiquiti UniFi Dream Machine Beast Ubiquiti UniFi Dream Machine Pro Max Ubiquiti UniFi Dream Machine Pro Max (UDM-Pro-Max) Ubiquiti UniFi Enterprise 7 Ubiquiti UniFi Pro Max 24 PoE Ubiquiti UniFi Pro Max 48 PoE Ubiquiti UniFi Standard 24 PoE (USW-24-POE) Ubiquiti UniFi Switch Pro Max 16 PoE Ubiquiti UniFi Switch Ultra Ubiquiti UniFi U7 Pro Ubiquiti UniFi U7 Pro Max Ubiquiti UniFi U7 Pro Outdoor Ubiquiti UniFi U7 Pro Wall Ubiquiti UniFi U7 Pro XGS Ubiquiti UniFi6 Mesh (U6 Mesh) Ubiquiti USW Pro Max 24 PoE Ubiquiti USW Pro Max 48 PoE Ubiquiti USW-Enterprise-24-PoE Ubiquiti USW-Pro-24-PoE

Technical Specifications

• Firewall Throughput: 200 Gbps (App-ID / HTTP appmix)
• Threat Prevention Throughput: 189 Gbps
• IPsec VPN Throughput: 85 Gbps
• Max Sessions: 100 million
• New Sessions/sec: 3.6 million (older datasheet lists 4 million)
• Interfaces: Modular: 1-2 networking cards per system. Each networking card: 4x 100/1000/10G Cu, 12x 1G/10G SFP/SFP+, 2x 40G/100G QSFP28. Requires data processing cards (2 networking cards need at least 2 DPCs)
• Form Factor: 5U rack-mount chassis

Curation Review

• ✔ Pros: Very high throughput for a single chassis (200 Gbps firewall, 189 Gbps threat prevention); Modular design with networking and data processing cards allows capacity to scale; Supports 100M max sessions and 3.6M new sessions per second for large data center and carrier workloads; 85 Gbps IPsec VPN throughput; Redundant AC or DC power and fan options; Full PAN-OS feature set including App-ID, Threat Prevention, and ML-powered security; Interface modes include L2, L3, tap, and virtual wire with 802.1Q VLAN support
• ✘ Cons: High upfront cost, typically around $88,000 to $100,000+ for the base bundle before licensing and support; Performance figures depend on card configuration and test conditions, so real-world results may differ; Requires 5U of rack space and considerable power and cooling, which is excessive for small or mid-size sites; Port counts and bundle contents vary across resellers, so configurations need careful quoting; Subscription licensing for Threat Prevention, URL filtering, and support adds substantial recurring cost; Overkill for branch or SMB deployments that the PA-400 or PA-1400 series would serve better
• Est. Price: $88,320 - $103,010

Compare Against

Select Comparison Hardware... Aruba (HPE) 9004 Gateway Aruba (HPE) 9240 Campus Gateway Aruba (HPE) Aruba 9004 Gateway Aruba (HPE) Aruba 9106 Gateway Aruba (HPE) Aruba 9114 Gateway Aruba (HPE) Aruba 9240 Campus Gateway Cisco Cisco Secure Firewall 1210 Cisco Cisco Secure Firewall 3105 Cisco Cisco Secure Firewall 3110 Cisco Secure Firewall 1010 Cisco Secure Firewall 1120 Cisco Secure Firewall 1140 Cisco Secure Firewall 1150 Cisco Secure Firewall 1210 Cisco Secure Firewall 1220 (1220CX) Cisco Secure Firewall 220 Cisco Secure Firewall 3105 Cisco Secure Firewall 3110 Cisco Secure Firewall 3120 Cisco Secure Firewall 3130 Cisco Secure Firewall 3140 Cisco Secure Firewall 4215 Cisco Secure Firewall 4225 Cisco Secure Firewall 4245 Fortinet FortiGate 1000F Fortinet FortiGate 120G Fortinet FortiGate 200G Fortinet FortiGate 3500G Fortinet FortiGate 400G Fortinet FortiGate 40F Fortinet FortiGate 60F Fortinet FortiGate 70G Fortinet FortiGate 90G Fortinet FortiGate Rugged 60G (FGR-60G) Juniper Networks SRX1600 Juniper Networks SRX2300 Juniper Networks SRX4120 Juniper Networks SRX4300 Juniper Networks SRX440 Juniper Networks SRX4600 Juniper Networks SRX4700 Netgate 4100 Netgate 6100 Palo Alto Networks ION 1200-S Palo Alto Networks ION 1200-W Palo Alto Networks ION 3200 Palo Alto Networks ION 3200-S Palo Alto Networks ION 3200-W Palo Alto Networks ION 3200H Palo Alto Networks ION 3200H-C5G-WW Palo Alto Networks PA-1410 Palo Alto Networks PA-3410 Palo Alto Networks PA-410 Palo Alto Networks PA-415 Palo Alto Networks PA-440 Palo Alto Networks PA-445 Palo Alto Networks PA-445-W Palo Alto Networks PA-5410 Palo Alto Networks PA-545-PoE Palo Alto Networks PA-5450 Palo Alto Networks PA-555-POE Palo Alto Networks PA-7500 Palo Alto Networks Prisma SD-WAN ION 3200H Ubiquiti Cloud Gateway Max Ubiquiti Cloud Gateway Max (UCG-Max) Ubiquiti Cloud Gateway Ultra Ubiquiti Dream Machine Pro Max Ubiquiti Dream Machine Pro Max (UDM-Pro-Max) Ubiquiti Dream Machine Special Edition (UDM-SE) Ubiquiti Enterprise Fortress Gateway (EFG) Ubiquiti UniFi Cloud Gateway Fiber Ubiquiti UniFi Cloud Gateway Max (UCG-Max) Ubiquiti UniFi Dream Machine Beast Ubiquiti UniFi Dream Machine Pro Max Ubiquiti UniFi Dream Machine Pro Max (UDM-Pro-Max)

Technical Specifications

• Firewall Throughput: 2.5 Gbps (routing, IDS/IPS off)
• Threat Prevention Throughput: 1.5 Gbps (IDS/IPS on)
• IPsec VPN Throughput: Not published by Ubiquiti; WireGuard/Site-Magic VPN up to 500 Mbps (third-party review, untested method)
• Max Sessions: Not published
• New Sessions/sec: Not published
• Interfaces: 5x 2.5GbE RJ45 (1 WAN + 4 LAN, one LAN port can be remapped to a second WAN)
• Form Factor: Compact desktop, 142 x 127 x 30 mm, USB-C 5V/5A power (max 16.1 W)

Curation Review

• ✔ Pros: 2.5GbE WAN and LAN ports on a compact, low-power chassis (max 16.1 W); 512GB built-in NVMe storage on the standard SKU for local UniFi data; Integrated UniFi controller with IDS/IPS and no license or subscription fees; Supports 300+ clients and 30+ UniFi devices; Multi-WAN capable through the remappable LAN port
• ✘ Cons: Only 1.5 Gbps with IDS/IPS enabled, well below the 2.5 Gbps routing figure; IPsec VPN throughput, session counts and new sessions per second are not published; No PoE output and no built-in Wi-Fi access point; No LAG/LACP support; 500 Mbps VPN throughput is limiting for high-volume site-to-site tunnels
• Est. Price: $240 - $279