UniFi Cloud Gateway Max (UCG-MAX) Review: Specs, Performance, and Comparisons

The Cloud Gateway Max (UCG-MAX) is Ubiquiti's wired gateway for small and medium-sized offices. It combines routing, firewall, VPN, NVR storage, and the full UniFi application suite into a single fanless device roughly the size of a paperback book.

Nearly two years after launch, the UCG-MAX now competes alongside Ubiquiti's 2025 gateway lineup -- including models with 10Gbps ports and WiFi 7. This review covers where the UCG-MAX still makes sense, where the newer options pull ahead, and how to decide between them.

---

UCG-MAX Hardware Specifications and Features

The UCG-MAX features four 2.5 GbE LAN ports, one 2.5 GbE WAN port, and up to 2TB of NVMe storage for UniFi Protect. This compact form factor replaces the need for a separate Network Video Recorder (NVR) and cloud key, supports the full UniFi application suite, and is powered by a standard USB-C 5V/5A connection drawing a maximum of 16.1W.

Integrated UniFi Ecosystem Support

The UCG-MAX runs the full UniFi ecosystem locally. It supports:

• UniFi Network: For managing network devices and traffic
• UniFi Protect: For video surveillance
• UniFi Talk: For VoIP communications
• UniFi Access: For access control systems
• UniFi Connect: For remote device management

All five applications run locally on the device, eliminating the need for a separate Cloud Key or controller.

High-Speed Networking Capabilities

The device is equipped with 2.5 Gigabit Ethernet (GbE) ports:

• 1 x 2.5 GbE WAN port
• 4 x 2.5 GbE LAN ports (one remappable to WAN)

All ports exceed standard Gigabit Ethernet by 2.5x. For businesses requiring 10Gbps uplinks, the UCG Fiber is the better fit.

Built-in Storage for Security Footage

The UCG-MAX has a pre-installed 512 GB SSD module (1TB and 2TB options are also available) dedicated to UniFi Protect camera storage. According to Ubiquiti, this allows for:

• Up to 15 HD (1080p) cameras
• Up to 8 2K cameras
• Up to 5 4K cameras

The G6 camera series released in 2025, featuring enhanced 4K imaging and AI capabilities, pairs directly with the UCG-MAX's built-in NVR storage.

The UCG-MAX maintains a small physical footprint:

• Dimensions: 141.8 x 127.6 x 30 mm (5.6 x 5 x 1.2")
• Weight: 519 g (1.1 lb)
• Power method: USB Type-C (5V DC/5A)
• Power consumption: Maximum of 16.1W

The UCG-MAX is completely fanless and uses passive cooling, making it silent in operation. Under sustained load with IDS/IPS and Protect recording active, the aluminum chassis typically hovers around 40-45°C (104-113°F) -- warm to the touch but well within the operating range. Avoid stacking it directly on top of cable modems or other heat-generating equipment, and leave at least a few centimeters of clearance on all sides. The compact design and USB-C power delivery make it easy to deploy on a desk, in a network closet, or wall-mounted.

---

2025-2026 Gateway Landscape: How the UCG-MAX Compares

Ubiquiti expanded its gateway lineup in 2025 with 10-gigabit models, WiFi 7 integration, and PoE support. Here is how each option compares.

Find Your Perfect Gateway

Not sure which UniFi gateway is right for you? Use our interactive tool to get a personalized recommendation:

Dream Router 7 (UDR7)

The UDR7 is a compact WiFi 7 gateway with integrated tri-band wireless, 2.5GbE ports (including 1x PoE port for powering a single AP), 10G SFP+ WAN, and 64GB microSD storage. It offers 2.3 Gbps IDS/IPS throughput and supports up to 300 simultaneous users.

Cloud Gateway Fiber (UCG Fiber)

The UCG Fiber expands on the UCG-MAX concept with a 10G SFP+ port, a 10 GbE RJ45 port, and 5 Gbps IDS/IPS throughput. It includes M.2 NVMe storage support (up to 2TB) and 1x PoE+ port (802.3at, 30W) for powering a single access point or camera.

Express 7 (UX7)

The Express 7 offers WiFi 7 capabilities in an ultra-compact form factor, serving as either a standalone gateway or mesh node. It supports 6-stream 6GHz WiFi and 10GbE wired networking.

