Enterprise Fortress Gateway
25G Cloud Gateway with support for 500+ UniFi devices / 5,000+ clients, 12.5 Gbps IPS routing and full high availability.
- Runs UniFi Network for full-stack network management
- Shadow Mode High Availability with automatic failover provides uninterrupted connectivity (VRRP)*
- 12.5 Gbps routing with IDS/IPS
- License-free, real-time inspection of encrypted packets with NeXT AI Inspection (SSL/TLS decryption)
- (2) 25G SFP28**, (2) 10G SFP+**, and (2) 2.5 GbE RJ45 ports (all LAN/WAN remappable)
- (2) included hot-swap PSUs for power redundancy
- 1.3” touch screen
- Includes 90 days of professional telephone support ***
- *Requires UniFi OS 4.0 and higher. Must be paired with another EFG.
- **Pair with an official SFP28 module, SFP+ module or SFP+ to RJ45 adapter for the best experience.
- ***Available in the United States, Canada, Europe and the United Kingdom.
| Mechanical |
| Dimensions |
442.4 x 43.7 x 325 mm (17.4 x 1.7 x 12.8") |
| Weight |
6.5kg (14.3lb) |
| Housing material |
Aluminum CNC, SGCC steel |
| Hardware |
| Processor |
18-core ARM® v8.2 at 2 GHz |
| System memory |
16GB DDR4 DIMM |
| Management interface |
|
| Network interface |
- LAN:
(1) 25G SFP28 port
(2) 10G SFP+ ports
(1) 2.5G RJ45 port
- WAN:
(1) 25G SFP28 port
(1) 2.5G RJ45 port
|
| Power method |
(1) Universal AC input, 100-240 VAC, 7 A max., 50/60 Hz |
| Power supply |
(2) Hot swappable 150W CRPS |
| Supported voltage range |
100-240V AC |
| Max. power consumption |
82W |
| ESD/EMP protection |
Air: ± 8kV, contact: ± 4kV |
| LCM display |
(1) 1.3" touch screen |
| Knob |
Factory reset |
| Ambient temperature |
0 to 40° C (22 to 104° F) |
| Relative air humidity |
5 to 95% non-condensing |
| Certifications |
CE, FCC, IC |
| Gateway Features |
| Performance |
- Redundant WAN with failover and load balancing
- WiFi QoS with UniFi APs
- QoS based on applications, domains and countries
- Application and device type identification
- Additional internet failover with LTE Backup
- Reporting on internet quality and outages
|
| Next generation security |
- Application-aware firewall rules
- Signature-based detection of IPS/IDS threats
- Filter by content, country, domain and ads
- VLAN/subnet-based traffic segmentation
- Full stateful firewall
|
| Advanced networking |
- SD-WAN without license
- WireGuard, L2TP and OpenVPN server
- OpenVPN client
- OpenVPN and IPsec site-to-site VPN
- Teleport and Identity VPN with one click
- Policy-based WAN and VPN routing
- DHCP relay
- Customizable DHCP server
- IGMP proxy
- IPv6 ISP support
|
| Capacity |
| UniFi devices |
500+ |
| Client devices |
5,000+ |
| Simultaneous sessions |
1 million |
| New sessions / sec |
71,000 |
| SSL/TLS inspection concurrent sessions |
10,000
Limiting to 5,000 concurrent sessions is recommended if the gateway has high traffic volumes. This can be accomplished by limiting which VLANs and domains go through NeXT AI Inspection, such as only including search engine and LLM queries on employee devices. More information. |
| IDS/IPS signatures |
80,000+
With Enhanced Threat Updates. |
Measured with iPerf3 on DHCP WAN. Performance may be lower with PPPoE depending on the ISP implementation.
| Transit routing |
| Firewall |
23.5 Gbps |
| IDS/IPS |
12.5Gbps |
Measured with iPerf3.
| VPN server throughput for single user |
| UniFi Identity |
1.2Gbps |
| Teleport |
1.2Gbps |
| WireGuard |
1.2Gbps |
| OpenVPN |
210Mbps |
| L2TP |
280Mbps |
Measured with iPerf3.
| Site-to-site VPN single tunnel transit |
| Site Magic |
1.1Gbps |
| OpenVPN |
120Mbps |
| IP sec |
580Mbps |
Measured with iPerf3.
| VPN client single tunnel transit |
| WireGuard |
980Mbps |
| OpenVPN |
180Mbps |
| LEDs |
| Ethernet |
White: Link/activity |
| SFP+ |
White: Link/activity |
| CRPS |
- Off: no mains power available
- Solid white: AC power and DC output active
- Flashing white: AC power present
- Solid red: AC power lost/fault events
- Flashing red: Warning events
|
| Software |
| Mobile app |
- UniFi iOS™: version 10.16.2 and later
- UniFi Android™: Version 10.17.2 and later
|
