Ubiquiti UniFi Enterprise Fortress Gateway

Ubiquiti UniFi Enterprise Fortress Gateway

25G Cloud Gateway with 500+ UniFi device / 5,000+ client support, 12.5 Gbps IPS routing, and complete high availability.

Features

• Runs UniFi Network for full-stack network management
• Shadow Mode High Availability with automatic failover provides uninterrupted connectivity (VRRP)*
• 12.5 Gbps routing with IDS/IPS
• License-free, real-time inspection of encrypted packets with NeXT AI Inspection (SSL/TLS decryption)
• 2x 25G SFP28**, 2x 10G SFP+** and 2x 2.5 GbE RJ45 ports (two interfaces remappable to WAN)
• 2x included hot-swap PSUs for power redundancy
• 1.3" touchscreen
• Please Note: *Requires UniFi OS 4.0 and later. Must be paired with another EFG.
• Please Note: **Pair with an official SFP28 Module, SFP+ Module, or SFP+ to RJ45 Adapter for the best experience.

Technical Specification

Processor: 18-core ARM v8.2 at 2 GHz

System memory: 16 GB DDR4 DIMM

Management interface: Ethernet, Bluetooth

Networking interface

• 2x 25G SFP28 ports
• 2x 10G SFP+ ports
• 2x 2.5 GbE RJ45 ports
• Map any 2x interfaces to WAN

Power method: 1x Universal AC input, 100 – 240V AC, 7A Max., 50/60 Hz

Power supply: 2x Hot-swappable 150W CRPS

Supported voltage range: 100 – 240V AC

Max. power consumption: 82W

ESD/EMP protection Air: ± 8kV, contact: ± 4kV

LCM display: 1x 1.3" touchscreen

Button: Factory reset

Capacity

UniFi devices: 500+

Client devices: 5,000+

Concurrent sessions: 1 million

New sessions / sec: 71,000

SSL/TLS inspection concurrent sessions: 10,000

• Limiting to 5,000 concurrent sessions is recommended if the gateway is passing significant traffic. This can be achieved by restricting which VLANs and domains pass through NeXT AI Inspection, such as only including search engine and LLM queries on employee devices. Learn more.

IDS/IPS signatures: 80,000+ (With Enhanced Threat Updates.)

Routing Throughput

Firewall: 23.5 Gbps

IDS/IPS: 12.5 Gbps

• Measured with iPerf3 on DHCP WAN. Performance may be reduced with PPPoE depending on ISP implementation.