Ubiquiti EFG 25G Enterprise Fortress Cloud Gateway Router with Shadow Mode High Availability
Ultimate 25G High-Availability Cloud Gateway for Enterprise Networks Designed for mission-critical operations, the EFG delivers 25G routing, Shadow Mode High Availability, high-performance VPNs, and Unified...
Frequently Bought Together
Ultimate 25G High-Availability Cloud Gateway for Enterprise Networks
Designed for mission-critical operations, the EFG delivers 25G routing, Shadow Mode High Availability, high-performance VPNs, and Unified Security — all with license-free SD-WAN and UniFi Connect integration.
Highlights
-
Supports 500+ UniFi devices and 5,000+ client connections
-
12.5 Gbps IDS/IPS throughput for powerful threat defense
-
Dual WAN ports (25G SFP28, 2.5GbE RJ45) with 5 WAN support
-
Shadow Mode High Availability with automatic VRRP failover
-
Built-in VPN hub with WireGuard, IPsec, Teleport, Site Magic, and more
-
Dual hot-swappable PSUs for nonstop operation
-
Advanced firewalling, SSL inspection, DPI, content filtering
-
License-free SD-WAN for multi-site deployments
Engineered for Enterprise-Class Uptime and Security
The EFG is built to deliver maximum uptime and performance for cloud-managed enterprises, retail chains, campuses, and secure government deployments. Shadow Mode HA ensures automatic gateway failover using VRRP, while powerful 18-core hardware guarantees uninterrupted high-throughput packet inspection, VPN, and dynamic routing.
Paired with UniFi OS 4.0 or later, EFG unlocks full-layer network intelligence, robust segmentation, dynamic WAN load balancing, customizable routing, and easy internet quality reporting — without any subscription or license fees.
Key Features
Performance
-
Managed UniFi Devices: 500+
-
Simultaneous Connected Users: 5,000+
-
Maximum WAN Ports: 5 (1x 25G SFP28, 1x 2.5GbE RJ45 default active)
-
IDS/IPS Throughput: 12.5 Gbps
-
Concurrent Sessions: 1 Million
-
New Sessions per Second: 71,000
-
SSL/TLS Inspection Sessions: 10,000
VPN & SD-WAN
-
License-Free SD-WAN: Yes
-
VPN Server: Identity Endpoint One-Click VPN, Teleport, WireGuard, OpenVPN, L2TP
-
VPN Client: WireGuard, OpenVPN
-
Site-to-Site VPN: Site Magic, IPsec, OpenVPN
-
VPN Throughput (Single User): WireGuard/Teleport/One-Click VPN 1.2 Gbps, OpenVPN 210 Mbps, L2TP 280 Mbps
-
Site-to-Site VPN Throughput: Site Magic 1.1 Gbps, IPsec 580 Mbps
Advanced Networking
-
Multi-WAN Load Balancing: Yes
-
VRRP Shadow Mode High Availability: Yes
-
Dynamic Routing Protocols: OSPF, BGP
-
Advanced QoS and Traffic Shaping: Yes
-
mDNS, IGMP Proxy Support: Yes
-
Integrated RADIUS Server and RadSec Support: Yes
-
Full NAT Customization (SNAT, DNAT, 1-to-1, Pooling, Masquerade): Yes
-
VLAN/Subnet Segmentation and Zone-Based Filtering: Yes
-
IPv6 ISP Support: Yes
-
Internet Quality Reporting and LTE Backup Support: Yes
Security & Content Filtering
-
Stateful Firewall with Application-Aware Layer 7 Policies: Yes
-
SSL Inspection and URL Filtering: Yes
-
Deep Packet Inspection (DPI): Yes
-
Intrusion Prevention and Detection (IDS/IPS): 95,000+ CyberSecure Signatures
-
Ad Blocking, Content Filtering, Domain/Region-Based Controls: Yes
Hardware & Build
-
Processor: 18-core ARM v8.2, 2 GHz
-
System Memory: 16 GB
-
Dimensions: 442.4 x 43.7 x 325 mm, 17.4 x 1.7 x 12.8 inches
-
Weight: 6.5 kg, 14.3 lb
-
Enclosure Material: Aluminium CNC, SGCC steel
-
Rack Mountable: 1U Standard
Power & Redundancy
-
Max Power Consumption: 82W
-
Power Supply: (2) Hot-swappable 150W CRPS units
-
Supported Voltage Range: 100–240V AC
-
Power Method: Universal AC input
System Management
-
Display: 1.3" Touchscreen LCM
-
Ethernet LEDs and SFP+ LEDs: Yes
-
Bluetooth Setup: Yes
-
Factory Reset Button: Yes
-
Managed via: UniFi Controller
Summary
The Enterprise Fortress Gateway (EFG) redefines cloud gateway standards with blazing-fast 25G WAN performance, license-free SD-WAN, Layer 7 firewalling, and complete Shadow Mode High Availability. Designed for organizations that demand maximum security, flexibility, and uptime, it delivers elite routing, VPN aggregation, and automatic redundancy — setting a new benchmark for enterprise-class networking.
