One UniFi firewall, and PoE for the devices on the cable

What the firewall and the PoE switch do for you.

The closet is where the business network becomes something you can run. One gateway is the firewall. One PoE switch powers what hangs on the cable. The numbers below are how we choose the size, not a price list.

1. One jack carries the device. Cameras, door readers, access points, and the air-quality sensor get power over the same ethernet drop. You are not pulling a second cord to the ceiling. A new jack stays on the cabling quote. This page does not redesign the cable.
2. A smaller site gets a desktop firewall. The Cloud Gateway Fiber is a desktop UniFi gateway with no Wi-Fi in the box. It runs Network, Protect, Access, Talk, and Connect, so the firewall, the cameras, and the doors share one console. Ports are four 2.5 GbE, one 10 GbE, and two 10G SFP+, with a 10G SFP+ and a 10 GbE port as the default WAN. Listed capacity is 50 or more UniFi devices, 500 or more clients, and a small camera count: 15 HD, 8 at 2K, or 5 at 4K. IDS/IPS throughput is 5 Gbps. That rate is inspection, not a port speed. An NVMe slot takes up to 2 TB for that small camera count. There is no picture of this gateway in the review set.
3. Its own PoE powers one device. The spec lists a 30W PoE budget. That can power one PoE+ access point or one camera. A site with several powered devices needs a PoE switch.
4. A larger site gets the rack firewall. The Dream Machine Pro Max is the gateway in the photos. Same apps, with room to grow: 200 or more devices, 2,000 or more clients, 150 access hubs, and cameras at 50 HD, 25 at 2K, or 15 at 4K. Two 10G SFP+ ports, eight 1 GbE ports, and one 2.5 GbE port. IDS/IPS is also 5 Gbps, and that is still the inspection rate, not a port speed. Two 3.5 inch drive bays plus a built-in 128 GB SSD. Shadow Mode is the listed gateway failover. The tech spec lists no PoE budget, so this gateway does not power the cameras. The switch does.
5. The firewall is why the gateway is there. On either gateway you get a stateful firewall, application-aware filtering, intrusion prevention, content filtering, and VLANs, managed in UniFi Network. Multi-WAN is on both spec sheets, so a second internet line has a place to land. Site-to-site VPN and remote access, including Site Magic, WireGuard, and Teleport, are license-free on the device. The line about 55,000 or more signatures is CyberSecure, an optional annual add-on. That pack is not included.
6. The switch is how the building stays powered. The Switch Pro Max 24 PoE is the switch in the photos. Every copper port is PoE: eight 1 GbE PoE+ ports, eight 1 GbE PoE++ ports, and eight 2.5 GbE PoE++ ports, plus two 10G SFP+ uplinks. Total PoE availability is 400W. The sheet lists 15.4W on a PoE port, 32W on a PoE+ port, and 60W on a PoE++ port. The 2.5 GbE PoE++ ports are the ones for Wi-Fi 7 access points.
7. We add up the watts before the switch is full. 400W is a shared budget, not a promise on every port. A long run delivers less than the port rating. The Pro Max 48 PoE, at 720W, is the larger switch in the same family when the 24-port budget or port count runs out. It is not the switch in the photos.

How it starts

1. Tell us about the building with the form on this page: a UniFi gateway, a PoE switch, Wi-Fi access points, or a look at a UniFi network already on site.
2. We look at the closet, the internet handoff, and the devices that need power. That visit is what the estimate is built from.
3. You get a written estimate that names the gateway, the switch, and the access points in the scope.
4. We install that scope, and you can see the firewall, the switch, and the access points in one UniFi console.