What is a UniFi Cloud Gateway?
A UniFi Cloud Gateway is a router, firewall and UniFi management console in one device. It runs UniFi Network locally, and many models also run Protect cameras and Access doors, with free remote management through Site Manager.
Ubiquiti groups current gateways into enterprise, large-scale, compact and WiFi-integrated lines on its tech specs site. For a business, the gateway is the most important UniFi device you own: every packet to the internet crosses it, and the console on it controls every AP, switch, camera and door. That makes it both the first thing to size correctly and the first thing to keep patched.
Which UniFi gateway does a small business or manufacturer need?
Match IDS/IPS throughput to your internet circuit, then check device and client counts. A 1 Gbps circuit with threat protection on fits a Cloud Gateway Ultra (1 Gbps IDS/IPS) for a small office; a mid-size plant with cameras usually fits a Dream Machine Pro Max (5 Gbps IDS/IPS, 200+ devices, two NVR bays).
| Model | IDS/IPS throughput | Devices / clients | Camera recording | Best fit |
|---|---|---|---|---|
| Cloud Gateway Ultra | 1 Gbps | 30+ / 300+ | No bay | Small office, branch |
| Cloud Gateway Fiber | 5 Gbps | 50+ / 500+ | NVMe up to 2 TB | Multi-gig fiber office |
| Cloud Gateway Industrial | 5 Gbps | 50+ / 500+ | Not listed | Unconditioned spaces, -30 to 50 C |
| Dream Machine SE | 3.5 Gbps | 100+ / 1,000+ | 1 x 3.5" bay | All-in-one with 180W PoE |
| Dream Machine Pro Max | 5 Gbps | 200+ / 2,000+ | 2 x 3.5" bays | Mid-size plant or office |
| Enterprise Firewall | 12.5 Gbps | 500+ / 5,000+ | Use a separate NVR | Campus, multi-building |
Key takeaway: Size for IDS/IPS throughput, not the headline routing number. Turning off threat protection to hit your circuit speed defeats the reason you bought a firewall.
What should an NC plant or multi-site business plan for at the gateway?
Plan for internet failover, the physical environment and where cameras will record. A second WAN or cellular backup keeps shipping and ERP running when a fiber line is cut, and the Cloud Gateway Industrial is rated from -30 to 50 C for spaces without air conditioning.
- Failover: plan a second internet provider or cellular backup. Ubiquiti sells cellular options such as the Dream Router 5G Max, with built-in 5G and dual SIM.
- Recording: if the gateway will also run UniFi Protect, pick a model with drive bays, or plan a separate NVR once camera counts grow.
- Multi-site: each plant or showroom gets its own gateway, tied together with site-to-site VPN and managed in Site Manager. See multi-site business networks.
- Power: put the gateway on a UPS. A gateway that reboots on every brownout takes the whole site down with it.
Why does patching a UniFi gateway matter so much?
Because the gateway runs UniFi OS, and on June 23, 2026 CISA added three UniFi OS vulnerabilities to its Known Exploited Vulnerabilities catalog, led by CVE-2026-34908, an improper access control flaw. An unpatched console is an exposed firewall.
The CISA alert lists CVE-2026-34908, CVE-2026-34909 and CVE-2026-34910. Our plain-English write-up covers the response plan for North Carolina businesses. PDC's standard gateway build keeps management off the public internet, requires MFA for administrators, and puts UniFi OS updates on a managed schedule with emergency patching for critical advisories.
Segmenting the network behind the gateway limits the blast radius if something does get in; see network segmentation for manufacturers and PDC cybersecurity services.
Does a UniFi gateway need a firewall license or security subscription?
No license is needed to keep it working. UniFi gateways run their firewall, IDS/IPS and VPN features without a per-device license, which is a major difference from many subscription firewalls. Optional paid items are add-ons: Ubiquiti's CyberSecure subscription expands IDS/IPS signatures (listed as "55,000+ with CyberSecure") and adds content filtering, and UI Care extends hardware coverage.
Ubiquiti's own positioning is "Simple, License-Free Networking". The honest trade-off: subscription firewalls such as Fortinet bundle curated threat intelligence services that UniFi does not replicate one for one. We compare them fairly in UniFi vs Fortinet.
Warranty is one year from shipment through authorized distributors and two years direct from the Ubiquiti web store, per the Ubiquiti warranty. We state it in the quote.
Why have a local MSP install and manage your UniFi gateway?
A gateway is set up once and defended every day. A local MSP configures the firewall correctly, patches it, watches it, and can be on site when a WAN link or power supply fails.
- Local and accountable: Preferred Data Corporation was founded in 1987 (39 years in business) and is based in High Point, with on-site service within 200 miles, which covers the Piedmont Triad, Charlotte, Raleigh and most of North Carolina.
- Member of the UniFi Partner Program, and a full MSP/MSSP: the same team handles managed IT, cybersecurity and structured cabling and network work, so nobody points fingers between the WiFi installer and the IT provider.