Dream Router 5G Max

The Dream Router 5G Max integrates a 5G cellular modem for built-in WAN failover without external hardware. If your site requires cellular backup today, the UCG-MAX can pair with an external LTE/5G modem (such as a Peplink or Netgear Nighthawk) connected to a secondary WAN port for automatic failover. The trade-off: the 5G Max bundles cellular failover and WiFi 7 into one device at $499, while the UCG-MAX plus a standalone modem offers more flexibility and component-level upgradability at a similar or lower combined cost.

---

iFeeltech Field Notes: Where We Deploy the UCG-MAX

Our network specialist shares where the UCG-MAX fits in our current project mix:

"For offices with 5-10 employees, sub-1 Gbps internet, and no dedicated server room, the UCG-MAX is still our default recommendation. The compact size and proven reliability make it easy to deploy in a desk drawer or behind a monitor. For clients with faster connections or plans for WiFi 7 access points like the U7 Pro XGS, we steer them toward the UCG Fiber or UDR7 instead."

Does the UCG-MAX Support Multi-Gigabit Internet?

The UCG-MAX's five 2.5 GbE ports handle internet connections up to 2.5 Gbps. That covers the majority of small business ISP plans today. For clients upgrading to the U7 Pro XGS or U7 Pro XG WiFi 7 access points, we recommend the UCG Fiber for its 10Gbps uplink.

---

What Is the Routing Speed of the UCG-MAX?

The UCG-MAX delivers 2.3 Gbps of routing throughput with IDS/IPS threat management enabled on UniFi OS 4.1 or newer. This is a significant upgrade from Ubiquiti's original 1.5 Gbps estimate. For VPN routing, expect 800-1000 Mbps using WireGuard, though OpenVPN speeds drop to 300-400 Mbps due to higher CPU overhead. ISPs requiring PPPoE authentication may cap speeds closer to 1 Gbps due to protocol overhead.

Gateway Throughput Comparison

How does the UCG-MAX stack up against the 2025-2026 gateway lineup?

For offices with internet connections up to 2 Gbps, the UCG-MAX handles routing and security without becoming a bottleneck. Networks requiring 10Gbps uplinks should look at the UCG Fiber.

Real-World Performance Benchmarks

Independent testing confirms these figures in real-world conditions:

PPPoE Users: Some ISPs using PPPoE may experience speeds capped around 1 Gbps due to protocol overhead. For maximum throughput, configure your ISP modem in bridge mode and let the UCG-MAX handle PPPoE authentication directly.

Processing Power and Memory

The UCG-MAX is equipped with:

• Quad-core ARM Cortex-A53 processor running at 1.5 GHz
• 3 GB DDR4 system memory
• 512 GB NVMe SSD (or selectable storage options up to 2TB)

This hardware handles network traffic, security cameras, access control, and VoIP for environments with up to 30+ UniFi devices and 300+ clients.

Multi-WAN and Failover

One of the four LAN ports can be remapped to a second WAN port, enabling load balancing across two ISP connections or automatic failover when the primary link drops. Failover is near-instantaneous. This works with cable, fiber, Starlink, or an external LTE/5G modem.

UniFi Protect Performance

The UCG-MAX doubles as a small-scale NVR supporting up to 15 HD cameras, 8 2K cameras, or 5 4K cameras (see storage details above). It is fully compatible with the G6 camera lineup released in 2025, including the G6 Bullet, G6 Turret, and G6 Instant.

CPU load under combined workloads: Running five G6 Pro Turrets at 4K while simultaneously pushing 2 Gbps of IDS/IPS-inspected traffic drives CPU utilization above 80%. In practice, plan for either full camera capacity or maximum IDS/IPS throughput, but not both at peak load. Reducing to three 4K streams keeps CPU headroom comfortable for concurrent high-throughput routing. Businesses requiring more cameras or higher throughput should consider the UCG Fiber for its faster storage I/O.

Camera Retention by Storage Option

How long can you store footage? This depends on your storage tier, camera count, and resolution:

Motion-only recording extends retention by 3-5x compared to continuous recording.

---

UCG-MAX Built-In Network Security Features

The UCG-MAX provides an application-aware firewall, VLAN segmentation, and 2.3 Gbps Intrusion Detection and Prevention (IDS/IPS). It natively supports content filtering and site-to-site VPNs, with optional CyberSecure ($99/year) integration for real-time threat intelligence powered by Proofpoint.

