UniFi Cloud Gateway Max Review: Is It Right for a Home Office or Small Business?
A compact, capable brain for a growing UniFi network — as long as you know it's not the whole network.
By John Hall — TechODash
Quick Verdict
The most important thing to understand up front: the Cloud Gateway Max is not a Wi-Fi router. It's a compact wired gateway, firewall, and UniFi controller in one small box. Out of the box it gives you internet routing, security, and a single pane of glass for managing UniFi access points, switches, cameras, and door access — but it has no built-in Wi-Fi and no PoE ports to power access points. In practice it's the "brain" of a network that will usually also include a separate Wi-Fi access point, and often a PoE switch.
Why This Product Matters
In a SOHO or remote-work setup, the gateway is the single point where your internet meets your private network. A consumer router usually combines Wi-Fi, a small switch, and a basic firewall in one plastic box — convenient, but hard to segment, hard to see what's happening, and limited on security. The Cloud Gateway Max takes a different approach. It runs Ubiquiti's UniFi OS, which means one console manages your firewall rules, VLANs, VPN, traffic insights, and — if you add the storage — your UniFi Protect security cameras. You pair it with whatever access points and switches fit your space, which lets you scale the network as your home office or small business grows instead of throwing the whole box away when you outgrow it. For a home office, that means real VLAN isolation between work devices, smart-home gadgets, and guests. For a small business, it means a credible firewall, VPN for remote staff, and optional camera recording — all managed from a phone or browser.
Who It's Best For
- Remote workers and creators on a 1–2 Gbps fiber or cable connection who want a real firewall and VLANs, not just a consumer router
- Small offices (roughly 1–15 people) that want enterprise-style controls without enterprise licensing fees for the basics
- People already in the UniFi ecosystem (an existing UniFi access point or switch) who want a modern controller to tie it together
- Home-lab tinkerers who value local control, traffic analytics, and optional self-hosted NVR storage
- Households that want guest Wi-Fi and IoT segmentation done properly, and are OK buying a separate access point
Who Should Skip It
- Anyone who wants one box that does Wi-Fi and routing out of the box — a UniFi Dream Machine or Express 7 fits that better
- Total beginners who expect a 10-minute consumer-router setup with no further reading — UniFi is friendlier than it used to be, but it's still an "ecosystem"
- Offices that need 10G wired ports, a built-in PoE switch, or redundant/failover gateway hardware — this has none of those
- Budget-limited buyers who would have to also purchase an access point and possibly a PoE switch on top of the gateway — if your total budget is one box, this is the wrong starting point
Key Features That Matter
Five 2.5GbE ports: one default WAN and four default LAN ports, all 2.5GbE, with UniFi role assignment supporting multi-WAN load balancing and failover (up to four WAN connections) — plenty for a gigabit-plus home office, though there's no 10G option. Full UniFi application suite: runs Network, Protect, Access, Talk, and Connect — so the same box manages routing, cameras, door access, VoIP, and more, up to about 30 managed UniFi devices and 300+ simultaneous clients. Selectable NVMe NVR storage: a single M.2 NVMe slot (up to 2 TB) for UniFi Protect camera recording — but it's variant-dependent; the no-storage model ships without a drive, so you must add storage (or use a separate NVR) before recording cameras. Compact, silent, low power: about the size of a small book, fanless, USB-C powered (~16 W max), with a 0.96" status display — it sits on a desk or shelf silently, no rack required. License-free basics: stateful firewall, application-aware Layer 7 firewall, deep packet inspection, VLAN segmentation, multi-WAN, SD-WAN, and several VPN options are included without recurring fees.
Performance and Reliability
Ubiquiti publishes IPS routing of up to 2.3 Gbps with security enabled (raised from the 1.5 Gbps figure quoted at launch via a Network 9 update), on 2.5GbE ports. In practical terms, that means a 1 Gbps connection is handled comfortably, and a 2 Gbps fiber plan is largely covered — though real throughput can drop under PPPoE, heavy inspection, VPN, or unusual topologies, so treat 2.3 Gbps as a ceiling, not a promise. Capacity is rated for 300+ simultaneous clients and 30+ managed UniFi devices, with camera support up to roughly 15 HD, 8 2K, or 5 4K cameras. For a home office or small business that's generous headroom. The hardware is fanless and low-power, so reliability on the bench is good; just keep in mind this is published manufacturer and third-party review information, not long-term hands-on testing.
Security Review
For a SOHO context, the included security is genuinely strong for the price. Out of the box you get a stateful firewall, an application-aware Layer 7 firewall, deep packet inspection, zone-based filtering by region/domain/app, content filtering, ad blocking, and signature-based intrusion prevention (IPS/IDS) — all without a subscription. VPN is well covered too: WireGuard, OpenVPN, L2TP, IPsec, site-to-site via Site Magic, and the zero-config Teleport VPN for quick remote access from a phone or laptop. Where it's honest about its limits: the expanded threat intelligence is a paid add-on. CyberSecure is an optional ~$99/year per-site subscription that adds a larger Proofpoint-powered signature library (55,000+ signatures on this model), Cloudflare-powered content filtering with 100+ categories, geographic blocking, and weekly threat updates. The base device is usable and secure without it; CyberSecure is an enhancement, not a requirement. Two more honest notes: UniFi Identity Endpoint (one-click VPN, Teleport) is free, but Identity Enterprise (MFA, directory, custom roles) is paid at about $5/user/month or $4.50/user/month annually with a five-user minimum. And this is network-edge security — it does not replace endpoint antivirus, email/phishing protection, backups, or a real managed-IT layer for a business with compliance needs.
