IDS/IPS throughput
High-capacity uplinks
Enterprise deployment format
Power redundancy
CloudKey, hosting or server
Direct answer for business buyers
The UXG-Enterprise is Ubiquiti’s independent enterprise gateway for high-throughput UniFi Network deployments. It is mainly used to route and secure traffic between internet services, internal networks, remote sites and segmented business environments while being managed from a separate UniFi Network host. It is relevant to organisations with multi-gigabit WAN services, high client counts, significant east-west and north-south traffic, or a requirement for gateway redundancy. Before proceeding, a buyer should confirm controller hosting, realistic security-throughput needs, WAN failover design, SFP28 or SFP+ media, compatible switching, power feeds, VPN expectations, subscriptions and implementation scope.
What the UXG-Enterprise does
It provides the routed edge between internet circuits and business networks, applies firewall and security policies, identifies applications, supports site-to-site and remote-access VPN functions, balances or fails over WAN links, and offers dynamic-routing functions for more complex topologies. Its port set allows 25G, 10G and 2.5G connections, subject to correct transceivers and cabling.
Who should consider it
The model is aimed at larger UniFi environments, central offices, campuses, hospitality groups, schools, healthcare facilities, logistics sites, data-intensive businesses and organisations consolidating multiple WAN links. It is especially relevant where an external UniFi Network management platform already exists or is preferred for operational separation.
Business challenges it can help address
Multi-gigabit internet growth
When internet circuits exceed conventional 1G or 2.5G gateway capacity, the 25G and 10G interfaces provide a path for higher-capacity edge designs. Actual usable performance depends on enabled services, packet profile and topology.
Gateway resilience
Dual hot-swappable power supplies reduce dependence on one PSU, while Shadow Mode can support a paired gateway design. Full resilience still requires suitable upstream circuits, switching, power feeds and tested failover procedures.
Central policy control
UniFi Network management can centralise firewall rules, network segmentation, traffic visibility, routing and site connectivity. The hosting choice should align with the organisation’s administrative, availability and data-governance expectations.
Complex WAN requirements
Multi-WAN load balancing, policy-based routing and failover can help distribute traffic or preserve connectivity during a circuit issue. The routing policy must be designed around application sensitivity, public IP requirements and provider behavior.
Core capabilities at a glance
Product-fit matrix
| Requirement | Suitable when | Confirm before ordering |
|---|---|---|
| High-capacity WAN edge | Internet or inter-site links require 10G or 25G interfaces | ISP handoff, optics, cabling and real security throughput |
| External UniFi management | A CloudKey Enterprise, Official UniFi Hosting or compatible Network Server is planned | Hosting responsibility, backups, updates and access control |
| Gateway high availability | A paired UXG-Enterprise design is required | Second unit, firmware requirements, cabling and failover testing |
| Advanced routing | OSPF, BGP, policy-based routing or complex NAT is needed | Routing design, route ownership and migration plan |
| Enterprise security inspection | IDS/IPS, traffic identification, filtering and encrypted-traffic inspection are required | Performance impact, policy scope and optional CyberSecure subscription |
Verified technical information
| Brand | Ubiquiti |
|---|---|
| Product name | Gateway Enterprise |
| Model | UXG-Enterprise |
| Product type | Independent UniFi enterprise gateway |
| Form factor | 1U rack mount |
| Dimensions | 442.4 × 43.7 × 325 mm |
| Weight | 6.5 kg |
| Port layout | 2 × 25G SFP28, 2 × 10G SFP+, 2 × 2.5 GbE RJ45 |
| Default WAN ports | 1 × 25G SFP28 and 1 × 2.5 GbE RJ45 |
| Maximum WAN port count | 5 |
| IDS/IPS throughput | 12.5 Gbps |
| Concurrent sessions | 1 million |
| New sessions per second | 71,000 |
| SSL/TLS inspection sessions | 10,000 concurrent sessions |
| Processor | 18-core ARM v8.2 at 2 GHz |
| Memory | 16 GB |
| Power supplies | 2 × hot-swappable 150W CRPS |
| Maximum power consumption | 82W |
| Management requirement | UniFi Network 8.3.32 or later, hosted on a supported external platform |
| Operating environment | 0 to 40°C; 5 to 95% non-condensing humidity |
| Certifications | CE, FCC, IC; NDAA compliant |
| Availability | Contact FourTeck to confirm current UAE options, lead time and regional supply |
Management, licensing and compatibility dependencies
The UXG-Enterprise is an independent gateway rather than an all-in-one UniFi cloud gateway. It must be adopted and managed through a supported UniFi Network host, such as CloudKey Enterprise, Official UniFi Hosting or a compatible UniFi Network Server. This architectural choice should be confirmed before procurement because it affects controller availability, administration, backups and operational responsibility.
