Ubiquiti UCG-Fiber 10G Cloud Gateway with PoE+
10G connectivity and local security in a compact desktop gateway The Ubiquiti UCG-Fiber brings high-speed wired networking, threat protection and local UniFi application management together...
Frequently Bought Together
10G connectivity and local security in a compact desktop gateway
The Ubiquiti UCG-Fiber brings high-speed wired networking, threat protection and local UniFi application management together without a full-size rack appliance. Its 10G copper and SFP+ connections suit offices, branch sites and advanced home networks moving beyond Gigabit, while the built-in 2.5GbE switch connects nearby equipment directly. Add separate access points for wireless coverage, and choose the NVMe storage option that suits your recording needs.
Highlights
Fast wired connections
- Two 10G SFP+ ports and one 10GbE RJ45 port for high-speed internet and LAN connections.
- Four 2.5GbE RJ45 ports, including one PoE+ output with a 30W budget.
- 5Gbps IDS/IPS throughput for inspected network traffic.
Security and site control
- Application-aware firewalling, VLAN segmentation and traffic identification.
- Multi-WAN failover and load balancing, with flexible WAN/LAN port assignment.
- Site-to-site and remote-access VPN options for connected workplaces.
Local UniFi management
- Supports UniFi Network, Protect, Access, Talk and Connect.
- Manages 50+ UniFi devices and 500+ connected clients.
- NVMe NVR storage according to the selected option, plus a front status display.
Key Features
Connect faster internet and a 10G LAN
The default WAN connections are a 10GbE RJ45 port and a 10G SFP+ port. A second SFP+ port serves the LAN, alongside four 2.5GbE copper ports for computers, switches and access points. WAN/LAN remapping lets the connections suit your installation, with up to six WAN interfaces while retaining a LAN connection. Use suitable SFP modules or direct-attach cabling for the chosen link.
Inspect traffic while keeping networks separated
With 5Gbps IDS/IPS throughput, UCG-Fiber adds intrusion detection and prevention to a multi-gigabit network. Stateful and application-aware firewall rules, content filtering, ad blocking and VLAN-based segmentation help control access between staff, guest and device networks. The 10G physical port speed is distinct from inspected throughput. CyberSecure's expanded threat-signature service is an optional subscription, rather than an included subscription benefit.
Keep sites connected and support remote work
Use multiple internet connections for failover or distribute sessions with load balancing. Site Magic, IPsec and OpenVPN provide site-to-site options; remote-access server choices include WireGuard, OpenVPN, L2TP, Teleport and Identity Endpoint One-Click VPN. Outbound VPN client support covers WireGuard and OpenVPN. This separates employee access, branch connectivity and selected outbound traffic without assuming every VPN protocol works in every role.
Run the UniFi applications your site needs
The integrated console supports Network, Protect, Access, Talk and Connect, bringing network equipment and compatible site systems into the UniFi platform. Published planning figures include 50+ managed UniFi devices and 500+ connected clients. Protect camera guidance is 15 HD, eight 2K or five 4K cameras, depending on the deployment. Plan combined application use and recording workloads together, rather than adding each capacity figure as a simultaneous allowance.
Choose local recording storage to suit the workload
The NVMe slot provides local NVR storage according to your selected option. The 0TB option has no recording SSD; select storage when local recordings are required. A matching M.2 SSD tray is needed when adding a drive. For Protect, choose an SSD with DRAM cache and at least 0.3DWPD endurance, rather than relying on capacity alone. The interface operates at PCIe Gen3 ×2, and the gateway must be powered down before changing its M.2 drive.
Power one suitable device directly
One of the four 2.5GbE ports supplies PoE+, with a 30W output budget when the gateway uses its included 54V DC adapter. This can simplify a nearby access point or camera connection, provided the device's PoE type and power requirement fit the port. Additional powered devices need their own suitable PoE supply or switch; the other Ethernet ports do not provide PoE.
Deploy on a desk with clear status and management
The 212.8 × 127.6 × 30 mm enclosure fits compact indoor installations and includes a 0.96-inch status display. Ethernet and Bluetooth support management and initial setup, while the included power adapter supplies the gateway. UCG-Fiber has no built-in WiFi, so position separate access points where coverage is needed. For optional wall mounting, UCG-Fiber needs the 23cm Floating Mount; the smaller 12cm mount does not fit. Keep UniFi OS and applications updated for the features and devices used.
Summary
UCG-Fiber suits a site that wants 10G uplinks, multi-gigabit wired connections and local UniFi control in a compact gateway. Match the recording storage, access points, PoE requirements and internet connections to the installation to build a practical network with room to grow.
