9.00 -17.00 
Ubiquiti Enterprise Firewall Core - 4x 100G QSFP28 Network Gateway with IDS/IPS 78Gbps (EF-Core)
| Manufacturer SKU | EF-Core |
|---|---|
| Manufacturer | Ubiquiti |
The Ubiquiti Enterprise Firewall Core is a network gateway and firewall powered by a 24-core ARM v9 processor with 32 GB RAM. The device offers IDS/IPS throughput of up to 79 Gbps, serving over 22,500 clients. It features four 100G QSFP28 and four 25G SFP28 ports, supports advanced routing (BGP, OSPF), multi-WAN for up to 8 links, High Availability clustering (Shadow Mode), and a redundant, hot-swap 550W power supply.
Accessories and add-ons:
Ubiquiti Enterprise Firewall Core - Advanced 100 Gbps Network Gateway with 78 Gbps IDS/IPS
Ubiquiti Enterprise Firewall Core (EF-Core) is a high-performance network gateway designed to support extensive network infrastructures in businesses. The device is powered by a 24-core ARM v9 processor clocked at 2.5 GHz, 32 GB of RAM, and a 128 GB SSD. This configuration allows for stable service of over 22,500 connected clients and achieving throughput of up to 79 Gbps with IDS/IPS scanning enabled. The device is housed in a robust 1U enclosure (made of CNC aluminum and SGCC steel) that is suitable for mounting in a standard rack.
The device is equipped with a total of 20 ports, including four 100G QSFP28 connectors, four 25G SFP28 slots, eight 10GbE RJ45 ports, and two standard 1GbE RJ45 ports. The administrator can configure up to eight WAN interfaces with Multi-WAN Load Balancing. The gateway supports dynamic routing (OSPF, BGP) and port aggregation (LACP). Continuity of operation in emergency situations is ensured by power supply redundancy (two hot-swap 550W modules) and support for High Availability clusters in Shadow Mode (VRRP), allowing the backup unit to uninterruptibly take over the tasks of the primary router. A dedicated OOB (Out-of-Band) management port and console port are available for service.
EF-Core features an Application-Aware L7 Firewall, Deep Packet Inspection (DPI), SSL/TLS traffic filtering, and ad blocking. The gateway enables stable branch office connectivity – it supports up to 5,000 simultaneous IPsec tunnels, as well as WireGuard, OpenVPN, L2TP protocols, and Site Magic SD-WAN technology. The device works as a standalone console with a built-in UniFi Network system.
Key Features
-
Processor and Memory: 24-core ARM v9 (2.5 GHz), 32 GB RAM, built-in 128 GB SSD.
-
Performance: IDS/IPS throughput up to 79 Gbps; Supports 10 million concurrent network sessions and 120,000 new sessions per second.
-
Interfaces: 4x 100G QSFP28, 4x 25G SFP28, 8x 10 GbE RJ45, 2x 1 GbE RJ45.
-
Network and routing: Multi-WAN (max. 8 WAN interfaces), OSPF, BGP, LACP, MAC table 130,000 entries, IGMP Proxy and mDNS support.
-
VPN: Capacity up to 5,000 simultaneous IPsec tunnels; Native support for Site Magic SD-WAN, WireGuard, OpenVPN, L2TP, and Teleport.
-
Security: Zone-Based L7 Firewall with DPI, SSL/TLS inspection (10,000 sessions), over 95,000 IDS/IPS signatures with CyberSecure Enterprise license.
-
Redundancy (High Availability): Shadow Mode support with VRRP Gateway Failover.
-
Power and cooling: 2x CRPS 550W hot-swap power supplies (100–240V AC); replaceable fan modules; maximum power consumption 171W.