Ubiquiti EFG – 25G Enterprise Fortress Cloud Gateway Router with Shadow Mode High Availability
The Ubiquiti EFG is a professional-grade 25G Cloud Gateway designed to deliver powerful routing performance, advanced security, and high availability. With 500+ UniFi device support, 12.5 Gbps IPS throughput, and license-free SD-WAN, it’s ideal for large-scale networks requiring maximum resilience and control.
Specifications
Specification | Details |
---|---|
Dimensions | 442.4 × 43.7 × 325 mm (17.4 × 1.7 × 12.8 in) |
Weight | 6.5 kg (14.3 lb) |
Form Factor | Rack Mount (1U) |
Enclosure Material | Aluminium CNC, SGCC Steel |
Processor | 18-core ARM® v8.2 at 2 GHz |
System Memory | 16 GB |
Max. Power Consumption | 82W |
Power Method | Universal AC Input (100–240V AC, 7A Max., 50/60Hz) |
Power Supply | 2 × Hot-swappable 150W CRPS |
Port Layout | • 1 × 25G SFP28 WAN • 1 × 2.5 GbE RJ45 WAN • Max 5 WAN Ports |
Management Interfaces | Ethernet, Bluetooth |
Redundancy | • Shadow Mode Gateway Failover (VRRP) • Dual Hot-Swappable PSU |
Performance | |
Managed UniFi Devices | 500+ |
Simultaneous Clients | 5,000+ |
IDS/IPS Throughput | 12.5 Gbps |
Concurrent Sessions | 1 Million |
SSL/TLS Inspection Sessions | 10,000 |
New Sessions per Second | 71,000 |
WAN/LAN Features | |
Multi-WAN Load Balancing | Yes |
Shadow Mode High Availability | Yes (Requires UniFi OS 4.0+) |
OSPF/BGP Dynamic Routing | Yes |
Advanced NAT | SNAT, DNAT, Masquerade, NAT Pooling, 1-to-1 NAT |
VLAN/Subnet Traffic Segmentation | Yes |
DHCP Server | Customizable |
IPv6 ISP Support | Yes |
IGMP Proxy | Yes |
Internet Failover with LTE Backup | Yes |
Security Features | |
Stateful Firewall | Yes |
Application-Aware Layer 7 Firewall | Yes |
DPI & Traffic Identification | Yes |
SSL Inspection & URL Filtering | Yes |
Zone-Based Firewall | Yes |
Content Filtering | Yes |
Intrusion Prevention (IPS/IDS) | Yes (95,000+ signatures) |
Ad Blocking | Yes |
VPN & SD-WAN | |
Site-to-Site VPN (Site Magic) | Yes (1.1 Gbps) |
Identity Endpoint VPN (One-Click VPN) | 1.2 Gbps |
Teleport VPN | 1.2 Gbps |
WireGuard VPN | 1.2 Gbps (server) / 980 Mbps (client) |
OpenVPN | 210 Mbps (server) / 180 Mbps (client) |
IPsec VPN | 580 Mbps (site-to-site) |
L2TP VPN | 280 Mbps (server) |
Display & LEDs | |
LCM Display | 1.3" Touchscreen |
Ethernet and SFP+ LEDs | Yes |
Environmental | |
Operating Temperature | 0°C to 40°C (32°F to 104°F) |
Operating Humidity | 5% to 95% RH (non-condensing) |
Certifications | CE, FCC, IC |
NDAA Compliant | Yes |
