Ubiquiti UniFi firewalls, UDM and cloud gateways for Swiss companies. Compare models, plan VPN and failover – with Irontec.
Irontec plans, installs and maintains Ubiquiti UniFi firewalls for small offices, growing companies and campus networks. We select the appropriate cloud gateway, a UniFi Dream Machine or Enterprise Firewall based on internet performance, network areas and VPN requirements. Firewall rules, intrusion detection and internet backup are set up as a cohesive solution.
Choose the building blocks that suit your initial situation. We determine the scope and support together.
From the Cloud Gateway Ultra or Max to the UDM and Enterprise Firewall, we compare IDS/IPS throughput, WAN ports, UniFi applications and expandability based on your needs.
The firewall controls permitted connections. IDS detects suspicious traffic, IPS can block detected threats. We plan the rules and performance of the gateway with protections turned on.
Workstations, servers, guests and cameras get appropriate network areas. In the UniFi firewall, only the necessary paths are released, for example from the office to the printer or from cameras to the recorder.
We plan suitable VPN connections for home offices and multiple locations. Depending on the requirements, the supported VPN methods or UniFi Site Magic are used to connect suitable gateways.
An additional Internet connection or UniFi 5G Max can provide an alternative route. We check provider handover, mobile reception, routing and the behavior of important applications when changing lines.
We set up relevant messages, document the firewall rules and coordinate updates and configuration backups. Responsibility, reaction to events and support times are agreed.
The size alone is not decisive: Internet throughput, VPN, applications and desired availability determine the gateway.
Small businesses
Cloud Gateway Ultra for network focus; Cloud Gateway Max if additional UniFi applications and local recording are required.
Medium-sized companies
UDM Pro as a rack entry or UDM SE with integrated PoE switching. Both offer up to 3.5 Gbit/s IDS/IPS according to the manufacturer.
Big companies
UDM Pro Max or UDM Beast, depending on the required protection performance and applications. Enterprise Firewall EFG when the enterprise firewall platform and removable power supplies are a priority.
Campus & central locations
Enterprise Firewall Core for high requirements. A pair of identical devices, WAN connection and separate power paths are planned together as a high availability solution.
The examples are planning recommendations, not fixed capacity limits or complete packages. CHF indicative pricing per device pictured; exact price on request. All models in the following comparison have their own detail pages.
View all UniFi products → Ubiquiti UniFiA selection of important products for your project. Irontec tailors devices, setup and ongoing support to your needs.
Hardware guide prices in CHF, excluding VAT, shipping, any import taxes and setup. Product price status: September 15-16, 2026. Conversion: 1 EUR = CHF 0.9441 (ECB, September 15, 2026). Exact price on request. We will confirm availability and total price with your offer. Course source
Compact gateways combine firewall and central network management. Internet connection, VPN and activated protection functions are decisive.
| product | Cloud Gateway UltraUCG-Ultra-EU |  Cloud Gateway MaxUCG-Max-EU |
|---|---|---|
| Area of application | Small office and individual branches | Compact location with network and cameras |
| IDS/IPS throughput | Up to 1 Gbit/s | Up to 2.3 Gbit/s |
| UniFi applications | UniFi Network | Complete UniFi application suite |
| Record | No Protect recording | 512 GB NVMe integrated |
| Execution in the price | EU version, without WiFi | EU version with 512 GB, without WiFi |
| Guide price excluding VAT | CHF 101.96per device · exact price on request | CHF 283.23per device · exact price on request |
| Deliverability | Sold out from the manufacturer at the current price | On request |
| Find out more | Product details →Inquire about product ↗Manufacturer details ↗ | Product details →Inquire about product ↗Manufacturer details ↗ |
UDM models combine gateway, firewall and UniFi applications. IDS/IPS values are manufacturer information; Real performance depends on configuration and traffic.
| product |  Dream Machine ProUDM-Pro-EU | Dream Machine Special EditionUDM-SE-EU |  Dream Machine Pro MaxUDM-Pro-Max-EU | Dream Machine BeastUDM-Beast-EU |
|---|---|---|---|---|
| Area of application | SME with its own server cabinet | SMEs with additional PoE devices | Growing and larger companies | Large locations with many applications |
| IDS/IPS throughput | Up to 3.5 Gbit/s | Up to 3.5 Gbit/s | Up to 5 Gbit/s | Up to 25 Gbit/s |
| Focus | Rack gateway with UniFi application suite | Integrated PoE switching | More performance reserve and two HDD slots | High throughput and complete UniFi application suite |
| Record | 1 HDD bay; HDD separately | 1 HDD bay and integrated 128 GB SSD | 2 HDD bays; HDDs separately | 2 HDD bays and integrated 128 GB SSD |
| High availability | Shadow Mode with second UDM Pro | Shadow Mode with second UDM SE | Shadow Mode with second UDM Pro Max | Shadow Mode with second UDM Beast |
| Guide price excluding VAT | CHF 385.19per device · exact price on request | CHF 508.68per device · exact price on request | CHF 610.64per device · exact price on request | CHF 1'528.31per device · exact price on request |
| Deliverability | On request | On request | On request | On request |
| Find out more | Product details →Inquire about product ↗Manufacturer details ↗ | Product details →Inquire about product ↗Manufacturer details ↗ | Product details →Inquire about product ↗Manufacturer details ↗ | Product details →Inquire about product ↗Manufacturer details ↗ |
When choosing, power supplies, port requirements and protection functions also count. Higher throughput alone does not automatically make a model a better choice.
