Ubiquiti UniFi Enterprise Firewall EFG, 12.5 Gbps IDS/IPS, 500+ Devices, 25G SFP28, 1U Rack

EFG

Condition: NEW

Regular price
Dhs. 7,346.07(exc. Vat)
Regular price
(exc. Vat)
Sale price
Dhs. 7,346.07(exc. Vat)
Shipping calculated at checkout.
    Live stock status

    Confirm Availability & Best Price

    This model is fulfilled through our verified supplier network. Message us for live stock status and pricing.

    Enquire Now
    Genuine Guarantee

    Shop with Confidence: Authentic IT Products from Major Brands.

    Shipping information

    We offer FREE DELIVERY for order over AED 200. Also no additional Cash on Delivery (COD) fee.

    Click here to know more

    Returns information

    No longer required or changed you mind ?

    We have a 7 days return policy

    Click here to know more

    Ubiquiti UniFi Enterprise Firewall EFG, 12.5 Gbps IDS/IPS, 500+ Devices, 25G SFP28, 1U Rack atomoffice
    Ubiquiti UniFi Enterprise Firewall EFG, 12.5 Gbps IDS/IPS, 500+ Devices, 25G SFP28, 1U Rack atomoffice
    Ubiquiti UniFi Enterprise Firewall EFG, 12.5 Gbps IDS/IPS, 500+ Devices, 25G SFP28, 1U Rack atomoffice
    Ubiquiti UniFi Enterprise Firewall EFG, 12.5 Gbps IDS/IPS, 500+ Devices, 25G SFP28, 1U Rack atomoffice

    UniFi Cloud Gateway | 1U Rack Mount

    Ubiquiti UniFi Enterprise Firewall (EFG)

    A 25G Cloud Gateway in a 1U rack-mount chassis that runs UniFi Network for 500+ UniFi devices and 5,000+ clients. Ubiquiti rates IDS/IPS throughput at 12.5 Gbps and lists 10 million concurrent sessions, SSL inspection and URL filtering. Two 25G SFP28, two 10G SFP+ and two 2.5 GbE RJ45 ports, up to 5 WAN ports, and high availability through Shadow Mode (VRRP) gateway failover and two hot-swappable power supplies.

    Routing Speed
    12.5 Gbps with IDS/IPS
    Managed Devices
    500+ UniFi devices, 5,000+ clients
    WAN Interface
    25G SFP28 + 2.5 GbE, up to 5 WAN
    Processor
    18-core ARM v8.2 at 2 GHz
    Form Factor
    Rack mount (1U)

    12.5 Gbps IDS/IPS with SSL inspection

    Ubiquiti rates IDS/IPS throughput at 12.5 Gbps, with 95,000+ IDS/IPS signatures with CyberSecure Enterprise. It adds SSL inspection and URL filtering (10,000 concurrent SSL/TLS inspection sessions), a stateful and application-aware Layer 7 firewall, DPI, zone-based filtering by region, domain and app, content filtering and ad blocking.

    25G ports, multi-WAN and high availability

    Two 25G SFP28, two 10G SFP+ and two 2.5 GbE RJ45 ports, with one 25G SFP28 and one 2.5 GbE RJ45 as the default WAN ports and up to 5 WAN ports in total. Shadow Mode (VRRP) gateway failover, LACP port aggregation, multi-WAN load balancing and two hot-swappable 150W CRPS power supplies.

    Site-to-site VPN, SD-WAN and session capacity

    License-free SD-WAN, Site Magic, IPsec and OpenVPN site-to-site links, and WireGuard, OpenVPN, L2TP, Teleport and Identity Endpoint VPN servers, with up to 1.2 Gbps single-user VPN throughput. Ubiquiti lists 10 million concurrent sessions, 71,000 new sessions per second and OSPF and BGP dynamic routing.