SFP28 and SFP+ ports require suitable modules, direct-attach cables or adapters. Compatibility depends on link speed, fibre type, connector type, distance, switch interface and vendor support. CyberSecure Enterprise is an optional subscription for expanded signature coverage and should not be assumed to be included with the base appliance. High availability also requires a second compatible gateway and a carefully designed physical topology.
A practical purchase and deployment journey
Define traffic requirements
Document internet circuits, peak traffic, security inspection, VPN use, public services and expected growth.
Select management architecture
Confirm the UniFi Network host, administrative ownership, backup method, access policy and update process.
Build the bill of materials
Choose optics, DACs, patching, rack accessories, power feeds, optional subscriptions and a second gateway where needed.
Plan migration
Map VLANs, routes, NAT, VPNs, firewall policies, public IPs and maintenance-window dependencies.
Test and hand over
Validate routing, failover, policy behavior, remote access, monitoring and rollback before production acceptance.
High-capacity routing without abandoning policy control
A faster internet circuit is useful only when the gateway can route and inspect traffic at a level appropriate to the business workload. The UXG-Enterprise combines high-speed physical interfaces with an official IDS/IPS throughput figure of 12.5 Gbps. This distinction matters: port speed is not the same as inspected throughput. A 25G interface may carry a 25G link, while enabled security functions, traffic patterns, packet sizes and encryption can influence practical performance.
For a buyer, the correct question is not simply whether the appliance has 25G ports. The requirement should be based on peak bidirectional traffic, internet-service design, number of branches, site-to-site flows, public-facing services, backup windows, cloud usage and expected growth. FourTeck can help translate those requirements into a realistic gateway design and identify whether the UXG-Enterprise is appropriately sized or whether another UniFi gateway model should be considered.
Redundancy that must be designed end to end
The appliance includes two hot-swappable power supplies and supports Shadow Mode high availability with VRRP. These capabilities can reduce specific single points of failure, but they do not automatically make the whole edge resilient. A complete design may require separate electrical feeds, appropriate PDUs, redundant upstream switches, diverse WAN services, compatible transceivers, duplicated patch paths and an agreed failover process.
The second gateway must be included in the commercial and technical plan, and the deployment should follow current firmware and topology guidance. The organisation should also decide how state, sessions, public IPs and application behavior will be affected during a failover. Testing is essential. FourTeck can assist with topology review, equipment lists, installation scope and a practical acceptance checklist so that resilience is measured rather than assumed.
Centralised management for complex network operations
Because the UXG-Enterprise is managed externally, the organisation can place the UniFi Network application in a management architecture that suits its operating model. A dedicated CloudKey Enterprise may fit sites that prefer a local hardware controller, while hosted options may suit central teams managing multiple locations. A compatible self-hosted server can provide another approach where infrastructure and application ownership are already established.
This flexibility also creates responsibility. Administrators must consider controller availability, access permissions, multi-factor authentication, backups, patching, certificate management, logging and recovery procedures. The management host should not be treated as an afterthought because the gateway’s policies and operational visibility depend on it. FourTeck can help clarify hosting choices, controller sizing and migration considerations before the gateway is ordered.
Suitable business environments
Large offices and headquarters
For central sites with multi-gigabit internet, segmented departments, significant SaaS traffic, remote-access users and multiple downstream switches.
Education and campus networks
For environments with large client populations, multiple buildings, guest networks, learning systems and high-density wireless infrastructure.
Hospitality and mixed-use properties
For designs separating guest, operational, voice, camera and administration traffic while maintaining central visibility.