Ubiquiti UCG-Fiber 10G Cloud Gateway with PoE+
UCG-Fiber is a compact wired Cloud Gateway with three 10G interfaces, a four-port 2.5GbE switch and an integrated UniFi console. One 2.5GbE port provides PoE+, while local NVMe storage supports NVR recording according to the selected option. The specifications below distinguish physical link speeds from inspected throughput, show the default WAN/LAN arrangement and list the power and SSD requirements. Wireless coverage requires separate access points; the gateway does not include a WiFi access point.
| Specification | Details |
|---|---|
| Interfaces and PoE | |
| Ethernet port total | Seven ports: four 2.5GbE RJ45, one 10GbE RJ45 and two 10G SFP+. |
| 2.5GbE RJ45 | 4 ports; 2.5Gbps / 1Gbps / 100Mbps / 10Mbps. |
| 10GbE RJ45 | 1 port; 10Gbps / 2.5Gbps / 1Gbps. |
| 10G SFP+ | 2 ports; 10Gbps / 1Gbps. |
| Default WAN ports | Port 5: 10GbE RJ45; port 7: 10G SFP+. |
| Default LAN ports | Ports 1–4: 2.5GbE RJ45; port 6: 10G SFP+. |
| WAN flexibility | WAN/LAN port remapping; maximum six WAN interfaces, with at least one physical port retained for LAN. LAN link aggregation is not supported. |
| PoE output | 1 × PoE+ output on 2.5GbE RJ45 port 4; 30W budget using the included 54V DC / 1.1A power adapter. |
| PoE voltage | 50–57V. |
| Wireless connectivity | No built-in WiFi access point; Bluetooth for setup/management. |
| Routing and Security | |
| IDS/IPS throughput | 5Gbps. |
| Firewall and traffic analysis | Stateful firewall; application-aware Layer 7 firewall; deep packet inspection and traffic identification. |
| Filtering and segmentation | Zone-based filtering by region, domain and application; content filtering; ad blocking; VLAN/subnet traffic segmentation. |
| Threat detection | IDS/IPS; 55,000+ signatures with the optional CyberSecure subscription. |
| Multi-WAN | Load balancing and failover; internet quality and outage reporting; additional failover through compatible UniFi LTE Backup equipment. |
| Dynamic routing | OSPF and BGP. BGP on UCG-Fiber requires UniFi OS 4.1.13 or later and a manually prepared routing configuration. |
| Traffic services | Advanced QoS; multicast DNS; SNAT, DNAT, masquerade, NAT pooling and 1-to-1 NAT. |
| Authentication and visibility | Integrated RADIUS server; RADIUS over TLS (RadSec); virtual network override; All Traffic Flows. |
| MAC address table | 4,000 entries. |
| VPN and SD-WAN | |
| Site-to-site VPN | Site Magic, IPsec and OpenVPN. |
| VPN server | Identity Endpoint One-Click VPN, Teleport, WireGuard, OpenVPN and L2TP. |
| VPN client | OpenVPN and WireGuard. |
| SD-WAN | Licence-free SD-WAN. Hub-and-spoke requires UniFi Network 9.0.108 or later and Cloud Gateway software 4.1.3 or later; participating sites require the appropriate common account/fabric management and a hub with a public IP address. |
| Applications and Recording | |
| UniFi applications | Network, Protect, Access, Talk and Connect. |
| Device and client capacity | 50+ managed UniFi devices; 500+ simultaneous connected clients. Deployment workload affects practical capacity. |
| Protect camera guidance | 15 HD or eight 2K or five 4K cameras; alternative planning figures, not additive simultaneous allowances. |
| Access hub capacity | 50 hubs. Reader Pro and Intercom quantities must stay below the supported Protect camera limits. |
| NVR storage | M.2 NVMe SSD slot; recording storage according to the selected option. The 0TB option has no SSD. |
| SSD interface and tray | PCIe Gen3 ×2. A matching M.2 SSD tray is required when adding a drive. |
| Protect SSD requirements | DRAM cache and at least 0.3DWPD endurance. |
| SSD replacement | Not hot-swappable; power down the gateway before removing or installing the M.2 drive. |
| Hardware and Power | |
| Processor | Quad-core ARM Cortex-A73 at 2.2GHz. |
| System memory | 3GB. |
| Power input and supply | DC jack; included 54V DC / 1.1A adapter; 100–240V AC input. |
| Maximum device consumption | 29.4W, excluding PoE output. |
| Heat dissipation | 100BTU/hr, excluding PoE output. |
| Status and controls | 0.96-inch LCM status display; Ethernet and SFP+ LEDs; factory-reset button. |
| Management | Ethernet and Bluetooth; UniFi mobile application supported for initial setup. |
| Physical and Operating Conditions | |
| Form factor and enclosure | Compact desktop; polycarbonate enclosure. Optional wall mounting requires the 23cm Floating Mount; the 12cm mount does not fit. |
| Dimensions | 212.8 × 127.6 × 30 mm. |
| Device weight | 675g without SSD; 734g with Ubiquiti's specified SSD configuration. These are device weights, not packed shipping weights. |
| Operating temperature | 0–40°C. |
| Operating humidity | 5–95% non-condensing. |
| ESD/EMP protection | Air: ±8kV; contact: ±4kV. |
| Compliance | NDAA compliant; CE, FCC, IC, SRRC; Anatel 04395-25-08356. |
| Setup and Package Contents | |
| Included power supply | 54V DC / 1.1A power adapter. Recording SSD provision follows the selected storage option. |
| Installation requirements | Indoor installation within the operating limits; suitable internet connection and network cabling. SFP modules/direct-attach cables, wireless access points, cameras and other managed devices are separate equipment. |
| Software maintenance | Keep UniFi OS and applications updated for the features and connected devices in use. |
| Size |
0TB, 1TB, 2TB, 4TB |
|---|