Ubiquiti UniFi Enterprise Fortress Gateway is a high-performance 25G cloud gateway designed for large-scale enterprise networks. It supports over 500 UniFi devices and 5,000+ clients, delivering fast, secure, and scalable connectivity.

• Supports 500+ UniFi devices and 5,000+ clients

• 25 Gbps routing performance with 12.5 Gbps IDS/IPS throughput

• Built-in SSL/TLS decryption with NeXT AI Inspection for deep packet inspection

• Runs UniFi Network for full-stack management with no license fees

• Application-aware firewall for traffic control by app, domain, or IP

• Shadow Mode with VRRP for High Availability and automatic failover

• Dual hot-swappable 150W power supplies for power redundancy

• (2) 25G SFP28, (2) 10G SFP+, and (2) 2.5G RJ45 ports (any two can be WAN)

• 1.3" touchscreen for system monitoring and alerts

• Multi-WAN support with load balancing and failover modes

• Advanced VPN options including WireGuard, Teleport, OpenVPN, and IPsec

• Built for maximum uptime and security in demanding enterprise environments

• Deal registration required for purchase

Specifications

Mechanical
Dimensions: 442.4 x 43.7 x 325 mm (17.4 x 1.7 x 12.8")
Weight: 6.5 kg (14.3 lb)
Enclosure material: Aluminium CNC, SGCC steel

Hardware
Processor: 18-core ARM v8.2 at 2 GHz
System memory: 16 GB DDR4 DIMM
Management interface: Ethernet, Bluetooth
Networking interface: (2) 25G SFP28 ports, (2) 10G SFP+ ports, (2) 2.5 GbE RJ45 ports (Map any 2 to WAN)
Power method: (1) Universal AC input, 100—240V AC, 7A Max., 50/60 Hz
Power supply: (2) Hot-swappable 150W CRPS
Supported voltage range: 100–240V AC
Max. power consumption: 82W
ESD/EMP protection: Air: ± 8kV, contact: ± 4kV
LCM display: (1) 1.3" touchscreen
Button: Factory reset
Operating temperature: 0 to 40° C (22 to 104° F)
Operating humidity: 5 to 95% noncondensing
Certifications: CE, FCC, IC

Gateway Features

Performance

• Redundant WAN with failover and load balancing

• WiFi QoS with UniFi APs

• Application, domain, and country-based QoS

• Application and device type identification

• Additional internet failover with LTE Backup

• Internet quality and outage reporting

Security

• Application-aware firewall rules

• Signature-based IPS/IDS threat detection

• Content, country, domain, and ad filtering

• VLAN/subnet-based traffic segmentation

• Full stateful firewall

Networking

• License-free SD-WAN

• WireGuard, L2TP, and OpenVPN server

• OpenVPN client

• OpenVPN and IPsec site-to-site VPN

• One-click Teleport and Identity VPN

• Policy-based WAN and VPN routing

• DHCP relay

• Customisable DHCP server

• IGMP proxy

• IPv6 ISP support

Capacity

• UniFi devices: 500+

• Client devices: 5,000+

• Concurrent sessions: 1 million

• New sessions per second: 71,000

• SSL/TLS inspection concurrent sessions: 10,000 (limit to 5,000 recommended for high-traffic networks)

• IDS/IPS signatures: 80,000+ (with Enhanced Threat Updates)

Routing Throughput

• Firewall: 23.5 Gbps

• IDS/IPS: 12.5 Gbps

VPN Server Single User Throughput

• UniFi Identity: 1.2 Gbps

• Teleport: 1.2 Gbps

• WireGuard: 1.2 Gbps

• OpenVPN: 210 Mbps

• L2TP: 280 Mbps

Site-to-Site VPN Single Tunnel Throughput

• Site Magic: 1.1 Gbps

• OpenVPN: 120 Mbps

• IPsec: 580 Mbps

VPN Client Single Tunnel Throughput

• WireGuard: 980 Mbps

• OpenVPN: 180 Mbps

LEDs

• Ethernet: White (Link/activity)

• SFP+: White (Link/activity)

• CRPS: Off (No AC power), Steady white (AC power active), Flashing white (AC power present), Steady red (AC power failure), Flashing red (Warning)