Ubiquiti Dream Machine Beast - Network Gateway (UDM-Beast)
| Manufacturer SKU | UDM-Beast |
|---|---|
| Manufacturer | Ubiquiti |
| PCS in collective packaging | 2 |
The Ubiquiti Dream Machine Beast is a hyperscale network gateway designed to support over 7,500 clients and 750 UniFi devices. Equipped with 25G SFP28 and 10GbE RJ45 ports, it offers 25 Gbps IPS/IDS throughput. The device includes two 3.5" HDD slots for the UniFi Protect monitoring system and supports Shadow Mode, ensuring high availability and network continuity.
Accessories and add-ons:
Ubiquiti Dream Machine Beast – Hyperscale Network Gateway (1U)
Ubiquiti Dream Machine Beast (UDM-Beast) is a network gateway (Cloud Gateway) designed to support the most demanding infrastructures, such as large office buildings or campuses. This 1U rackmount device combines a powerful router, a switch with enormous throughput, and a hardware firewall. Because the UDM-Beast can act as a management controller, it comes with a built-in 128 GB SSD. This SSD allows the device to natively host the full UniFi application suite (Network, Protect, Access, Talk, Connect), becoming a completely self-sufficient controller for the entire network. System stability is ensured by an eight-core ARM v9 processor (2.1 GHz) supported by 16 GB of RAM. This power reserve allows for simultaneous support of over 7,500 connected clients and management of over 750 UniFi devices.
The front panel features a rich set of interfaces: two 25G fiber ports (SFP28), two 10G SFP+ ports, eight 10GbE RJ45 ports, and two Gigabit RJ45 ports. The device allows for the configuration of up to eight independent WAN ports with load balancing support (Multi-WAN Load Balancing). Implementing an integrated attack detection and blocking system (IPS/IDS) does not result in a noticeable performance penalty – the system can scan traffic at throughputs of up to 25 Gbps. This is complemented by a Layer 7 firewall (DPI), built-in DNS ad blocking, and support for dynamic routing (OSPF, BGP).
For environments requiring business continuity (High Availability), the UDM-Beast offers a Shadow Mode function based on the VRRP protocol. This allows two identical gateways to be connected – in the event of a physical failure of the first device, the backup server immediately takes over all traffic without any noticeable interruption in internet access. The device also has a built-in VPN server with support for protocols such as WireGuard, OpenVPN, IPsec, and Site Magic.
All electronics are housed in a housing made of steel and CNC-cut aluminum. In addition to performing network functions, the device is ready to support IP surveillance. The front panel features two dedicated slots for standard 3.5" hard drives (NVR, not included) – once installed, the built-in UniFi Protect system can record images from up to 100 HD cameras or 40 cameras in 4K resolution. Power security is provided by a built-in power supply supported by an additional connector for a hardware backup power system (USP-RPS).
Key features:
-
Role in the system: Central server supporting UniFi Network, Protect, Access, Talk, and Connect.
-
Powerful: 2 x 25G SFP28 ports, 2 x 10G SFP+ ports, 8 x 10GbE RJ45 ports, and 2 x GbE RJ45 ports (up to 8 WAN links possible).
-
Performance: Capable of supporting over 7,500 users and network management with over 750 UniFi devices.
-
Security: Firewall (L7 / DPI) with IPS/IDS system analyzing traffic with a throughput of up to 25 Gbps.
-
Reliability (HA) and routing: Hardware redundancy thanks to Shadow Mode (VRRP), support for dynamic routing (OSPF, BGP) and advanced VPNs (WireGuard, OpenVPN).
-
Video Recorder (NVR): Two free 3.5" HDD bays for recording images from up to 40 4K cameras.