First Settings I Would Change
- Adopt and claim the site — use the UniFi mobile app over Bluetooth to adopt the gateway, claim the site to your UniFi account, set a strong admin password, and enable two-factor authentication.
- Update UniFi OS first — let it install the latest firmware before you start building rules, so you're configuring on the current code base.
- Set your WAN correctly — if your ISP uses PPPoE or a static IP, configure it; if you have a backup connection, set up multi-WAN failover.
- Review your LAN subnet — change the default subnet if it collides with a work VPN, and set a sensible DHCP range.
- Turn on the free security features — enable IDS/IPS, content filtering, and ad blocking; these are included and only take a few clicks.
- Segment your network — create separate VLANs for work, IoT/smart-home, and guests, and restrict guests/IoT from reaching your work VLAN.
- Set up remote access thoughtfully — enable Teleport for zero-config VPN to your home office from your phone and laptop, rather than opening ports.
- Decide on Protect — if you want cameras, install the NVMe SSD (or use a separate NVR with the no-storage model) and set recording retention before you add cameras.
Setup Difficulty
Rating: Beginner to Intermediate — initial adoption is genuinely friendly; the mobile app walks you through claiming the device and getting online in minutes. What pushes it past "pure beginner" is the ecosystem thinking: understanding sites, adopting access points and switches, designing VLANs, and choosing VPN options. If you're willing to follow a guide, it's very doable. If you want zero decisions, a consumer all-in-one router is the easier path.
Pros
- Strong, subscription-free security basics (firewall, IPS/IDS, DPI, VLANs, multi-WAN, VPN)
- Five 2.5GbE ports and ~2.3 Gbps of inspected routing — ready for gigabit-plus internet
- Full UniFi app suite in a tiny, silent, low-power desktop box
- Optional NVMe storage turns it into a local, fee-free security-camera NVR
- One console for network, cameras, access, and phones — scales instead of getting replaced
- Cloud-assisted management, but the controller also runs locally
Cons
- No built-in Wi-Fi, no PoE ports, and no 10G ports — you'll almost always buy an access point (and often a PoE switch) too
- Only five total ports and no built-in switch, so wired device count needs a separate switch
- NVR storage is variant-dependent; the no-storage model needs a drive (or separate NVR) before Protect works
- CyberSecure threat intelligence and Identity Enterprise are extra-cost subscriptions
- UniFi ecosystem concepts (sites, adoption, VLANs) nudge it above true beginner level
- USB-C power means it depends on the included adapter — not a rack device, no redundant power
Best Alternatives
| Alternative | Why Consider It |
|---|---|
| UniFi Cloud Gateway Ultra | Budget step-down for basic gigabit internet — 1 GbE ports, 1 Gbps IPS, no NVR storage, lower power (~$129) |
| UniFi Cloud Gateway Fiber | Multi-gig fiber or growing small business — 5 Gbps IPS, SFP+ 10G WAN, 4x 2.5GbE LAN, PoE output, 50 devices/500 clients (~$279 no storage) |
| UniFi Express 7 | People who want Wi-Fi in one compact box — built-in Wi-Fi 7, 10G WAN + 2.5G LAN, but only 2 ports total (~$199) |
| UniFi Dream Machine SE | All-in-one with switch, PoE, and NVR in one chassis — rackmount, 8-port PoE switch, 3.5" HDD bay, 2x SFP+, touchscreen (~$499–$649) |
| UniFi Dream Machine Pro Max | Larger small businesses that need scale and redundancy — rackmount, 5 Gbps IPS, 10G SFP+, RAID NVR, 200+ devices, Shadow Mode failover (~$599) |
Final Verdict: Better as Part of a Larger System
The Cloud Gateway Max is an excellent wired core for a home office or small business — compact, quiet, well-secured out of the box, and capable of running your whole UniFi network and cameras from one console. But it's deliberately not a standalone router: with no Wi-Fi, no PoE, and no built-in switch, you'll almost always pair it with at least an access point. If you accept that it's the brain of a small ecosystem rather than a one-box solution, it's a smart, scalable buy. If you just want one box that does everything out of the gate, look at the Express 7 or a Dream Machine instead.
FAQ
Does the Cloud Gateway Max include Wi-Fi?
No. It has no built-in access point. You pair it with a separate UniFi Wi-Fi access point (wired or meshed) for wireless coverage.
Do I need to pay a subscription to use it?
No recurring fee is required for routing, the firewall, IPS/IDS, VLANs, multi-WAN, and the included VPN options. CyberSecure (~$99/year) is optional and adds expanded Proofpoint/Cloudflare threat intelligence; UniFi Identity Enterprise is also optional and paid.
Can it record security cameras?
Yes, if you have a storage variant or add an NVMe SSD (up to 2 TB). The no-storage (UCG-Max-NS) model needs a drive or a separate UniFi NVR before it can record UniFi Protect cameras.
How fast is it on a gigabit connection?
Comfortable. Its 2.5GbE ports and ~2.3 Gbps inspected routing handle 1 Gbps internet with headroom, and a 2 Gbps fiber plan in most cases, though real throughput can dip under PPPoE, heavy inspection, or VPN.
Is it beginner-friendly to set up?
Initial setup is guided through the UniFi mobile app and is genuinely approachable, but designing VLANs and adopting access points leans toward "beginner to intermediate" rather than a fully automatic consumer-router experience.
Where to Go From Here
Want the full picture on securing your home office network? SOHO 2026 covers it end to end.
Get SOHO 2026 →This review is part of the TechODash SOHO Reviews series, built for home offices, remote workers, creators, and small businesses that want practical protection without enterprise complexity.