Ubiquiti Enterprise Fortress Gateway EFG 25G Cloud Gateway, 500+ UniFi device, 5,000+ c

Pick Up Available
Australian Warranty
Checkout Securely

Ubiquiti Enterprise Fortress Gateway EFG 25G Cloud Gateway, 500+ UniFi device, 5,000+ client support - *Requires Deal Reg*

25G Cloud Gateway with 500+ UniFi device / 5,000+ client support, 12.5 Gbps IPS routing, and complete high availability.

Runs UniFi Network for full-stack network management

Shadow Mode High Availability with automatic failover provides uninterrupted connectivity (VRRP)*

12.5 Gbps routing with IDS/IPS

License-free, real-time inspection of encrypted packets with NeXT AI Inspection (SSL/TLS decryption)

(2) 25G SFP28**, (2) 10G SFP+**, and (2) 2.5 GbE RJ45 ports (all LAN/WAN remappable)

(2) included hot-swap PSUs for power redundancy

1.3" touchscreen

Includes 90 days of Professional Phone Support ***

_{*Requires UniFi OS 4.0 and later. Must be paired with another EFG.

**Pair with an official SFP28 Module, SFP+ Module, or SFP+ to RJ45 Adapter for the best experience.

***Available in the United States, Canada, Europe, and the United Kingdom.}

Introducing Enterprise Fortress Gateway

Designed to give IT admins networking and cybersecurity superpowers.
Effortlessly manage 500+ UniFi devices and 5,000+ clients.

25 Gbps Performance

Seamlessly balance WANs and support
high-capacity switching.

Built for Secure Routing

Deliver over 12 Gbps of routing throughput with full IPS security.

VRRP High Availability

Link a second system in Shadow Mode to minimize network downtime.

Total Power Redundancy

Protect against unexpected power disruptions with dual hot-swap PSUs.

Democratizing SSL/TLS Decryption

Inspect encrypted packets in real time with NeXT AI to gain unparalleled insight into network traffic such as search engine queries – completely license free.

Introducing Enhanced Threat Updates

Defend your network against 80,000+ known cyber threats, with comprehensive daily updates to ensure immediate protection against the latest vulnerabilities.

Available in the United States and Canada. International coming soon.

(EFG)

Capacity

UniFi Devices

500+

Client Devices

5,000+

Concurrent Sessions

1 million

New Sessions / Sec

71,000

SSL/TLS Inspection Concurrent Sessions

10,000*

IDS/IPS Signatures

80,000**

*Limiting to 5,000 concurrent sessions is recommended if the gateway is passing significant traffic. This can be achieved by restricting which VLANs and domains pass through NeXT AI Inspection, such as only including search engine and LLM queries on employee devices. Learn More.

**With Enhanced Threat Updates. Learn More.

Routing Throughput*

Firewall

23.5 Gbps

IDS/IPS

12.5 Gbps

*Measured with iPerf3 on DHCP WAN. Performance may be reduced with PPPoE depending on ISP implementation.

VPN Server Single User Throughput*

UniFi Identity

1.2 Gbps

Teleport

1.2 Gbps

WireGuard

1.2 Gbps

OpenVPN

210 Mbps

L2TP

280 Mbps

*Measured with iPerf3.

Site-to-Site VPN Single Tunnel Throughput*

Site Magic

1.1 Gbps

OpenVPN

120 Mbps

IPsec

580 Mbps

*Measured with iPerf3.

VPN Client Single Tunnel Throughput*

WireGuard

980 Mbps

OpenVPN

180 Mbps

*Measured with iPerf3.

Mechanical
Dimensions	442.4 x 43.7 x 325 mm (17.4 x 1.7 x 12.8")
Weight	6.5 kg (14.3 lb)
Enclosure material	Aluminium CNC, SGCC steel
Hardware
Processor	18-core ARM® v8.2 at 2 GHz
System memory	16 GB DDR4 DIMM
Management interface	Ethernet Bluetooth
Networking interface	LAN: (1) 25G SFP28 port (2) 10G SFP+ ports (1) 2.5G RJ45 port WAN: (1) 25G SFP28 port (1) 2.5G RJ45 port
Power method	(1) Universal AC input, 100—240V AC, 7A Max., 50/60 Hz
Power supply	(2) Hot-swappable 150W CRPS
Supported voltage range	100–240V AC
Max. power consumption	82W
ESD/EMP protection	Air: ± 8kV, contact: ± 4kV
LCM display	(1) 1.3" touchscreen
Button	Factory reset
Ambient operating temperature	0 to 40° C (22 to 104° F)
Ambient operating humidity	5 to 95% noncondensing
Certifications	CE, FCC, IC
Gateway Features
Performance	Redundant WAN with failover and load balancing WiFi QoS with UniFi APs Application, domain, and country-based QoS Application and device type identification Additional internet failover with LTE Backup Internet quality and outage reporting
Next-generation security	Application-aware firewall rules Signature-based IPS/IDS threat detection Content, country, domain, and ad filtering VLAN/subnet-based traffic segmentation Full stateful firewall
Advanced networking	License-free SD-WAN WireGuard, L2TP and OpenVPN server OpenVPN client OpenVPN and IPsec site-to-site VPN One-click Teleport and Identity VPN Policy-based WAN and VPN routing DHCP relay Customizable DHCP server IGMP proxy IPv6 ISP support
Capacity
UniFi devices	500+
Client devices	5,000+
Concurrent sessions	1 million
New sessions / sec	71,000
SSL/TLS inspection concurrent sessions	10,000 ^{Limiting to 5,000 concurrent sessions is recommended if the gateway is passing significant traffic. This can be achieved by restricting which VLANs and domains pass through NeXT AI Inspection, such as only including search engine and LLM queries on employee devices. Learn more.}
IDS/IPS signatures	80,000+ ^{With Enhanced Threat Updates. Learn more.}
Routing Throughput
Firewall	23.5 Gbps
IDS/IPS	12.5 Gbps
^{Measured with iPerf3 on DHCP WAN. Performance may be reduced with PPPoE depending on ISP implementation.}
VPN Server Single User Throughput
UniFi Identity	1.2 Gbps
Teleport	1.2 Gbps
WireGuard	1.2 Gbps
OpenVPN	210 Mbps
L2TP	280 Mbps
^{Measured with iPerf3.}
Site-to-Site VPN Single Tunnel Throughput
Site Magic	1.1 Gbps
OpenVPN	120 Mbps
IPsec	580 Mbps
^{Measured with iPerf3.}
VPN Client Single Tunnel Throughput
WireGuard	980 Mbps
OpenVPN	180 Mbps
^{Measured with iPerf3.}
LEDs
Ethernet	White: Link/activity
SFP+	White: Link/activity
CRPS	Off: No AC power present Steady white: AC power and DC output active Flashing white: AC power present Steady red: AC power lost/failure events Flashing red: Warning events
Software
Mobile app	UniFi iOS™:Version 10.16.2 and later UniFi Android™: Version 10.17.2 and later