Ubiquiti EFG 25G Enterprise Fortress Cloud Gateway Router with Shadow Mode High Availability

Ultimate 25G High-Availability Cloud Gateway for Enterprise Networks

Designed for mission-critical operations, the EFG delivers 25G routing, Shadow Mode High Availability, high-performance VPNs, and Unified Security — all with license-free SD-WAN and UniFi Connect integration.

Highlights

• Supports 500+ UniFi devices and 5,000+ client connections

• 12.5 Gbps IDS/IPS throughput for powerful threat defense

• Dual WAN ports (25G SFP28, 2.5GbE RJ45) with 5 WAN support

• Shadow Mode High Availability with automatic VRRP failover

• Built-in VPN hub with WireGuard, IPsec, Teleport, Site Magic, and more

• Dual hot-swappable PSUs for nonstop operation

• Advanced firewalling, SSL inspection, DPI, content filtering

• License-free SD-WAN for multi-site deployments

Engineered for Enterprise-Class Uptime and Security

The EFG is built to deliver maximum uptime and performance for cloud-managed enterprises, retail chains, campuses, and secure government deployments. Shadow Mode HA ensures automatic gateway failover using VRRP, while powerful 18-core hardware guarantees uninterrupted high-throughput packet inspection, VPN, and dynamic routing.

Paired with UniFi OS 4.0 or later, EFG unlocks full-layer network intelligence, robust segmentation, dynamic WAN load balancing, customizable routing, and easy internet quality reporting — without any subscription or license fees.

Key Features

Performance

• Managed UniFi Devices: 500+

• Simultaneous Connected Users: 5,000+

• Maximum WAN Ports: 5 (1x 25G SFP28, 1x 2.5GbE RJ45 default active)

• IDS/IPS Throughput: 12.5 Gbps

• Concurrent Sessions: 1 Million

• New Sessions per Second: 71,000

• SSL/TLS Inspection Sessions: 10,000

VPN & SD-WAN

• License-Free SD-WAN: Yes

• VPN Server: Identity Endpoint One-Click VPN, Teleport, WireGuard, OpenVPN, L2TP

• VPN Client: WireGuard, OpenVPN

• Site-to-Site VPN: Site Magic, IPsec, OpenVPN

• VPN Throughput (Single User): WireGuard/Teleport/One-Click VPN 1.2 Gbps, OpenVPN 210 Mbps, L2TP 280 Mbps

• Site-to-Site VPN Throughput: Site Magic 1.1 Gbps, IPsec 580 Mbps

Advanced Networking

• Multi-WAN Load Balancing: Yes

• VRRP Shadow Mode High Availability: Yes

• Dynamic Routing Protocols: OSPF, BGP

• Advanced QoS and Traffic Shaping: Yes

• mDNS, IGMP Proxy Support: Yes

• Integrated RADIUS Server and RadSec Support: Yes

• Full NAT Customization (SNAT, DNAT, 1-to-1, Pooling, Masquerade): Yes

• VLAN/Subnet Segmentation and Zone-Based Filtering: Yes

• IPv6 ISP Support: Yes

• Internet Quality Reporting and LTE Backup Support: Yes

Security & Content Filtering

• Stateful Firewall with Application-Aware Layer 7 Policies: Yes

• SSL Inspection and URL Filtering: Yes

• Deep Packet Inspection (DPI): Yes

• Intrusion Prevention and Detection (IDS/IPS): 95,000+ CyberSecure Signatures

• Ad Blocking, Content Filtering, Domain/Region-Based Controls: Yes

Hardware & Build

• Processor: 18-core ARM v8.2, 2 GHz

• System Memory: 16 GB

• Dimensions: 442.4 x 43.7 x 325 mm, 17.4 x 1.7 x 12.8 inches

• Weight: 6.5 kg, 14.3 lb

• Enclosure Material: Aluminium CNC, SGCC steel

• Rack Mountable: 1U Standard

Power & Redundancy

• Max Power Consumption: 82W

• Power Supply: (2) Hot-swappable 150W CRPS units

• Supported Voltage Range: 100–240V AC

• Power Method: Universal AC input

System Management

• Display: 1.3" Touchscreen LCM

• Ethernet LEDs and SFP+ LEDs: Yes

• Bluetooth Setup: Yes

• Factory Reset Button: Yes

• Managed via: UniFi Controller

Summary

The Enterprise Fortress Gateway (EFG) redefines cloud gateway standards with blazing-fast 25G WAN performance, license-free SD-WAN, Layer 7 firewalling, and complete Shadow Mode High Availability. Designed for organizations that demand maximum security, flexibility, and uptime, it delivers elite routing, VPN aggregation, and automatic redundancy — setting a new benchmark for enterprise-class networking.