Ubiquiti (UniFi Enterprise) EFG Enterprise Fortress Gateway

Note all orders for this item require Deal Registration approval. Please contact us for details.

Ubiquiti EFG UniFi Enterprise Firewall

The Ubiquiti EFG, also known as the Enterprise Fortress Gateway, combines high-performance routing, advanced network security and integrated UniFi Network management in a 1U rackmount appliance. With 25G connectivity, up to 12.5 Gbps IDS/IPS throughput and support for 500+ UniFi devices and 5,000+ connected users, it suits large business and campus networks.

25G Connectivity for Demanding Networks

Two 25G SFP28 ports, two 10G SFP+ ports and two 2.5GbE RJ45 ports provide flexible connections for internet services and network infrastructure. LAN/WAN remapping allows installers to configure interfaces around the deployment rather than a fixed port arrangement.

For compatible rack equipment, Ubiquiti’s optional 25G Direct Attach Cables provide a practical connection between SFP28 interfaces. Choose cables or optical modules to match the required distance and equipment at both ends.

Integrated UniFi Network Management

The EFG runs UniFi Network directly, combining gateway configuration with management of compatible UniFi switches and access points. A separate CloudKey or externally hosted Network application is unnecessary.

This makes the EFG a practical foundation for larger UniFi installations where administrators want routing, security policies and network management on one appliance.

Intrusion Prevention and Encrypted Traffic Inspection

Rated IDS/IPS throughput of 12.5 Gbps provides capacity for inspecting traffic on fast internet connections. SSL/TLS inspection adds visibility into supported encrypted traffic, while application-aware policies help administrators control network use.

The published IDS/IPS figure is a performance rating, rather than a guarantee for every configuration. Size the deployment around its traffic profile and enabled security services; 25G interface speed does not imply 25 Gbps inspected throughput.

Gateway Failover and Redundant Power

Shadow Mode high availability allows two EFG appliances to operate as a gateway failover pair using VRRP. A second EFG is purchased separately, and automatic failover requires UniFi OS 4.0 or later.

Two included hot-swappable power supplies add power redundancy within each appliance. Connecting them to separate suitable power sources can help reduce exposure to a single power-feed failure.

Multi-WAN, VPN and Network Segmentation

Multi-WAN load balancing and policy-based routing help administrators direct traffic across available connections. VLAN segmentation and zone-based firewall policies support separation of staff, guest and operational networks.

Site Magic, IPsec and OpenVPN provide site-to-site connectivity options, with WireGuard and Teleport available for remote access. OSPF and BGP support more complex routing designs.

EFG or UXG-Enterprise?

Both models offer 25G connectivity and a published 12.5 Gbps IDS/IPS rating. The key purchasing distinction is management: choose the EFG for its built-in UniFi Network application, or consider the UXG-Enterprise when the gateway will be managed by a separate UniFi Network installation.

Technical Specifications