Intrusion Detection and Prevention System (IDS/IPS)

The UCG-MAX includes both Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) capabilities:

• Detects and blocks potential network threats in real-time
• Operates at speeds up to 2.3 Gbps (with UniFi OS 4.1+), minimizing impact on network performance

For comparison, the UCG Fiber reaches up to 5 Gbps IDS/IPS throughput for networks that need more headroom.

Application-Aware Firewall

The application-aware firewall offers granular control over network traffic:

• Creates specific rules based on application types
• Allows or blocks traffic based on the application, not just port numbers

For example, you can allow specific cloud storage services while blocking others, or permit video conferencing while restricting file-sharing applications.

Content Filtering and CyberSecure

The UCG-MAX includes built-in content filtering:

• Blocks access to inappropriate or harmful websites
• Customizable filtering rules to align with company policies
• Support for Ubiquiti's CyberSecure subscription service (powered by Proofpoint)

The UCG-MAX is compatible with CyberSecure ($99/year), which adds real-time threat intelligence and enhanced URL filtering. Larger enterprise gateways support CyberSecure Enterprise ($499/year), but for most small business deployments the standard tier covers the essentials.

VLAN Support and Network Segmentation

The UCG-MAX supports Virtual Local Area Networks (VLANs) for network segmentation:

• Create up to 10 separate networks under the intrusion prevention system
• Isolate different types of devices or departments for improved security

Common uses include separating guest Wi-Fi from the corporate network and isolating IoT devices from sensitive data systems.

Integrated Security with UniFi Protect

When paired with UniFi Protect cameras, the UCG-MAX adds:

• Smart detection capabilities for identifying people, vehicles, and license plates
• Secure storage of video footage on the built-in 512 GB SSD (with 1TB and 2TB options)
• Compatibility with the new G6 camera series and enhanced AI features

The G6 PTZ camera and other 2025 releases add pan-tilt-zoom tracking and improved AI detections, all managed through the UCG-MAX's Protect interface.

---

How to Set Up and Manage the UCG-MAX

The UCG-MAX runs the standard UniFi Network application locally -- the same dashboard used on every other UniFi gateway. If you have managed a Dream Machine or Cloud Key before, the interface is identical. Setup takes under 10 minutes via the mobile app or web browser.

What is specific to managing the UCG-MAX:

• Protect storage management: The built-in NVMe drive appears as a local Protect recording target. You can monitor drive health, adjust retention policies per camera, and switch between continuous and motion-only recording directly from the Protect dashboard. If you swap the NVMe drive for a larger one, all footage is erased -- plan your storage tier at purchase time when possible.
• UniFi OS 4.1+ firmware: The IDS/IPS throughput improvement from 1.5 to 2.3 Gbps is delivered through firmware, not hardware. Make sure automatic updates are enabled, or manually update via Settings > System > Firmware to get the latest performance and security patches.
• Zone-Based Firewall (Network 9.0+): The newer firewall engine simplifies rule creation compared to the legacy interface. If your UCG-MAX is still running older firewall rules, migrating to the zone-based model is worth the effort for cleaner configuration.
• Site-Magic SD-WAN: For multi-site deployments, the UCG-MAX supports Ubiquiti's Site-Magic mesh VPN. This is configured at the site level in the UniFi portal and requires no additional licensing.

---

Should You Upgrade from the USG or Dream Machine?

If you are running a USG, USG-Pro, or first-generation Dream Machine, the UCG-MAX is a meaningful step up. Here is what changes:

The biggest practical gains are IDS/IPS speed (from unusable on the USG to full line-rate on the UCG-MAX) and integrated NVR storage. If you were running a Cloud Key Gen2 Plus alongside your USG for Protect recording, the UCG-MAX consolidates both into one device.

When to skip the UCG-MAX and go straight to the UCG Fiber or UDR7: If your current internet plan exceeds 1 Gbps or you are planning a WiFi 7 AP deployment, the older UCG-MAX port speeds will become a bottleneck faster than you would like. In that case, the UCG Fiber ($279) gives you 10Gbps ports at the same price as the UCG-MAX with 512GB storage.