    ProductEnterprise Firewall
    Part NumberEFG
    UniFi Application Suite / NetworkYes
    Managed UniFi Devices500+
    Simultaneous Users Connected5,000+ (Performance may be degraded with advanced gateway features (e.g., Traffic Identification))
    IDS/IPS Throughput12.5 Gbps
    SSL/TLS Inspection Concurrent Sessions10,000
    Concurrent Sessions10 Million
    New Sessions / Second71,000
    Form FactorRack mount (1U)
    RedundancyShadow Mode (VRRP) Gateway Failover, (2) Hot-Swappable PSUs
    Dimensions442.4 x 43.7 x 325 mm (17.4 x 1.7 x 12.8")
    Default WAN Ports(1) 25G SFP28, (1) 2.5 GbE RJ45
    Max. WAN Port Count5
    25G SFP282 (25G/10G/1G)
    10G SFP+2 (10G/1G)
    2.5 GbE RJ452 (2.5G/1G/100M/10M)
    Stateful FirewallYes
    Application-Aware Layer 7 FirewallYes
    SSL Inspection & URL FilteringYes
    DPI & Traffic IdentificationYes
    Zone-Based Firewall Advanced Filtering (Regions, Domains, Apps)Yes
    Content FilteringYes
    Intrusion Prevention (IPS/IDS)Yes
    IDS/IPS Signatures95,000+ with CyberSecure Enterprise
    Ad BlockingYes
    VLAN/Subnet-based Traffic SegmentationYes
    License-Free SD-WANYes
    Site-to-Site VPNSite Magic, IPsec, OpenVPN
    VPN ServerIdentity Endpoint One-Click VPN, Teleport Zero-Configuration VPN, WireGuard, OpenVPN, L2TP
    VPN ClientOpenVPN, WireGuard
    Policy-based WAN and VPN RoutingYes
    VPN Server Single User Throughput / Identity Endpoint One-Click VPN1.2 Gbps
    VPN Server Single User Throughput / Teleport1.2 Gbps
    VPN Server Single User Throughput / WireGuard1.2 Gbps
    VPN Server Single User Throughput / OpenVPN210 Mbps
    VPN Server Single User Throughput / L2TP280 Mbps
    Site-to-Site VPN Single Tunnel Throughput / Site Magic1.1 Gbps
    Site-to-Site VPN Single Tunnel Throughput / OpenVPN120 Mbps
    Site-to-Site VPN Single Tunnel Throughput / IPsec580 Mbps
    VPN Client Single Tunnel Throughput / WireGuard980 Mbps
    VPN Client Single Tunnel Throughput / OpenVPN180 Mbps
    Multi-WAN Load BalancingYes
    Shadow Mode (VRRP) High AvailabilityYes
    LACP Port AggregationYes
    Dynamic RoutingOSPF, BGP
    Advanced QoSYes
    Multicast DNS (mDNS)Yes
    Advanced NAT (SNAT / DNAT / Masquerade / NAT Pooling / 1-to-1 NAT)Yes
    Integrated RADIUS ServerYes
    RADIUS over TLS (RadSec)Yes
    Additional Internet Failover with UniFi LTE BackupYes
    Internet Quality and Outage ReportingYes
    Customizable DHCP ServerYes
    IPv6 ISP SupportYes
    IGMP ProxyYes
    All Traffic FlowsYes
    Processor18-core ARM® v8.2 at 2 GHz
    LCM Display1.3" touchscreen
    ManagementEthernet, Bluetooth
    LEDsEthernet, SFP+
    Button(1) Factory reset
    Enclosure MaterialAluminium CNC, SGCC steel
    Weight6.5 kg (14.3 lb)
    ESD/EMP ProtectionAir: ± 8kV, contact: ± 4kV
    Ambient Operating Temperature0 to 40° C (32 to 104° F)
    Ambient Operating Humidity5 to 95% noncondensing
    NDAA CompliantYes
    CertificationsCE, FCC, IC, Anatel: 06375-24-08356, SRRC
    Mobile App RequirementsUniFi iOS: Version 10.16.2 and later; UniFi Android: Version 10.17.2 and later
    Power MethodUniversal AC input, 100–240V AC, 7A Max., 50/60 Hz
    Power Supply(2) Hot-swappable 150W CRPS
    Supported Voltage Range100–240V AC
    Max. Power Consumption82W
    Heat Dissipation280 BTU/hr

    Specifications are from Ubiquiti's official technical specifications for the UniFi Enterprise Firewall (EFG). Device, client, session and throughput figures are Ubiquiti's figures; real performance depends on the traffic and features in use.

    • Shadow Mode high availability with automatic failover (VRRP) requires UniFi OS 4.0 and later, and the EFG must be paired with another EFG. A single unit does not fail over on its own.
    • Ubiquiti quotes 5,000+ simultaneous users and notes that performance may be degraded with advanced gateway features such as Traffic Identification.
    • The 95,000+ IDS/IPS signature figure is Ubiquiti's figure with CyberSecure Enterprise. Additional internet failover uses a separate UniFi LTE Backup device.
    • Ubiquiti's specification lists no built-in wireless radio and no PoE output for this gateway. SFP28 and SFP+ modules or cables are not listed as included.
    • Power is universal AC input, 100–240V AC, through two hot-swappable 150W CRPS power supplies. Ubiquiti does not state the mains plug or power cord type.
    • The UniFi mobile app needs UniFi iOS 10.16.2 or later, or UniFi Android 10.17.2 or later.
    • One 1U unit combines the firewall, IDS/IPS, VPN server, SD-WAN and UniFi Network controller.
    • No licence needed for SD-WAN, site-to-site VPN or the VPN servers Ubiquiti lists.
    • Two hot-swappable power supplies and Shadow Mode (VRRP) failover keep the gateway available.
    • Status and setup on the 1.3" touchscreen, with management over Ethernet or Bluetooth.
    Large offices and campuses running 500+ UniFi devices
    Enterprises that need gateway failover with a second EFG
    Multi-site businesses linking branches over site-to-site VPN
    Data rooms with 25G or 10G fibre uplinks

    Ubiquiti rates the EFG for 500+ managed UniFi devices and 5,000+ simultaneously connected users, and notes that performance may be degraded with advanced gateway features such as Traffic Identification. It lists 10 million concurrent sessions and 71,000 new sessions per second.

    Ubiquiti lists IDS/IPS throughput of 12.5 Gbps. The default WAN ports are one 25G SFP28 and one 2.5 GbE RJ45, and the maximum WAN port count is 5.

    Yes, through Shadow Mode (VRRP) high availability. Ubiquiti states that Shadow Mode with automatic failover requires UniFi OS 4.0 and later and that the EFG must be paired with another EFG. The unit also has two hot-swappable 150W CRPS power supplies.

    Site-to-site VPN with Site Magic, IPsec and OpenVPN; VPN servers for Identity Endpoint one-click VPN, Teleport, WireGuard, OpenVPN and L2TP; and OpenVPN and WireGuard VPN clients. Ubiquiti lists 1.2 Gbps single-user throughput for WireGuard, Teleport and Identity Endpoint, and 1.1 Gbps for a single Site Magic tunnel.

    No wireless radio appears in Ubiquiti's specification for the EFG. It is a wired rack-mount gateway; add UniFi access points for wireless and manage them from the same UniFi Network application.

    Sizing a gateway for a large UniFi site?

    Tell us your device count, users, internet lines and uplink speeds and we will confirm whether the Enterprise Firewall fits, or suggest the right UniFi gateway.