- Track record with clients: 100+ active clients and a 20+ year average client tenure, plus a BBB A+ rating and 24/7 monitoring for managed clients.
Which Cloud Gateways models do we typically specify?
These are the current models our engineers reach for most often. The right one depends on your building, users and budget, so we confirm the final list after a site walk.
Cloud Gateway Ultra
Best for: Small offices and remote sites with modest internet circuits
- 1 Gbps IDS/IPS throughput
- 30+ UniFi devices / 300+ clients
- (1) 2.5 GbE WAN, (4) 1 GbE LAN; USB-C powered
- US store price $129 (observed Sep 2026, subject to change)
Cloud Gateway Fiber
Best for: Offices on multi-gig fiber that want a compact gateway
- 5 Gbps IDS/IPS throughput; 50+ devices / 500+ clients
- 10G SFP+ and 10 GbE WAN, (4) 2.5 GbE LAN, 30W PoE
- NVMe slot up to 2 TB (for Protect recording)
- US store price $279 (observed Sep 2026, subject to change)
Cloud Gateway Industrial
Best for: Plant floors, outbuildings and enclosures without climate control
- 5 Gbps IDS/IPS; 50+ devices / 500+ clients
- 10G SFP+, 10 GbE and (4) 2.5 GbE (2 ports PoE+++ at 90W)
- -30 to 50 C operating temperature
- US store price $579 (observed Sep 2026, subject to change)
Dream Machine Special Edition
Best for: Small and mid-size sites that want gateway, PoE and camera recording in one rack unit
- 3.5 Gbps IDS/IPS; 100+ devices / 1,000+ clients
- 180W PoE budget; (2) 10G SFP+
- (1) 3.5" NVR bay plus 128 GB SSD
- US store price $499 (observed Sep 2026, subject to change)
Dream Machine Pro Max
Best for: Mid-size plants and offices with more devices and cameras
- 5 Gbps IDS/IPS; 200+ devices / 2,000+ clients
- (1) 10G SFP+ and (1) 2.5 GbE WAN, (8) 1 GbE LAN
- (2) 3.5" NVR bays plus 128 GB SSD
- US store price $599 (observed Sep 2026, subject to change)
Enterprise Firewall
Best for: Campuses and multi-building sites with high throughput needs
- 12.5 Gbps IDS/IPS; 500+ devices / 5,000+ clients
- (2) 25G SFP28, (2) 10G SFP+, (2) 2.5 GbE
- (2) hot-swap 150W power supplies
- US store price $1,999, shown out of stock (observed Sep 2026, subject to change)
What does Preferred Data deliver?
- Sizing against your real internet circuits, user count, camera count and security features, so IDS/IPS stays on without choking throughput.
- Firewall policy, VLAN and inter-VLAN rules that separate office, guest, camera, door access and production networks.
- Dual-WAN or cellular failover design, and site-to-site VPN between plants, offices and showrooms.
- Hardened remote access: management interfaces kept off the internet, MFA on every admin account, least-privilege roles.
- Firmware and UniFi OS updates on a managed schedule, with emergency patching when a critical advisory lands.
- Rack installation, UPS power and labeled documentation of every WAN, VLAN and rule.
- Ongoing monitoring and support through PDC managed IT and cybersecurity services.
Frequently asked questions
What is the difference between a UniFi Cloud Gateway and a Dream Machine?
Both are UniFi gateways with a built-in console; Ubiquiti files both under Cloud Gateways. Dream Machine models such as the UDM SE and UDM Pro Max are rackmount units with NVR drive bays and more ports, while compact Cloud Gateways such as the Ultra and Fiber are smaller desktop units.
Can a UniFi gateway handle a 1 Gbps internet connection with threat protection on?
Yes, if you size it for that. The Cloud Gateway Ultra is rated at 1 Gbps IDS/IPS throughput, and the Cloud Gateway Fiber, Industrial and Dream Machine Pro Max are rated at 5 Gbps, per Ubiquiti tech specs.
Can one UniFi gateway also record security cameras?
Several can. The Dream Machine SE has one 3.5" drive bay, the Dream Machine Pro Max has two, and the Cloud Gateway Fiber takes an NVMe drive up to 2 TB. Larger camera systems belong on a dedicated UniFi NVR.
Is UniFi secure enough for a business firewall?
It can be, when it is configured and maintained properly: IDS/IPS on, management off the internet, MFA for admins, segmented VLANs and prompt updates. The June 2026 CISA listing of three UniFi OS flaws shows why maintenance is the deciding factor.
Do you replace existing firewalls with UniFi?
When it fits. PDC reviews your current firewall rules, VPNs and compliance needs first; some regulated sites are better served by a subscription firewall, and we will say so.
How do I get a UniFi gateway quote in the Triad?
Call (336) 886-3282 or contact us. PDC is in High Point and serves Greensboro, Winston-Salem and sites within 200 miles.