Cloud Gateway Ultra (UCG-Ultra)

The UCG-Ultra (Cloud Gateway Ultra) is a compact, affordable Cloud Gateway purpose-built for small offices, branch locations, and remote sites that need enterprise-grade security and routing performance without the footprint or cost of a full rack-mount appliance. Measuring 141.8 × 127.6 × 30 mm (5.6 × 5 × 1.2") and weighing just 520 g (1.1 lb), the UCG-Ultra runs UniFi Network natively — managing 30+ UniFi Network devices and 300+ simultaneous connected clients — on a Quad-core ARM® Cortex®-A53 processor at 1.5 GHz with 3 GB system memory and 16 GB on-board storage. The 0.96" LCM status display provides at-a-glance system monitoring. Setup is instant via UniFi iOS (version 10.12.0 and later) and UniFi Android (version 10.11.2 and later) mobile apps over Bluetooth.

The UCG-Ultra delivers 1 Gbps IDS/IPS throughput backed by 55,000+ CyberSecure threat signatures — the same signature count found in much larger enterprise appliances — providing best-in-class threat detection for its form factor and price point. Security features include a stateful firewall, application-aware Layer 7 firewall, DPI and traffic identification, zone-based firewall with advanced filtering across regions, domains, and applications, content filtering, intrusion prevention (IPS/IDS), ad blocking, and VLAN and subnet-based traffic segmentation.

Wired connectivity is provided via (1) 2.5 GbE RJ45 WAN port (2.5G/1G/100M/10M) expandable to up to 4 WAN ports total with multi-WAN load balancing for link aggregation and redundancy, alongside (4) GbE RJ45 LAN ports (1G/100M/10M) for direct device connections. MAC address table supports 2,000 entries. Advanced networking features include OSPF dynamic routing, advanced QoS, multicast DNS (mDNS), advanced NAT (SNAT/DNAT/Masquerade/NAT Pooling/1-to-1 NAT), integrated RADIUS server with RADIUS over TLS (RadSec), LTE failover via UniFi LTE Backup, IPv6 ISP support, IGMP proxy, customisable DHCP server, policy-based WAN and VPN routing, virtual network override, and internet quality and outage reporting.

VPN and SD-WAN capabilities include license-free SD-WAN, Site Magic site-to-site VPN, IPsec, OpenVPN, WireGuard, L2TP VPN server, Teleport zero-configuration VPN, Identity Endpoint one-click VPN, and OpenVPN and WireGuard VPN client support — enabling secure connectivity between offices, remote workers, and branch locations across East Africa without recurring licence fees.

Maximum power consumption is just 6.2W via USB-C (5V DC/3A) with an included adapter supporting 100–240V AC universal input — fully compatible with power standards across all East African markets. Heat dissipation of only 21 BTU/hr enables completely fanless, silent operation. The polycarbonate enclosure includes an Ethernet LED indicator, factory reset button, and management via Ethernet and Bluetooth. Operating temperature -10°C to 40°C (14°F to 104°F) with 5–95% non-condensing humidity suits the full range of tropical and variable climates across East Africa. CE, FCC, IC, Anatel, and SRRC certified, fully NDAA compliant.

Ideal for small offices, branch locations, remote sites, retail outlets, hospitality environments, and distributed deployments across Kenya, Uganda, Tanzania, Rwanda, and the wider East and Central Africa region requiring 1 Gbps IDS/IPS routing, 55,000+ CyberSecure threat signatures, multi-WAN load balancing, advanced VPN and SD-WAN capabilities, and full UniFi Network management in the most affordable and compact Cloud Gateway in the UniFi lineup.