| product |  Enterprise FirewallEFG-EU | Enterprise Firewall CoreEF-Core-EU |
|---|---|---|
| Area of application | Large companies and central locations | Campus and powerful network nodes |
| IDS/IPS throughput | Up to 12.5 Gbit/s | Up to 79 Gbit/s |
| Focus | 25G gateway with UniFi Network | 100G gateway with UniFi Network |
| Power supply | Two interchangeable power supplies | Two interchangeable power supplies |
| High availability | Shadow Mode with second EFG | Shadow Mode with second EF core |
| Guide price excluding VAT | CHF 2'140.09per device · exact price on request | CHF 3'567.57per device · exact price on request |
| Deliverability | Sold out from the manufacturer at the current price | On request |
| Find out more | Product details →Inquire about product ↗Manufacturer details ↗ | Product details →Inquire about product ↗Manufacturer details ↗ |
Wi-Fi coverage and performance depend on building, device and configuration. EU devices may require a suitable Swiss connection cable. Optional accessories, data carriers and additional paid services are only included if expressly stated.
Concrete starting points for planning. Rooms, wired workstations, applications and radio measurement determine the final equipment.
A small office
One gateway, eight switch ports and two access points as a starting point. The Gigabit switch limits the wired WLAN connection to 1 Gbit/s. No device redundancy.
More spaces, more collaboration
Two switches with a total of 32 network ports and four access points. 2.5 GbE ports for WiFi; Plan PoE and uplink reserve separately. The single gateway remains a central point of failure.
Multiple floors or work areas
64 network ports and eight access points as a planning example. The Pro Max switches are managed individually and do not form a true switch stack. The Enterprise version is intended for higher availability.
Non-binding CHF guide prices. Price status: September 15-16, 2026. Conversion: 1 EUR = CHF 0.9441 (ECB, September 15, 2026). Exact price on request. Not included: cabling, optics, rack accessories, power backup, installation and ongoing subscriptions. Quantities are planning examples, not guaranteed user or space capacities.
Planning assumption: “Enterprise Core” means two Enterprise Firewall Core. The number of E7 will be added after the WLAN planning.
Both WAN switches connect both firewalls
Redundant LAN uplinks
Connect both levels redundantly; connect the access stacks dual
Two cables for each E7 to different PoE switches
The overview shows the intended levels. The specific port, VLAN and cabling plan is created for the site. Internet providers should use different feeds; two contracts for the same line do not protect against failure.
| Hardware and task | number | Unit price | Total |
|---|---|---|---|
 WAN Switch →USW-WAN-EU One WAN switch per Internet provider, each with a connection to both firewalls. | 2 | CHF 254.91 | CHF 509.82 |
Enterprise Firewall Core →EF-Core-EU Two identical Enterprise Firewall Core in the Shadow Mode as active device and standby device. | 2 | CHF 3'567.57 | CHF 7'135.14 |
 Enterprise Campus Aggregation →ECS-Aggregation-EU Four Enterprise Campus Aggregation as two MC-LAG pairs; redundant connections between levels. | 4 | CHF 4'077.38 | CHF 16'309.52 |
 Enterprise Campus 48S PoE →ECS-48S-PoE-EU Three ring stacks with four switches each. Total 576 access ports; Distribute uplinks across different stack members. | 12 | CHF 4'077.38 | CHF 48'928.56 |
 UniFi 5G Max →U5G-Max An additional cellular path via the UniFi-LAN. Mobile phone contract and SIM/eSIM separately. | 1 | CHF 406.72 | CHF 406.72 |
| Guide price for basic hardware without E7, excluding VAT | CHF 73'289.76 | ||
Guide price per access point CHF 508.68 excl. VAT. WiFi 7, ten spatial data streams, PoE++ and two ports for redundant data and power supply.
Example with 12 E7: CHF 79’393.92
Example with 24 E7: CHF 85’498.08
Guide price for basic hardware including access points, excluding VAT. Exact price on request.
All amounts are non-binding guide prices. Exact price on request. Basic hardware is not a blanket offer for a ready-to-use system. Line failure, gateway failure, aggregation switch failure, stack member failure, and power path failure are provided as separate acceptance tests.
Plan enterprise project ↗Example situations – we tailor the specific implementation to your requirements.
For a manageable location, we compare Cloud Gateway Ultra and Max. Employees and guests receive separate networks; The selection takes activated protective functions and possible later expansion into account.
A company with its own rack receives a suitably sized UDM. Home office VPN, multiple VLANs and a second Internet connection are set up and tested with the applications actually used.
For a central network node, we check Enterprise Firewall and Enterprise Firewall Core. A supported gateway pair, separate provider handovers and defined failure tests form the basis of availability planning.