Technical Specifications
System Performance and Scalability |
|
| Processor and Memory | Processor: 24-core ARM® v9 clocked at 2.5 GHz RAM: 32 GB Storage: Integrated 128 GB SSD |
| Routing Throughput and Performance | IDS/IPS Throughput: 79 Gbps Concurrent Sessions: 10 million New Sessions per Second: 120 000 Concurrent SSL/TLS inspection sessions: 10,000 New sessions/second: 120,000 MAC address table size: 130,000 |
| Management capabilities | Supported UniFi devices: 2,250+ Simultaneous connected users: 22,500+ |
| UniFi application suite | Network |
Network interfaces and configuration Ports |
|
| WAN Ports | Maximum WAN Ports: 8 Default WAN Ports: (1) 100G QSFP28 (1) 25G SFP28 (1) 10GbE RJ45 |
| Port Layout | 4 x 100G QSFP28 ports (100G/40G) 4 x 25G SFP28 ports (25G/10G/1G) 8 x 10GbE RJ45 ports (10G/5G/2.5G/1G/100M) 2 x 1 port GbE RJ45 (1G/100M/10M) 1 management port MGMT (1G/100M/10M) 1 console port |
| Local Management and Connectivity | Ethernet Bluetooth |
Security and Networking |
|
| Firewall | Stateful Firewall Application-Aware Layer 7 Firewall SSL Inspection and URL Filtering DPI and Traffic Identification Identification Advanced zone filtering (Regions, Domains, Applications) Content Filtering Ad Blocking |
| IDS/IPS Systems | Intrusion Prevention IPS/IDS Over 95,000 IDS/IPS signatures (with CyberSecure Enterprise license) |
| VPN Features | Free SD-WAN (License-Free) Site-to-Site VPN and Site Magic IPsec / OpenVPN / WireGuard / L2TP VPN Server (Identity Endpoint / Zero-Configuration VPN) Teleport) VPN Client (OpenVPN / WireGuard) |
| Advanced Routing and Networking Engines | Multi-WAN Load Balancing LACP Port Aggregation Dynamic OSPF and BGP Routing Advanced Bandwidth Management (Advanced QoS) Multicast DNS (mDNS) Advanced NAT (SNAT / DNAT / Masquerade / NAT Pooling / 1-to-1 NAT) Policy-based VPN and WAN Routing Configurable DHCP Server IPv6 Support (ISP) IGMP Proxy |
| Authentication and Redundancy Connects | Integrated RADIUS Server RADIUS over TLS (RadSec) Additional Link Backup with UniFi LTE Backup Outage Reporting Full Traffic Flow Logging |
Power Supply and Hardware Redundancy |
|
| Power Supply Method | Universal AC Input, 100–240V AC, Max. 7.5A, 50/60 Hz |
| Power Supplies | (2) Hot-Swappable AC/DC 550W PSU (CRPS) Power Supply Modules |
| Voltage Range and Power Consumption | Supported Range: 100–240V AC Maximum Power Consumption: 171W |
| Redundancy and High Availability | Shadow Mode (Failover VRRP) (2) Hot-Swappable Power Supplies |
| Heat Dissipation | 585 BTU/hr |
Other |
|
| Case Format | Rack Mount (1U) |
| Dimensions | 442.4 x 43.7 x 400 mm (17.4 x 1.7 x 15.8") |
| Weight | 7.85 kg (17.31 lb) |
| Materials | CNC Machined Aluminum SGCC Steel |
| Display and Indicators Interface | 1.3" LCD Touchscreen LEDs for Ethernet, SFP28, and QSFP28 ports |
| Replaceable Components and Buttons | Swappable Fan Module (1) Factory Reset Button |
| Electrostatic Protection | Air: ± 8kV Contact: ± 4kV |
| Operating Environment | Ambient Temperature: 0 to 40°CC (32 to 104° F) Ambient Humidity: 5 to 95% (non-condensing) |
| Mobile App Requirements | UniFi iOS™: Version 10.35.0 and later UniFi Android™: Version 10.38.1 and later |
| NDAA Compliant | Yes |
| Certifications | CE FCC IC |
Ubiquiti Enterprise Firewall Core - Frequently Asked Questions (FAQ)
Enterprise Firewall Core is a high-performance 100G Cloud Gateway designed for enterprise-class networks. It provides advanced high availability features and robust security, making it ideal for the most demanding network environments.
Yes. Enterprise Firewall Core supports Shadow Mode High Availability, which ensures uninterrupted connectivity by seamlessly transitioning gateway and management functions to a backup unit in the event of a primary unit failure.
The appliance also features redundant, hot-swappable power supplies that maintain network operation in the event of a power source failure. A second Enterprise Firewall Core appliance is required to enable Shadow Mode High Availability.
Yes. Enterprise Firewall Core supports Site Magic SD-WAN technology, as well as WireGuard, OpenVPN, IPsec, and Teleport Zero-Configuration VPN protocols, providing secure remote access to network resources.
Enterprise Firewall Core supports up to 8 WAN connections, enabling advanced redundancy and flexible internet traffic management.
Enterprise Firewall Core offers extensive security features, including an Application-Aware Layer 7 Stateful Firewall (AAF), intrusion detection and prevention systems (IDS/IPS), SSL Inspection, content filtering, and ad blocking.
The OOB management port provides dedicated, isolated access via HTTPS or SSH. This allows administrators to manage the gateway in situations where access via standard network connections is blocked or unavailable.
The console port provides direct serial access to the gateway's command-line interface (CLI) for system diagnostics and recovery. Allows administrators to access Enterprise Firewall Core even when web management is completely unavailable.
No. Enterprise Firewall Core operates as a standalone all-in-one UniFi Console, with the UniFi Network app running and managed locally on the device. It cannot be managed via external CloudKey, official UniFi Hosting, or UniFi OS server.
| Manufacturer SKU | EF-Core |
|---|---|
| Manufacturer | Ubiquiti |
| GPSR contact |
Ubiquiti International Holding B.V. Ekkersrijt 3102, 5692 CC Son en Breugel support@ui.com |
Please complete your information below to login.
Sign In
Create New Account