Enterprise Fortress Gateway

EFG

€1,899.00*

25G Cloud Gateway with 500+ UniFi device / 5,000+ client support, 12.5 Gbps IPS routing, and complete high availability.

Max. link range:
— Wave AP: 5 km
— Wave AP Micro: 4 km

Max. total throughput: 2 Gbps

5 GHz weatherproof backup radio (Max. throughput: 800 Mbps)

(1) GbE RJ45 port

Integrated GPS & Bluetooth

Includes 90 days of Professional Phone Support ***

*Requires UniFi OS 4.0 and later. Must be paired with another EFG. **Pair with an official SFP28 Module, SFP+ Module, or SFP+ to RJ45 Adapter for the best experience. ***Available in the United States, Canada, Europe, and the United Kingdom.

Unit Switch

High Availability Pair

Single Unit

1899€

10G Direct Attach Cable SW10449.2

Variants from €12.00*

€13.00*

25G Direct Attach Cable SW10450.2

Variants from €20.00*

€23.00*

Enterprise 3.5" HDD SW10452.2

€229.00*

Mechanical
Dimensions	442.4 x 43.7 x 325 mm (17.4 x 1.7 x 12.8")
Weight	6.5 kg (14.3 lb)
Enclosure material	Aluminium CNC, SGCC steel
Hardware
Processor	18-core ARM® v8.2 at 2 GHz
System memory	16 GB DDR4 DIMM
Management interface	Ethernet Bluetooth
Networking interface	(2) 25G SFP28 ports (2) 10G SFP+ ports (2) 2.5 GbE RJ45 ports Map any (2) interfaces to WAN
Power method	(1) Universal AC input, 100—240V AC, 7A Max., 50/60 Hz
Power supply	(2) Hot-swappable 150W CRPS
Supported voltage range	100–240V AC
Max. power consumption	82W
ESD/EMP protection	Air: ± 8kV, contact: ± 4kV
LCM display	(1) 1.3" touchscreen
Button	Factory reset
Ambient operating temperature	0 to 40° C (22 to 104° F)
Ambient operating humidity	5 to 95% noncondensing
Certifications	CE, FCC, IC
Gateway Features
Performance	Redundant WAN with failover and load balancing WiFi QoS with UniFi APs Application, domain, and country-based QoS Application and device type identification Additional internet failover with LTE Backup Internet quality and outage reporting
Next-generation security	Application-aware firewall rules Signature-based IPS/IDS threat detection Content, country, domain, and ad filtering VLAN/subnet-based traffic segmentation Full stateful firewall
Advanced networking	License-free SD-WAN WireGuard, L2TP and OpenVPN server OpenVPN client OpenVPN and IPsec site-to-site VPN One-click Teleport and Identity VPN Policy-based WAN and VPN routing DHCP relay Customizable DHCP server IGMP proxy IPv6 ISP support
Capacity
UniFi devices	500+
Client devices	5,000+
Concurrent sessions	1 million
New sessions / sec	71,000
SSL/TLS inspection concurrent sessions	10,000 ^{Limiting to 5,000 concurrent sessions is recommended if the gateway is passing significant traffic. This can be achieved by restricting which VLANs and domains pass through NeXT AI Inspection, such as only including search engine and LLM queries on employee devices. Learn more.}
IDS/IPS signatures	80,000+ ^{With Enhanced Threat Updates. Learn more.}
Routing Throughput
Firewall	23.5 Gbps
IDS/IPS	12.5 Gbps
^{Measured with iPerf3 on DHCP WAN. Performance may be reduced with PPPoE depending on ISP implementation.}
VPN Server Single User Throughput
UniFi Identity	1.2 Gbps
Teleport	1.2 Gbps
WireGuard	1.2 Gbps
OpenVPN	210 Mbps
L2TP	280 Mbps
^{Measured with iPerf3.}
Site-to-Site VPN Single Tunnel Throughput
Site Magic	1.1 Gbps
OpenVPN	120 Mbps
IPsec	580 Mbps
^{Measured with iPerf3.}
VPN Client Single Tunnel Throughput
WireGuard	980 Mbps
OpenVPN	180 Mbps
^{Measured with iPerf3.}
LEDs
Ethernet	White: Link/activity
SFP+	White: Link/activity
CRPS	Off: No AC power present Steady white: AC power and DC output active Flashing white: AC power present Steady red: AC power lost/failure events Flashing red: Warning events
Software
Mobile app	UniFi iOS™:Version 10.16.2 and later UniFi Android™: Version 10.17.2 and later