All equipment specifications
UniFi Cloud Gateways
EFG

Enterprise Firewall

25G Cloud Gateway with 500+ UniFi device / 5,000+ client support, 12.5 Gbps IPS routing, and complete high availability.

Ask us about this product
Enterprise Firewall product photo

Overview

Dimensions
442.4 x 43.7 x 325 mm (17.4 x 1.7 x 12.8")
UniFi Application Suite
  • Network
Managed UniFi Devices
500+
Simultaneous Users Connected
5,000+

Performance may be degraded with advanced gateway features (e.g., Traffic Identification)

Max. WAN Port Count
5
Default WAN Ports
(1) 25G SFP28 (1) 2.5 GbE RJ45
Port Layout
  • 2.5 GbE RJ45: 2 (2.5G/1G/100M/10M)
  • 10G SFP+: 2 (10G/1G)
  • 25G SFP28: 2 (25G/10G/1G)
IDS/IPS Throughput
12.5 Gbps
Capacity
  • SSL/TLS Inspection Concurrent Sessions: 10,000
  • Concurrent Sessions: 10 Million
  • New Sessions / Second: 71,000
Form Factor
Rack mount (1U)
Redundancy
Shadow Mode (VRRP) Gateway Failover (2) Hot-Swappable PSUs

Security

Stateful Firewall
Yes
Application-Aware Layer 7 Firewall
Yes
SSL Inspection & URL Filtering
Yes
DPI & Traffic Identification
Yes
Zone-Based Firewall Advanced Filtering (Regions, Domains, Apps)
Yes
Content Filtering
Yes
Intrusion Prevention (IPS/IDS)
Yes
Ad Blocking
Yes
IDS/IPS Signatures
95,000+ with CyberSecure Enterprise
VLAN/Subnet-based Traffic Segmentation
Yes

VPN & SD-WAN

License-Free SD-WAN
Yes
Site-to-Site VPN
  • Site Magic
  • IPsec
  • OpenVPN
VPN Server
  • Identity Endpoint One-Click VPN
  • Teleport Zero-Configuration VPN
  • WireGuard
  • OpenVPN
  • L2TP
VPN Client
  • OpenVPN
  • WireGuard
VPN Server Single User Throughput
  • Identity Endpoint One-Click VPN: 1.2 Gbps
  • Teleport: 1.2 Gbps
  • WireGuard: 1.2 Gbps
  • OpenVPN: 210 Mbps
  • L2TP: 280 Mbps
Site-to-Site VPN Single Tunnel Throughput
  • Site Magic: 1.1 Gbps
  • OpenVPN: 120 Mbps
  • IPsec: 580 Mbps
VPN Client Single Tunnel Throughput
  • WireGuard: 980 Mbps
  • OpenVPN: 180 Mbps

Networking

Multi-WAN Load Balancing
Yes
Shadow Mode (VRRP) High Availability
Yes
LACP Port Aggregation
Yes
Dynamic Routing
  • OSPF
  • BGP
Advanced QoS
Yes
Multicast DNS (mDNS)
Yes
Advanced NAT (SNAT / DNAT / Masquerade / NAT Pooling / 1-to-1 NAT)
Yes
Integrated RADIUS Server
Yes
RADIUS over TLS (RadSec)
Yes
Additional Internet Failover with UniFi LTE Backup
Yes
Internet Quality and Outage Reporting
Yes
Policy-based WAN and VPN Routing
Yes
Customizable DHCP Server
Yes
IPv6 ISP Support
Yes
IGMP Proxy
Yes
All Traffic Flows
Yes

Hardware

Max. Power Consumption
82W
Power Method
Universal AC input, 100–240V AC, 7A Max., 50/60 Hz
Power Supply
(2) Hot-swappable 150W CRPS
Supported Voltage Range
100–240V AC
Heat Dissipation
280 BTU/hr
Processor
18-core ARM® v8.2 at 2 GHz
Weight
6.5 kg (14.3 lb)
Enclosure Material
Aluminium CNC, SGCC steel
LCM Display
1.3" touchscreen
Management
Ethernet Bluetooth
LEDs
  • Ethernet
  • SFP+
Button
(1) Factory reset
ESD/EMP Protection
Air: ± 8kV, contact: ± 4kV
Ambient Operating Temperature
0 to 40° C (32 to 104° F)
Ambient Operating Humidity
5 to 95% noncondensing
NDAA Compliant
Yes
Certifications
CE, FCC, IC, Anatel: 06375-24-08356, SRRC

Software

Application Requirements
  • Mobile App: UniFi iOS™:Version 10.16.2 and later UniFi Android™: Version 10.17.2 and later

Specifications are provided by the manufacturer and may change without notice. Supplied, installed and supported by Ark Assist.

Want to know what this would cost?

Put your numbers into the calculator and you'll have a figure in a minute, no email address needed. Or ring us and we'll tell you straight whether we can help.