Ubiquiti UniFi Gateway Max

The UniFi Gateway Max is a compact multi-WAN gateway with full 2.5 GbE support for high-performance networks in small to medium-sized locations. It delivers an IDS/IPS throughput of 2.3 Gbps and can be managed via Ethernet and Bluetooth. At a Glance Multi-WAN: Load balancing and internet failover with UniFi LTE Backup SD-WAN: License-free site-to-site networking Security: Stateful firewall with Layer 7 filtering and over 55,000 IDS/IPS signatures VPN: Server for WireGuard, OpenVPN, L2TP, and Teleport Zero-Configuration VPN 2.5 GbE: Five RJ45 ports supporting 2.5G/1G/100M/10M speeds Performance & Connectivity The gateway features five 2.5 GbE RJ45 ports supporting speeds of 2.5G, 1G, 100M, and 10M. One port is configured as WAN by default, with four as LAN, though one LAN port can be reassigned to WAN. The maximum number of WAN ports is four. Multi-WAN load balancing distributes traffic across multiple internet connections, and dynamic routing via OSPF is supported. Advanced NAT includes SNAT, DNAT, masquerade, NAT pooling, and 1-to-1 NAT. Multicast DNS (mDNS) and advanced QoS are also integrated. The MAC address table supports 2,000 entries. Virtual Network Override and the capture of all traffic flows enhance network control. Security & Firewall The gateway implements a stateful firewall along with an application-aware Layer 7 firewall. Deep Packet Inspection identifies applications and device types in traffic. The zone-based firewall provides advanced filtering by regions, domains, and applications. Content filtering and ad blocking are also available. Intrusion Prevention detects threats using over 55,000 signatures with CyberSecure. An integrated RADIUS server, including RADIUS over TLS (RadSec), is provided. The gateway offers internet quality and outage reports, as well as ESD/EMP protection with ±8 kV (air) and ±4 kV (contact). VPN Features For site-to-site VPN, the gateway supports Site Magic, IPsec, and OpenVPN. As a VPN server, it offers WireGuard, OpenVPN, L2TP, and Teleport Zero-Configuration VPN. The gateway also functions as a VPN client via OpenVPN and WireGuard. Design & Power The gateway is a compact desktop device with dimensions of 141.8 × 127.6 × 30 mm and a weight of 520 g. The enclosure is made of polycarbonate. Power is supplied via USB Type C (5V DC/3A), with the adapter included. Maximum power consumption is 9.6 W, with a heat output of 33 BTU/hr. The supported voltage range is 100–240 V AC. LEDs for Ethernet and system status indicate operational state. A button is provided for factory reset. Management interfaces include Ethernet and Bluetooth. Operating Conditions & Compliance The gateway operates in ambient temperatures from -10 to 40 °C and relative humidity of 5 to 95% non-condensing. It is NDAA-compliant. The minimum UniFi Network Application version required is 8.1.113. Technical Specifications WAN Port: 1 x 2.5 GbE RJ45 LAN Ports: 4 x 2.5 GbE RJ45 Reassignable Port: 1 LAN port can be reconfigured as WAN Port Layout: 5 x 2.5 GbE RJ45 (2.5G/1G/100M/10M) Max. WAN Ports: 4 IDS/IPS Throughput: 2.3 Gbps Routing Throughput with IDS/IPS: 2.3 Gbps Processor: Quad-Core ARM® Cortex®-A53 at 1.5 GHz System Memory: 2 GB Max. Power Consumption: 9.6 W Power Supply: USB Type C (5V DC/3A), adapter included Supported Voltage Range: 100–240 V AC Heat Output: 33 BTU/hr Management: Ethernet, Bluetooth Form Factor: Compact desktop device Enclosure Material: Polycarbonate Dimensions: 141.8 × 127.6 × 30 mm Weight: 520 g LEDs: Ethernet, System Button: (1) Factory reset ESD/EMP Protection: Air: ±8 kV, Contact: ±4 kV Operating Ambient Temperature: -10 to 40 °C Operating Humidity: 5 to 95% non-condensing NDAA Compliant: Yes Multi-WAN Load Balancing: Yes Dynamic Routing (OSPF): Yes Advanced QoS: Yes Multicast DNS (mDNS): Yes Advanced NAT: SNAT / DNAT / Masquerade / NAT Pooling / 1-to-1 NAT Integrated RADIUS Server: Yes RADIUS over TLS (RadSec): Yes Internet Failover with UniFi LTE Backup: Yes Internet Quality and Outage Reports: Yes MAC Address Table: 2,000 entries Virtual Network Override: Yes All Traffic Flows: Yes Stateful Firewall: Yes Layer 7 Firewall: Yes DPI & Traffic Identification: Yes Zone-Based Firewall: Advanced filtering (regions, domains, apps) Content Filtering: Yes IPS/IDS: Yes Ad Blocking: Yes IDS/IPS Signatures: 55,000+ with CyberSecure License-Free SD-WAN: Yes Site-to-Site VPN (Site Magic): Yes Site-to-Site VPN (IPsec): Yes Site-to-Site VPN (OpenVPN): Yes VPN Server (Teleport Zero-Configuration VPN): Yes VPN Server (WireGuard): Yes VPN Server (OpenVPN): Yes VPN Server (L2TP): Yes VPN Client (OpenVPN): Yes VPN Client (WireGuard): Yes Min. UniFi Network Version: 8.1.113 Warranty: 12 months