



UniFi Gateway | 1U Rack Mount
Ubiquiti UniFi Gateway Enterprise (UXG-Enterprise)
A 25G independent gateway for large UniFi networks, with 12.5 Gbps routing with IDS/IPS, multi-WAN load balancing across up to 5 WAN ports and two included hot-swap power supplies. Shadow Mode high availability gives automatic gateway failover. As an independent gateway it is managed with a CloudKey, Official UniFi Hosting or UniFi OS Server running UniFi Network 8.3.32 and later.
Quick Glance
Key Features
12.5 Gbps IDS/IPS routing and encrypted-traffic inspection
Ubiquiti rates IDS/IPS throughput at 12.5 Gbps with 95,000+ signatures with CyberSecure Enterprise, 10 Million concurrent sessions and 71,000 new sessions per second. License-free NeXT AI Inspection decrypts SSL/TLS for real-time inspection of encrypted packets, for up to 10,000 concurrent SSL/TLS inspection sessions.
25G multi-WAN with Shadow Mode failover
Two 25G SFP28, two 10G SFP+ and two 2.5 GbE RJ45 ports, with one 25G SFP28 and one 2.5 GbE RJ45 as default WAN and up to 5 WAN ports for multi-WAN load balancing. Shadow Mode (VRRP) high availability with automatic gateway failover, LACP port aggregation and OSPF and BGP dynamic routing.
Dual hot-swap PSUs in a 1U rack unit
Two hot-swappable 150W CRPS power supplies are included for power redundancy, on universal 100–240V AC input with 82W maximum power consumption. An 18-core ARM v8.2 processor at 2 GHz with 16 GB memory, a 1.3" touchscreen, and an aluminium CNC and SGCC steel 1U enclosure weighing 6.5 kg.
Detailed Specifications
Specifications are from Ubiquiti's official technical specifications and store listing for the UniFi Gateway Enterprise (UXG-Enterprise). Throughput and session figures are Ubiquiti's ratings; real performance depends on the traffic and features in use.
Need-to-Know
- This is an independent gateway: it does not run the UniFi Network application itself. Ubiquiti states it is managed with a CloudKey, Official UniFi Hosting or UniFi OS Server running UniFi Network 8.3.32 and later.
- NeXT AI Inspection (SSL/TLS decryption) and All Traffic Flows need management by a UniFi OS Server, CloudKey Enterprise or Official UniFi Hosting. Teleport VPN is available on the Default site when paired with a CloudKey.
- The SFP28 and SFP+ ports need modules or cables. Ubiquiti recommends an official SFP28 module, SFP+ module or SFP+ to RJ45 adapter and lists none with the unit.
- Two hot-swappable 150W CRPS power supplies are included, per Ubiquiti. The unit runs on universal AC input (100–240V AC, 50/60 Hz); Ubiquiti does not state the power cord or plug type.
- VPN throughput figures are Ubiquiti's single-user and single-tunnel numbers; total throughput with many users or tunnels is not stated.
Best For / Customer Benefits
Customer Benefits
- Two hot-swap power supplies in the box and Shadow Mode failover keep the network up through a PSU or gateway fault.
- License-free SD-WAN, site-to-site VPN and NeXT AI Inspection, with no per-feature licence listed by Ubiquiti.
- 25G SFP28 and 10G SFP+ ports connect straight to fibre internet and core switching.
- A 1.3" touchscreen on the 1U front panel for on-site status and setup.
Best For
Frequently Asked Questions
Yes. The Gateway Enterprise is an independent gateway and Ubiquiti states it is managed with a CloudKey, Official UniFi Hosting or UniFi OS Server with UniFi Network 8.3.32 and later. Some features, including NeXT AI Inspection and All Traffic Flows, need a UniFi OS Server, CloudKey Enterprise or Official UniFi Hosting.
Ubiquiti rates IDS/IPS throughput at 12.5 Gbps, with 10 Million concurrent sessions and 71,000 new sessions per second. Single-user WireGuard VPN server throughput is 1.2 Gbps and a single Site Magic site-to-site tunnel is 1.1 Gbps.
Default WAN ports are one 25G SFP28 and one 2.5 GbE RJ45, and Ubiquiti lists a maximum WAN port count of 5, with multi-WAN load balancing, policy-based WAN and VPN routing and additional internet failover with the separate UniFi LTE Backup.
Two hot-swappable 150W CRPS power supplies are included for power redundancy, and Shadow Mode (VRRP) high availability gives automatic gateway failover. Shadow Mode works between gateways, so it needs a second Gateway Enterprise.
Yes. Ubiquiti lists license-free, real-time inspection of encrypted packets with NeXT AI Inspection (SSL/TLS decryption), for up to 10,000 concurrent SSL/TLS inspection sessions, when the gateway is managed with a UniFi OS Server, CloudKey Enterprise or Official UniFi Hosting.
Designing the edge of a large UniFi network?
Tell us your internet links, user count and VPN needs and we will confirm whether the Gateway Enterprise fits, including the controller, SFP modules and second unit for failover.