Technical Specifications
| Supported UniFi Apps | Network, Protect, Access, Talk, Connect |
| Managed UniFi Devices | 750+ |
| Managed Cameras | (100) HD, (60) 2K, (40) 4K |
| Managed Access Hubs | 200* |
| Concurrent Connected Devices Users | 7,500+ |
| IDS/IPS Throughput | 25 Gbps |
| Redundancy | Shadow Mode (VRRP), Gateway Failover, DC Backup |
Interfaces and Ports |
|
| Maximum Number of WAN Ports | 8 |
| Default WAN Ports | (1) 25G SFP28, (1) 10GbE RJ45 |
| 1 GbE RJ45 ports | 2 (10/100/1000 Mbps) |
| 10 GbE RJ45 ports | 8 (100M/1G/2.5G/5G/10G) |
| 10G SFP+ ports | 2 (1G/10G) |
| 25G SFP28 ports | 2 (1G/10G/25G) |
| Console Interface | 1 |
Security |
|
| Firewall | Stateful Firewall, Application-Aware Layer 7 Firewall |
| Filtering and Identification | DPI (Deep Packet Inspection), Traffic Identification, Content Filtering, Ad Blocking |
| Zonal Firewall | Advanced Filtering (regions, domains, applications) |
| Intrusion Prevention | IPS/IDS (Intrusion Prevention/Detection System) |
| IDS/IPS Signatures | 55,000+ with CyberSecure |
VPN and SD-WAN |
|
| SD-WAN | License-free SD-WAN, Site-to-Site VPN (Site Magic) |
| Supported Protocols VPN | IPsec, OpenVPN, WireGuard, L2TP |
| VPN Server | Identity Endpoint One-Click VPN, Teleport Zero-Configuration VPN |
| VPN Client | OpenVPN, WireGuard |
Network Features |
|
| Load Balancing | Multi-WAN Load Balancing |
| High Availability | Shadow Mode (VRRP) High Availability |
| Port Aggregation | LACP Port Aggregation |
| Dynamic Routing | OSPF, BGP |
| Advanced Networking Features | Advanced QoS, Multicast DNS (mDNS), Policy-based WAN and VPN Routing |
| NAT | Advanced NAT (SNAT, DNAT, Masquerade, NAT Pooling, 1-to-1 NAT) |
| RADIUS Server | Integrated RADIUS Server, RADIUS over TLS (RadSec) |
| MAC Address Table Size | 32,000 |
| Additional Features | Configurable DHCP Server, IPv6 ISP Support, IGMP Proxy, Internet Quality and Downtime Reporting |
Device |
|
| Processor | 2.1 GHz Octa-core ARM® v9 |
| System Memory | 16 GB |
| Internal Memory | Integrated 128 GB SSD |
| NVR Data Storage | (2) 3.5" NVR HDD Slots |
| Power Supply | AC/DC, internal, 150W |
| Maximum Power Consumption | 100W |
| Power Method | Universal AC Input (100–240V AC, 3A max, 50/60 Hz) USP-RPS DC Input (11.5V DC, 13.05A) |
| Heat Dissipation | 342 BTU/hr |
Other |
|
| Mobile App Requirements | iOS™: Version 10.34.0 and later Android™: Version 10.37.1 and later |
| Dimensions | 442.4 x 43.7 x 325 mm (17.4 x 1.7 x 12.8") |
| Weight | 5.5 kg (12.13 lb) |
| Case Material | CNC Aluminum, Steel SGCC |
| Mounting Material | Steel SGCC |
| Mounting | Rack (1U) |
| Display | 1.3" LCD Touchscreen |
| Buttons | (1) Factory Reset |
| LEDs | Ethernet, SFP+, SFP28, RPS, HDD |
| ESD/EMP Protection | Air: ± 8kV, Contact: ± 4kV |
| Ambient Operating Temperature | 0 to 40° C (32 to 104° F) |
| Ambient Operating Humidity | 5 to 95% non-condensing |
| NDAA Compliant | Yes |
| Certifications | CE, FCC, IC |




Ubiquiti Dream Machine Beast - Frequently Asked Questions (FAQ)
The Dream Machine Beast combines high-performance routing, advanced security, and 25G connectivity in a single device. It also offers redundant NVR storage and a full suite of UniFi applications for centralized management of your entire infrastructure.
Yes. Dream Machine Beast supports Shadow Mode High Availability, which ensures uninterrupted connectivity by seamlessly transitioning functions and management to a backup unit in the event of a primary unit failure.
The device also has a DC backup power input. A second Dream Machine Beast is required to enable Shadow Mode, and a UniFi RPS is required for DC backup power.
Yes. Dream Machine Beast supports Site Magic SD-WAN technology, as well as WireGuard, OpenVPN, IPsec, and Teleport Zero-Configuration VPN protocols, allowing for secure and easy remote access.
Dream Machine Beast supports up to 8 WAN connections, enabling advanced redundancy and internet load balancing.
Dream Machine Beast offers extensive security features, including an Application-Aware Layer 7 Stateful Firewall (AAF), Intrusion Detection and Prevention Systems (IDS/IPS), content filtering, and ad blocking.
The console port provides direct serial access to the gateway's command-line interface (CLI). This is a crucial troubleshooting and recovery tool, allowing you to access your device even when network management is not possible.
No. The Dream Machine Beast operates as a standalone UniFi console (all-in-one), meaning the UniFi Network app runs locally on the device itself. It cannot be managed by a third-party CloudKey, official UniFi Hosting, or a dedicated UniFi OS server.
| Manufacturer SKU | UDM-Beast |
|---|---|
| Manufacturer | Ubiquiti |
| PCS in collective packaging | 2 |
| GPSR contact | Ubiquiti International Holding B.V. Ekkersrijt 3102, 5692 CC Son en Breugel support@ui.com |














Please complete your information below to login.
Sign In
Create New Account