A compact UniFi cloud gateway is suitable for smaller locations. The UniFi Dream Machine, UDM for short, connects rack gateway and UniFi applications; The models differ in terms of performance, PoE and recording options, among other things. Enterprise Firewalls are aimed at larger networks. We compare the actual requirements instead of just the maximum throughput: Internet access, VPN, network areas and required applications provide the direction.
A firewall rule determines what traffic is allowed. Security zones combine network areas with similar requirements. IDS/IPS adds rules to detect or block suspicious patterns. Example: The guest WiFi is allowed on the Internet, but not on the internal storage; Cameras reach the Protect recorder. We check such connections specifically and document necessary exceptions.
A VPN connects authorized devices or locations via an encrypted tunnel. This allows a branch to access selected applications at the main location. We plan IP address ranges, clearances and the appropriate UniFi VPN configuration. With suitable UniFi gateways, Site Magic can simplify site networking. The bandwidth and running time of the Internet connection also influence usage.
Two Internet lines protect against a different failure than two gateways. Multi-WAN provides additional Internet paths; Shadow Mode enables a gateway pair on supported UniFi models. The overall Enterprise variant adds WAN switches and 5G backup. We check model compatibility, power supply and switching. Existing telephony or VPN connections can be interrupted when switching.
Selection depends on internet connections, enabled protection features, VPN and availability needs. UDM models and Enterprise Firewalls serve different needs. We plan segmentation and access rules together with WiFi and switches, then test the intended connections.
You receive an agreed scope covering hardware, setup and optional support. Product pages show indicative CHF prices; the final quotation takes your site into account.
Discuss your UniFi project ↗One-off implementation and ongoing support are agreed separately and comprehensibly. You know what services are included.
We clarify your requirements and record the current status.
We define the scope, those responsible and the order of implementation.
We set up the solution and check the agreed use cases.
We hand over the documentation and coordinate further support.
For smaller locations, compact cloud gateways are an option, for example UDM Pro, UDM SE or UDM Pro Max for a rack. The comparison takes into account Internet speed, IDS/IPS performance, VPN and required UniFi applications. The size of the company alone does not determine the model.
IDS/IPS also checks data traffic for suspicious patterns and uses computing power. Therefore, the throughput with activated protection functions is relevant for planning. Manufacturer values are guidelines; Configuration and actual data traffic influence the result.
No. An additional Internet connection creates an alternative route, but does not replace a second gateway or an independent power supply. For higher availability, we check suitable gateway pairs, WAN switches, 5G backup and other dependencies.
01 / Network & SecurityUbiquiti UniFi Complete solutions for Swiss companies: Plan WLAN, switching and firewalls together – from small offices to redundant campuses.
Discover solution02 / Network & SecurityUbiquiti UniFi WLAN for offices, SMEs and campuses: radio planning, WiFi 7 access points, guest access and roaming. Irontec plans, installs and maintains your solution.
Discover solution03 / Network & SecurityUbiquiti UniFi switches for Swiss SMEs and campuses: PoE, multi-gigabit, fiber optic uplinks, VLANs, aggregation and stacking, clearly planned and supported.
Discover solution
02 / Network & SecurityUbiquiti UniFi Protect Video surveillance for businesses: cameras, UNVR and local recording. Planning, installation and support in Switzerland.
Discover solutionIDS detects suspicious traffic patterns; IPS can block matching connections. The manufacturer mentions up to 12.5 Gbit/s for this model. This information is not a guaranteed speed for every configuration and does not replace proper firewall rules.
The manufacturer’s animation shows the device from different angles. Our product page explains its ports, performance and how it fits into your network.
Explore Enterprise Firewall →The product video in the header is hosted directly by Irontec. Playing it does not connect to Ubiquiti.
Source and product details: Ubiquiti ↗Companies and organisations using Ubiquiti UniFi with Irontec. The labels indicate which customers also use UniFi Protect.
Ubiquiti UniFi
Ubiquiti UniFi
A selection from the areas of web, collaboration and digital customer acquisition. Discover the implementation in the published project reports.
Financial Services
Website and collaboration connected.
Irontec relaunched the website and created a digital sales channel. The project also included Microsoft 365 with shared files and mailboxes, training and a peoplefone VoIP solution.
Read project reportEngineering
A new appearance for complex projects.
The project report describes the website relaunch with workshops, responsive implementation and search engine optimization. An individually developed reference function enables PDF creation from selected projects.
Read project reportAdvice
From the foundation to the digital workplace.
The website, logo and corporate identity were created together with a Microsoft-365 environment. Email, shared file storage and training supported collaboration across different work locations.
Read project reportTraining
Be found online. Simply register.
Irontec implemented a responsive website with contact and course registration. In addition, target groups and search terms were developed and four Google Ads campaigns were set up and optimized.
Read project reportThe project reports document the scope of services at that time.
Compare UniFi UDM Pro Max and Enterprise Firewall EFG: security throughput, ports, Protect and availability for Swiss businesses.
UniFi guest WiFi for Swiss SMEs: understand VLANs, firewall and client isolation, then check the result with a practical acceptance test.
Tell us what you're up to. We think along.