Multi-site organisations
For businesses connecting branches, warehouses or service locations through site-to-site VPN or UniFi SD-WAN functions.
Data-intensive operations
For businesses moving large cloud, backup, analytics or content workloads through high-capacity internet and private links.
Managed network platforms
For IT teams or service providers that already operate a separate UniFi Network management environment and need a high-end gateway endpoint.
Integration and operational considerations
The gateway should be evaluated as part of the complete network, not as an isolated appliance. Core and distribution switches must support the intended 10G or 25G uplinks. Fibre type, transceiver compatibility and link distance must be confirmed. VLANs and IP addressing should be documented before migration, especially when replacing a gateway from another vendor.
Dynamic routing can simplify larger environments, but BGP and OSPF require clear route ownership, filtering and failure-domain design. VPN performance varies by protocol, and official single-tunnel figures differ between WireGuard, IPsec, OpenVPN and Site Magic. Buyers should size remote access and site connectivity around the chosen protocol rather than assuming every VPN method performs identically.
Security features must also be configured intentionally. Enabling every function without policy planning can create operational noise or unnecessary inspection. A staged deployment should establish baseline traffic, apply appropriate categories and signatures, define exceptions, and verify the user impact.
Questions to resolve before ordering
Include primary, secondary and future circuits, not only the current service.
Confirm the controller platform, version, ownership and recovery plan.
Specify SFP28, SFP+, RJ45, fibre type, connector and cable distance.
A second gateway and supporting topology must be budgeted.
Define IDS/IPS, SSL inspection, filtering and subscription requirements.
Include rules, routes, NAT, VPN, testing, rollback and documentation.
Procurement checklist
☐ Exact model: UXG-Enterprise
☐ Required quantity and spare strategy
☐ Primary and backup WAN handoffs
☐ Required 25G, 10G and 2.5G port mapping
☐ SFP28 or SFP+ optics, DACs and adapters
☐ Compatible switch and patching design
☐ UniFi Network hosting method and version
☐ CyberSecure Enterprise subscription decision
☐ High-availability pair requirement
☐ Rack space, airflow and ambient conditions
☐ Dual power feeds and PDU availability
☐ Migration, configuration and testing scope
☐ VPN protocols and expected tunnel loads
☐ Delivery destination and project schedule
FourTeck consultation and configuration support
FourTeck can help review bandwidth, interface selection, controller hosting, routing requirements, high availability, security policy, transceivers and migration scope. This can reduce bill-of-material gaps and ensure that installation services are included where required. Explore related network and security services or browse the FourTeck product portfolio.
UAE availability and support guidance
Contact FourTeck to confirm current UAE availability. Supply may depend on quantity, region, vendor lead time and accessory selection. Delivery and project coordination can be discussed after the exact requirement is confirmed. Installation, configuration, migration and testing should be separately defined in the quotation where needed. Use the FourTeck contact page to share your project details.
Dubai, Abu Dhabi, Sharjah and Ajman coverage
FourTeck can coordinate requirement review, quotation preparation, delivery planning and implementation discussions for organisations in Dubai, Abu Dhabi, Sharjah and Ajman. The exact engagement depends on the destination, quantity, network architecture and services requested. Buyers should provide site details, rack and power conditions, existing UniFi controller information, WAN handoff type and preferred deployment schedule. On-site or remote configuration scope, migration windows and support expectations should be confirmed before the commercial offer is finalised.
GCC Availability
FourTeck can assist organisations planning UXG-Enterprise deployments across GCC markets by reviewing the exact gateway requirement, controller architecture, optics, accessories, subscription choices and implementation scope before quotation. Projects in the United Arab Emirates, Saudi Arabia, Kuwait, Qatar, Bahrain and Oman may have different supply routes, lead times, service arrangements and regional considerations. Product availability, licensing, delivery schedules, installation visits and vendor lead times can vary by country, model quantity and project requirement. Share the destination country, required unit count, UniFi Network hosting method, expected bandwidth, deployment location and target schedule so the correct commercial and technical assumptions can be discussed. Regional coordination should also account for rack standards, power feeds, WAN provider handoffs, fibre specifications, import requirements and local project access. FourTeck will provide guidance based on the confirmed scope rather than assuming local inventory or a fixed delivery date. Visit FourTeck Kuwait resources for relevant regional enquiries.
