Overview
Overview
The Ubiquiti UniFi Gateway Enterprise is the most powerful gateway in the UniFi lineup — a 1U rack-mount enterprise router and security appliance built for large campuses, multi-site organisations, and high-throughput networks. An 18-core ARM v8.2 processor running at 2 GHz with 16 GB of system memory delivers 12.5 Gbps IDS/IPS throughput, support for 1 million concurrent sessions, and 71,000 new sessions per second — enough headroom for demanding enterprise traffic without any performance compromise.
Up to five WAN ports (including a 25G SFP28 primary WAN and a 2.5 GbE failover) support multi-WAN load balancing, policy-based routing, and LTE backup via UniFi LTE. Shadow Mode (VRRP) gateway failover and dual hot-swappable 150W PSUs mean the network stays online even if a single gateway fails. NDAA compliant, CE/FCC/IC certified, and managed centrally through the UniFi Network application.
Key highlights
- 12.5 Gbps IDS/IPS throughput — full security inspection at line rate
- 18-core ARM v8.2 processor at 2 GHz, 16 GB RAM
- Up to 5 WAN ports with multi-WAN load balancing and failover
- 25G SFP28 primary WAN port for high-bandwidth ISP connections
- Shadow Mode (VRRP) active-passive gateway failover
- Dual hot-swappable 150W PSUs for continuous uptime
- 1 million concurrent sessions, 71,000 new sessions per second
- 95,000+ IDS/IPS signatures with CyberSecure Enterprise subscription
- License-free SD-WAN, BGP, OSPF, and full VPN suite
- NDAA compliant, CE/FCC/IC certified
Recommended for
- Large enterprise campuses — high-throughput gateway for networks connecting hundreds of APs and thousands of devices
- Multi-site organisations — license-free SD-WAN and Site Magic VPN for secure site interconnects without recurring costs
- Security-conscious deployments — 12.5 Gbps IPS, application-aware L7 firewall, and SSL/TLS inspection at full line rate
- Government & regulated environments — NDAA compliant with RadSec, RADIUS server, and zone-based firewall
Performance
Routing & security throughput
Gateway performance
| IDS/IPS throughput | 12.5 Gbps |
| Concurrent sessions | 1,000,000 |
| New sessions per second | 71,000 |
| SSL/TLS inspection sessions | 10,000 concurrent |
| Processor | 18-core ARM v8.2 at 2 GHz |
| System memory | 16 GB |
VPN throughput
| VPN type | Single tunnel throughput |
|---|---|
| WireGuard (server) | 1.2 Gbps |
| Teleport | 1.2 Gbps |
| Identity Endpoint VPN | 1.2 Gbps |
| L2TP (server) | 280 Mbps |
| OpenVPN (server) | 210 Mbps |
| Site Magic (site-to-site) | 1.1 Gbps |
| IPsec (site-to-site) | 580 Mbps |
| WireGuard (client) | 980 Mbps |
| OpenVPN (client) | 180 Mbps |
Port layout
| 2.5 GbE RJ45 | 2 ports — 2.5G/1G/100M/10M |
| 10G SFP+ | 2 ports — 10G/1G |
| 25G SFP28 | 2 ports — 25G/10G/1G |
| Max WAN ports | 5 (default: 1 × 25G SFP28 + 1 × 2.5 GbE RJ45) |
Features
Security
- Stateful firewall
- Application-aware Layer 7 firewall
- SSL/TLS inspection & URL filtering
- DPI & traffic identification
- Zone-based firewall (regions, domains, apps)
- Content filtering
- Intrusion prevention (IPS/IDS)
- Ad blocking
- 95,000+ IDS/IPS signatures (CyberSecure Enterprise)
VPN & SD-WAN
- License-free SD-WAN
- Site Magic (site-to-site VPN)
- IPsec
- OpenVPN server & client
- WireGuard server & client
- Teleport zero-configuration VPN
- Identity Endpoint one-click VPN
- L2TP VPN server
- Policy-based WAN & VPN routing
Networking
- Multi-WAN load balancing
- Shadow Mode (VRRP) gateway failover
- LACP port aggregation
- Dynamic routing — OSPF
- Dynamic routing — BGP
- Multicast DNS (mDNS)
- Advanced NAT (SNAT/DNAT/1-to-1)
- Integrated RADIUS server
- RADIUS over TLS (RadSec)
- LTE backup (UniFi LTE)
- Internet quality & outage reporting
- Customisable DHCP server
- IPv6 ISP support
- IGMP proxy
Compliance
CE
FCC
IC
Hardware
Physical
| Dimensions | 442.4 × 43.7 × 325 mm (17.4 × 1.7 × 12.8″) |
| Form factor | 1U rack mount |
| Weight | 6.5 kg (14.3 lb) |
| Enclosure | Aluminium CNC, SGCC steel |
| LCM display | 1.3″ touchscreen |
| Management | Ethernet, Bluetooth |
| LEDs | Ethernet, SFP+, CRPS |
| Button | Factory reset |
| ESD/EMP protection | Air: ±8kV, Contact: ±4kV |
Processor & memory
| Processor | 18-core ARM v8.2 at 2 GHz |
| System memory | 16 GB |
Power & redundancy
| Power supply | (2) Hot-swappable 150W CRPS modules |
| Power input | 100–240V AC, 50/60 Hz, 7A max |
| Max power consumption | 82W |
| Heat dissipation | 280 BTU/hr |
| Gateway failover | Shadow Mode (VRRP) |
Environmental
| Operating temperature | 0 to 40°C (32 to 104°F) |
| Operating humidity | 5–95% non-condensing |
In the box
UniFi Gateway Enterprise with rack mount brackets and two hot-swappable 150W CRPS PSU modules. SFP28 and SFP+ transceivers are sold separately.
Software
Managed by UniFi Network
The UXG-Enterprise is fully managed through the UniFi Network application — the same centralised platform that manages UniFi access points, switches, and cameras. Configure firewall rules, VPN tunnels, SD-WAN policies, VLAN routing, and security features from a single interface with no per-device licensing fees. Available as a self-hosted controller or via UniFi Cloud.
Core management capabilities
- Firewall & security management — configure zone-based firewall rules, IPS/IDS policies, content filtering, and SSL inspection from the UniFi dashboard.
- VPN configuration — set up WireGuard, IPsec, OpenVPN, and Teleport VPN tunnels with no additional licensing or third-party software.
- SD-WAN & WAN management — configure multi-WAN load balancing, failover rules, and policy-based routing for up to 5 WAN connections.
- Network segmentation — create VLANs, inter-VLAN routing policies, and traffic isolation rules across the entire campus network.
- Remote monitoring — real-time internet quality monitoring, session tracking, and outage reporting via UniFi Cloud from anywhere.
- Firmware updates — push updates remotely without on-site access.
Requirements
| UniFi Network | Version 8.3.32 or later |
| Hosting | Self-hosted or UniFi Cloud |
| Licensing | None — free with no per-device fees |
Documentation
Downloads & resources
Download the Ubiquiti UniFi Gateway Enterprise installation guide covering rack mounting, port configuration, WAN setup, and first-time setup via UniFi Network.