UBIQUITI ENTERPRISE FORTRESS GATEWAY

Get notified when back in stock

Part#: Not Specified

Manufacturer SKU: Not Specified

Brand: Ubiquiti Inc

Warranty: 1-year Lin Haw warranty

This item is a special order; please contact your account manager for inquiries.

Special order items and packages are final sale, no exchanges or refunds.

25G Cloud Gateway

with 500+ UniFi device / 5,000+ client support, 12.5Gbps IPS routing, and complete high availability.

Note: Shadow Mode High Availability with automatic failover (VRRP) requires UniFi OS 4.0 and later. Must be paired with another EFG.

Features:

Runs UniFi Network for full-stack network management
Shadow Mode High Availability with automatic failover provides uninterrupted connectivity (VRRP)*
12.5 Gbps routing with IDS/IPS
License-free, real-time inspection of encrypted packets with NeXT AI Inspection (SSL/TLS decryption)
(2) 25G SFP28**, (2) 10G SFP+**, and (2) 2.5 GbE RJ45 ports (two interfaces remappable to WAN)
(2) included hot-swap PSUs for power redundancy
1.3" touchscreen
Includes 90 days of Professional Phone Support ***

*Requires UniFi OS 4.0 and later. Must be paired with another EFG.
**Pair with an official SFP28 Module, SFP+ Module, or SFP+ to RJ45 Adapter for the best experience.
***Available in the United States, Canada, Europe, and the United Kingdom.

ONLINE QUICK INSTALLATION GUIDE

Specifications:

Overview

Specification	Details
Model	Enterprise Fortress Gateway (EFG)
Dimensions	442.4 × 43.7 × 325 mm (17.4 × 1.7 × 12.8")
Form Factor	1U Rack mount
UniFi Application Suite	Network ✓
Managed UniFi Devices	500+
Simultaneous Users Connected	5,000+
Max. WAN Port Count	5
Default WAN Ports	(1) 25G SFP28, (1) 2.5 GbE RJ45
Port Layout	2x 2.5 GbE RJ45, 2x 10 GbE SFP+, 2x 25 GbE SFP28
IDS/IPS Throughput	12.5 Gbps
Capacity	SSL/TLS Inspection Session‑Capable: 10,000<br>Concurrent Sessions: 1 Million<br>New Sessions/sec: 71,000
Form Factor	Rack mount (1U)
Redundancy	Shadow Mode (VRRP) Gateway Failover, 2 × Hot-Swappable PSUs

Security & VPN

Feature / Protocol	Supported
Stateful Firewall	✓
Layer 7 Application-Aware Firewall	✓
SSL Inspection & URL Filtering	✓
DPI & Traffic Identification	✓
Zone-Based Firewall	✓
Content Filtering	✓
Intrusion Prevention (IPS/IDS)	✓
Ad Blocking	✓
IDS/IPS Signatures	95,000+ (CyberSecure Enterprise)
VLAN/Subnet Traffic Segmentation	✓
License-Free SD-WAN	✓
Site-to-Site VPN (Site Magic, IPsec, OpenVPN, WireGuard, L2TP)	✓
VPN Server (Teleport, Identity, OpenVPN, WireGuard, L2TP)	✓
Teleport One‑Click VPN	✓
VPN Single-User Throughput	Identity/Teleport/WireGuard: 1.2 Gbps; OpenVPN: 210 Mbps; L2TP: 280 Mbps
Site-to-Site VPN Throughput	Site Magic: 1.1 Gbps; OpenVPN: 120 Mbps; IPsec: 580 Mbps
VPN Client Throughput	WireGuard: 980 Mbps; OpenVPN: 180 Mbps

Networking

Feature	Supported
Multi-WAN Load Balancing	✓
VRRP (Shadow Mode High Availability)	✓
Dynamic Routing (OSPF, BGP)	✓
Advanced QoS	✓
mDNS	✓
Advanced NAT (SNAT, DNAT, NAT Pooling, etc.)	✓
Integrated RADIUS + RadSec	✓
LTE Backup Failover	✓
Outage Reporting	✓
Policy-Based WAN/VPN Routing	✓
Custom DHCP Server & Relay	✓
IPv6 ISP Support	✓
IGMP Proxy	✓

Hardware

Specification	Details
Max. Power Consumption	82 W
Power Method	Universal AC 100–240 V, 7 A, 50/60 Hz
Power Supply	2 × Hot-Swappable 150 W CRPS
Supported Voltage Range	100–240 V AC
Processor	18‑core ARM® v8.2 @ 2 GHz
System Memory	16 GB DDR4 DIMM
Weight	6.5 kg (14.3 lb)
Enclosure	Aluminium CNC and SGCC steel
Display	1.3" Touchscreen LCM
Management Interfaces	Ethernet, Bluetooth
LEDs	Ethernet, SFP+, CRPS status indicators
Button	Factory Reset
ESD/EMP Protection	Air: ±8 kV, Contact: ±4 kV
Operating Temp / Humidity	0–40 °C, 5–95% non-condensing
NDAA Compliant	✓
Certifications	CE, FCC, IC

Software Requirements

Application	Minimum Version
Mobile App	iOS 10.16.2+; Android 10.17.2+