Africa Availability
For African projects, FourTeck can help organisations evaluate the UXG-Enterprise, suitable management hosting, transceivers, power arrangements, optional security subscriptions, migration requirements and support expectations. Availability and fulfilment depend on the destination, unit quantity, license region, shipping plan, vendor lead time and local site conditions. Fibre standards, voltage and rack environment should be confirmed alongside the network design. Buyers should provide the destination country, required quantities, bandwidth objectives, controller platform, installation expectations and preferred deployment schedule so FourTeck can prepare suitable guidance. For East African requirements, organisations can review FourTeck Kenya and FourTeck Uganda. Broader project discussions can also be directed through FourTeck Africa. Local inventory, customs outcomes and nationwide on-site coverage should not be assumed until the scope has been reviewed.
Related options and supporting services
CloudKey Enterprise
A dedicated UniFi Network hosting option to consider where local controller hardware is preferred. Sizing and compatibility should be confirmed.
25G and 10G connectivity
SFP28 modules, SFP+ modules, DACs and adapters must be selected according to switch ports, media and distance.
Gateway high availability
A second UXG-Enterprise and an appropriate network topology are required when Shadow Mode resilience is part of the design.
Installation and migration
Configuration, policy migration, VPN setup, testing and handover can be scoped as professional services.
Why businesses contact FourTeck
Enterprise gateway purchases often involve more than selecting one appliance. Buyers contact FourTeck for requirement clarification, model suitability, controller planning, optics and cable selection, high-availability topology review, bill-of-material guidance, quotation coordination and deployment planning. FourTeck can also help identify the information required for migration, including current firewall rules, routes, NAT, VPNs, VLANs, WAN services and maintenance constraints. This practical preparation helps create a clearer quotation and reduces the risk of missing accessories or services. Learn more about FourTeck or discuss your project through the contact team.
Frequently asked questions
Is the UXG-Enterprise an all-in-one UniFi cloud gateway?
No. It is an independent gateway and requires a supported external UniFi Network management platform such as CloudKey Enterprise, Official UniFi Hosting or a compatible Network Server.
What is the official IDS/IPS throughput?
Ubiquiti lists 12.5 Gbps IDS/IPS throughput. Practical results can vary with enabled services, traffic profile, packet sizes, VPN use and network design.
Does it support 25G connectivity?
Yes. The gateway includes two 25G SFP28 ports. Appropriate SFP28 optics or direct-attach cables and compatible connected equipment are required.
Can it use more than one internet connection?
Yes. It supports multi-WAN load balancing, policy-based routing and failover. The exact interface mapping and ISP behavior should be planned before deployment.
Is high availability included with one unit?
One unit includes redundant hot-swappable power supplies, but Shadow Mode gateway failover requires a second compatible UXG-Enterprise and a suitable topology.
Is a CyberSecure Enterprise subscription mandatory?
It is an optional subscription for expanded security signature coverage. Buyers should confirm whether the standard feature set or the subscription-based service is appropriate.
Which VPN methods are supported?
Supported options include Site Magic, IPsec, OpenVPN, WireGuard, Teleport and L2TP in relevant server, client or site-to-site roles. Performance differs by protocol.
What accessories may be required?
Common requirements include SFP28 or SFP+ transceivers, DACs, fibre patch leads, RJ45 adapters, rack cabling, suitable PDUs and potentially a CloudKey Enterprise.
Can FourTeck help with configuration and migration?
Yes. Configuration, migration, testing, documentation and support scope can be discussed and included in the quotation according to the project requirement.
How do I request current Dubai pricing and availability?
Share the quantity, WAN speeds, controller method, interface requirements, destination, project timing and service scope with FourTeck for a current quotation.
Plan the UXG-Enterprise around your real network
Send FourTeck your bandwidth targets, site count, UniFi management plan, required interfaces, redundancy expectations and implementation scope. The team can help prepare a suitable UAE quotation and deployment approach.
Reviews
There are no reviews yet.