UniFi gateways and firewalls for secure enterprise networks.

Ubiquiti Cloud Gateway, UniFi Firewall, VPN and SD-WAN in a secure architecture - from Swiss SMEs to highly available enterprise networks.

Ubiquiti Enterprise PartnerCertified advice from novoSYS

Evaluate gateway

01 / Gateway Portfolio

Cloud gateways for every location size.

From the compact 2.5G console to the highly available enterprise firewall: novoSYS dimensions throughput, number of clients, storage, WAN redundancy and security services together.

Compact2.5G

Cloud Gateway Max

For smaller sites with a multi-gigabit network and a need for a compact UniFi console, optionally with camera recording..

2.3 Gbps IDS/IPS300+ clients30+ devicesNVMe Storage

Product details

Performance10G

Cloud Gateway Fiber

For compact sites with fast internet or a 10G connection to the internal network, without a large rack gateway..

5Gbps IDS/IPS500+ clients4 × 2.5GbENVR ready

Product details

Large ScaleRack

Dream Machine Pro Max

For larger sites with many UniFi devices and users, combining Network and Protect in a rack installation..

5Gbps IDS/IPS2,000+ clients200+ devicesDual NVR

Product details

Enterprise25G

Enterprise Fortress Gateway

For central network boundaries with many clients, high security throughput and an explicitly designed high-availability architecture..

12.5 Gbps IDS/IPS5,000+ clients500+ devicesHigh availability

Product details

Ubiquiti Dream Machine Beast Cloud Gateway

Hyperscale25G

Dream Machine Beast

For very large UniFi environments where security throughput and the number of managed clients drive the selection..

25Gbps IDS/IPS7,500+ clientsFull UniFi SuiteRackmount

Product details

All in onePoE

Dream Machine Special Edition

For sites with a rack that want to combine a gateway, UniFi applications and a few directly powered PoE devices..

3.5 Gbps IDS/IPS1'000+ clients100+ devices180W PoE

Product details

CompactMulti-WAN

Cloud Gateway Ultra

For small sites needing network management, a firewall and multiple internet connections in one compact device..

1Gbps IDS/IPS300+ clients30+ devicesMulti-WAN

Product details

WiFi Integrated10G

UniFi Express 7

For very small sites combining a gateway and WiFi in one compact device, such as a single office..

2.3 Gbps IDS/IPSWiFi 710GMesh scalable

Product details

Product specifications according to official Ubiquiti pages. The specific design is based on bandwidth, security profile, applications and growth reserve.

Firewall rethought

Security is not a single product. It is created through segmentation, rules, identities, transparency and controlled operations.

More control. Less friction.

Zone-Based Firewall

Clear security zones for clients, servers, IoT, guests, cameras and management - with understandable rules instead of established exceptions.

IDS / IPS & DPI

Suspicious pattern detection, application visibility and traffic analysis help identify risks earlier and implement policies in a targeted manner.

VPN & SD-WAN

Securely connect locations and employees - with Site Magic, IPsec, WireGuard and a centrally managed multi-site architecture.

Enterprise Fortress Gateway

Security for demanding networks.

The EFG combines high routing and IDS/IPS performance with advanced security features, high availability and fast 25G uplinks. We integrate it cleanly into your VLAN, WAN and identity architecture.

12.5 GbpsIDS/IPS

5'000+Concurrent clients

2 × 25GSFP28

Shadow ModeHigh availability

Product selection

The right console depends on the number of users, bandwidth, protect load, availability, number of locations and growth reserve.

The appropriate gateway. Not the biggest.

Criterion	Cloud Gateway Max	Cloud Gateway Fiber	Dream Machine Pro Max	Enterprise Fortress Gateway
Typical use	Compact location	10G ready SMB	Larger main location	Enterprise / Campus
Managed Devices	30+	50+	200+	500+
Concurrent clients	300+	500+	2'000+	5'000+
IDS/IPS	2.3 Gbps	5Gbps	5Gbps	12.5 Gbps
Storage	NVMe up to 2TB	NVMe up to 2TB	2 × 3.5" HDD	External Protect NVR

Architecture

Firewall rules that will still apply tomorrow are understandable.

01 / Segmentation

Zero Trust Principles

Device groups, identities and zones receive exactly the access they need - no more.

02 / Resilience

Multi-WAN & HA

Redundant Internet lines, failover and, if necessary, shadow mode for critical environments.

03 / Operation

Logs & Lifecycle

Traceable changes, scheduled updates, configuration backup and proactive health control.

Official film

UniFi Network shows how stability, high availability and insights come together on a common platform.

Network at scale.

Original video from Ubiquiti

12.5 GbpsIDS/IPS throughput

5'000+concurrent clients

25GSFP28 uplinks

HAShadow Mode

All novoSYS firewall references

Secure connections and clearly separated network segments start with the right architecture. novoSYS helps customers plan and implement their UniFi firewall.

Experience from productive Swiss IT environments.

Gartenmann Engineering

E-Display

DemoSCOPE

KULIQ Liquidationen

Schubiger Möbel

Beck

RISAM AG

Kinderheim Pilgerbrunnen

To the existing novoSYS firewall page

FAQ Gateways

Before purchasing decide correctly.

Which UniFi gateway is right for our company?

This depends, among other things, on Internet bandwidth, number of clients and devices, desired IDS/IPS performance, Protect cameras, redundancy and growth. We size with reserve, but without unnecessary oversize.

Can UniFi connect multiple locations?

Yes. Depending on the requirements, Site Magic, IPsec, WireGuard or classic SD-WAN designs are used. We take routing, failover, address concept and central administration into account.

Does novoSYS adopt an existing firewall configuration?

We analyze the existing environment, clean up rules and plan a controlled migration with a test and fallback concept.

Your firewall should allow for growth. Don't brake.

We review requirements, existing topology and security goals and recommend the appropriate UniFi gateway architecture.

Request advice

+41 41 555 10 55 helpdesk@novosys.ch