Ubiquiti EFG | Enterprise Fortress Gateway
A 1U rack-mount gateway for large UniFi deployments that need enterprise-grade security throughput and hardware redundancy at the edge.
Why this one
- The 18-core ARM processor delivers 12.5 Gbps of IDS/IPS throughput, so full deep-packet inspection stays on at line rate without becoming a bottleneck as your WAN grows.
- Dual hot-swappable PSUs combined with VRRP shadow-mode failover mean a single power supply failure or gateway fault doesn't take the site offline — relevant anywhere downtime has a real cost.
- Five configurable WAN ports — including a 25G SFP28 as the default uplink — give you enough headroom to bond multiple ISP feeds or separate management and production traffic at the edge without running out of interfaces.
- Support for 500+ managed UniFi devices and 5,000+ simultaneous clients means you won't redeploy this hardware when the site grows; it's sized for a large campus or multi-floor commercial building from day one.
Good fit if you're running a large UniFi estate — a university campus, a multi-tenancy commercial building, or a high-traffic enterprise site — where IPS throughput, gateway redundancy, and multi-WAN are non-negotiable requirements rather than nice-to-haves.
Worth considering something else if your site runs fewer devices and a single WAN connection, the UDM-PRO-MAX covers most mid-market deployments without the added complexity of dual PSUs and 25G uplinks.
What you'll also need
A 1U rack or enclosure with clearance for the 325 mm depth, a 25G SFP28 transceiver or DAC cable for the primary WAN uplink, downstream UniFi switches for LAN distribution, and a CyberSecure Enterprise subscription to activate the full 95,000+ IDS/IPS signature set.
Technical specifications
Overview
| Dimensions | 442.4 x 43.7 x 325 mm (17.4 x 1.7 x 12.8") |
| Managed UniFi Devices | 500+ |
| Simultaneous Users Connected | 5,000+ |
| Max. WAN Port Count | 5 |
| Default WAN Ports | (1) 25G SFP28 (1) 2.5 GbE RJ45 |
| 2.5 GbE RJ45 | 2 (2.5G/1G/100M/10M) |
| 10G SFP+ | 2 (10G/1G) |
| 25G SFP28 | 2 (25G/10G/1G) |
| IDS/IPS Throughput | 12.5 Gbps |
| SSL/TLS Inspection Concurrent Sessions | 10,000 |
| Concurrent Sessions | 1 Million |
| New Sessions / Second | 71,000 |
| Form Factor | Rack mount (1U) |
| Redundancy | Shadow Mode (VRRP) Gateway Failover (2) Hot-Swappable PSUs |
Security
| IDS/IPS Signatures | 95,000+ with CyberSecure Enterprise |
VPN & SD-WAN
| Identity Endpoint One-Click VPN | 1.2 Gbps |
| Teleport | 1.2 Gbps |
| WireGuard | 1.2 Gbps |
| OpenVPN | 210 Mbps |
| L2TP | 280 Mbps |
| Site Magic | 1.1 Gbps |
| OpenVPN | 120 Mbps |
| IPsec | 580 Mbps |
| WireGuard | 980 Mbps |
| OpenVPN | 180 Mbps |
Hardware
| Max. Power Consumption | 82W |
| Power Method | Universal AC input, 100–240V AC, 7A Max., 50/60 Hz |
| Power Supply | (2) Hot-swappable 150W CRPS |
| Supported Voltage Range | 100–240V AC |
| Heat Dissipation | 280 BTU/hr |
| Processor | 18-core ARM® v8.2 at 2 GHz |
| Weight | 6.5 kg (14.3 lb) |
| Enclosure Material | Aluminium CNC, SGCC steel |
| LCM Display | 1.3" touchscreen |
| Management | Ethernet Bluetooth |
| Button | (1) Factory reset |
| ESD/EMP Protection | Air: ± 8kV, contact: ± 4kV |
| Ambient Operating Temperature | 0 to 40° C (32 to 104° F) |
| Ambient Operating Humidity | 5 to 95% noncondensing |
| Certifications | CE, FCC, IC, Anatel: 06375-24-08356, SRRC |
Software
| Mobile App | UniFi iOS™:Version 10.16.2 and later UniFi Android™: Version 10.17.2 and later |