Gateway Lite

The UXG-Lite (Gateway Lite) is a compact, independent security gateway purpose-built for deployments requiring professional-grade routing and security in the smallest possible footprint. Measuring just 98 × 98 × 30 mm (3.9 × 3.9 × 1.2") and weighing 320 g (11.3 oz), the UXG-Lite delivers a performance increase of up to 10x over the legacy USG — tested with IPS/IDS, QoS, and Smart Queues simultaneously active. Powered by a Dual-core ARM® Cortex®-A53 processor at 1 GHz with 1 GB system memory, the UXG-Lite is managed via a CloudKey, Official UniFi Hosting, or UniFi Network Server running UniFi Network version 8.3.32 and later, making it a natural fit for existing UniFi environments that need a dedicated, high-performance gateway without a built-in controller.

The UXG-Lite provides 1 Gbps IDS/IPS throughput alongside a comprehensive security stack including a stateful firewall, application-aware Layer 7 firewall, DPI and traffic identification, zone-based firewall with advanced filtering across regions, domains, and applications, content filtering, intrusion prevention (IPS/IDS), and ad blocking. VLAN and subnet-based traffic segmentation enables clean network separation between user groups, IoT devices, and guest networks.

Wired connectivity is provided via (2) GbE RJ45 ports (1G/100M/10M) — one WAN and one LAN. Advanced networking capabilities include OSPF dynamic routing, advanced QoS, multicast DNS (mDNS), advanced NAT (SNAT/DNAT/Masquerade/NAT Pooling/1-to-1 NAT), integrated RADIUS server with RADIUS over TLS (RadSec), LTE failover via UniFi LTE Backup, IPv6 ISP support, customisable DHCP server, policy-based WAN and VPN routing, and internet quality and outage reporting.

VPN and SD-WAN capabilities include license-free SD-WAN, Site Magic site-to-site VPN, IPsec, OpenVPN, WireGuard, L2TP VPN server, Teleport zero-configuration VPN, and OpenVPN and WireGuard VPN client support — providing flexible, secure connectivity between offices, remote workers, and branch locations across East Africa without recurring licence fees.

Maximum power consumption is just 3.83W via USB-C (5V DC/3A) with an included adapter supporting 100–240V AC universal input — fully compatible with power standards across all East African markets. Heat dissipation of only 13 BTU/hr enables completely fanless, silent operation with no cooling requirements. The polycarbonate enclosure includes LED indicators for Ethernet status, a factory reset button, and management via Ethernet and Bluetooth. Operating temperature -10°C to 40°C (14°F to 104°F) with 5–95% non-condensing humidity suits the full range of indoor environments across East Africa. CE, FCC, IC, and Anatel certified, fully NDAA compliant.

Ideal for home networks, small offices, remote branch locations, temporary installations, entry-level professional deployments, and any network across Kenya, Uganda, Tanzania, Rwanda, and the wider East and Central Africa region requiring 1 Gbps IDS/IPS security, enterprise-grade firewall and VPN capabilities, and up to 10x legacy USG routing performance in an ultra-compact, energy-efficient, USB-C powered appliance.