---

Pros and Cons: 2026 Perspective

Here is an honest look at what the UCG-MAX does well and where it falls short against the current lineup.

Pros

1. Proven Reliability: Nearly two years on the market with consistent firmware updates and stable performance in production environments.

2. Flexible Pricing: Starts at $199 (no storage) or $279 (512GB), with NVMe upgrade options up to 2TB.

3. All-in-One Form Factor: Router, firewall, VPN gateway, and NVR in a single fanless box -- fewer devices to manage, power, and troubleshoot.

4. 2.3 Gbps IDS/IPS: Matches the UDR7's security throughput after the UniFi OS 4.1+ firmware update, sufficient for most small business connections.

5. Full Security Stack: IDS/IPS, application-aware firewall, content filtering, and optional CyberSecure ($99/year) without needing a separate security appliance.

6. Built-In NVR Storage: Configurable NVMe storage for UniFi Protect eliminates a separate recorder and supports the latest G6 cameras.

Cons

1. No Integrated WiFi: Unlike the UDR7 and Express 7, the UCG-MAX doesn't include built-in WiFi, requiring separate access points for wireless networking.

2. No 10Gbps Ports: The UCG-MAX's 2.5 GbE ports limit future upgrade potential compared to the UCG Fiber's 10G SFP+ and 10 GbE RJ45 ports.

3. No Built-in PoE: Unlike the UDR7 (1x PoE) and UCG Fiber (1x PoE+), the UCG-MAX has no PoE ports—you'll need a separate PoE switch or injectors.

4. Storage Limitations for Large Deployments: The 512 GB base storage may be insufficient for extensive 24/7 video recording with higher-resolution G6 cameras.

5. NS Version Requires Sled Purchase: If you buy the $199 "No Storage" version, you must separately purchase the NVMe sled accessory (~$20) to add storage later.

---

When to Choose Each Gateway

---

Is the UCG-MAX Still Worth It in 2026?

The UCG-MAX makes the most sense when your priorities are cost, proven stability, and NVR integration rather than cutting-edge port speeds or built-in WiFi. If your office runs a standard broadband connection, a handful of cameras, and a few UniFi access points, the UCG-MAX handles all of that without needing extra hardware beyond the APs themselves.

Where it falls short is future-proofing. If you are signing up for a 2.5+ Gbps fiber plan, deploying WiFi 7 APs that need 10Gbps uplinks, or want cellular failover built in, the newer gateways are the better investment. Refer to the gateway recommendation guide above for a side-by-side decision framework.

---

Frequently Asked Questions

Can I upgrade the storage later on the UCG-MAX?

Yes, but with limitations. The UCG-MAX uses an M.2 NVMe slot. If you purchased the "No Storage" (NS) version, you'll need to buy the NVMe sled separately (sold by Ubiquiti). If you have a pre-installed drive, you can replace it with a larger NVMe SSD up to 2TB. Note that replacing the drive will erase all stored Protect footage.

Does the UCG-MAX support WiFi 7 access points?

Yes, the UCG-MAX can manage WiFi 7 access points like the U7 Pro and U7 Pro Max. However, the UCG-MAX's maximum port speed is 2.5 Gbps, so you won't be able to fully utilize WiFi 7 access points that require 10Gbps uplinks (like the U7 Pro XGS). For those, consider the UCG Fiber or UDR7 with their 10G SFP+ ports.

What's the difference between UCG-MAX and UXG-Max?

The UCG-MAX is a Cloud Gateway that runs the full UniFi OS locally, including UniFi Network, Protect, Talk, Access, and Connect. The UXG-Max is an Independent Gateway that requires an external UniFi controller (like a Cloud Key or self-hosted). The UCG-MAX also includes NVMe storage and a display screen, while the UXG-Max does not.

Is the UCG-MAX fanless? How loud is it?

Yes, the UCG-MAX is completely fanless with passive cooling and is silent in operation. It runs warm under sustained load but stays within safe thermal limits. See the hardware specifications section above for placement recommendations.

Can I use the UCG-MAX with a 5G/LTE modem for backup internet?

Yes, you can configure one of the LAN ports as a second WAN port for failover or load balancing. Connect your 5G/LTE modem (like Starlink or a cellular hotspot) to this secondary WAN port. The UCG-MAX will automatically failover when your primary connection drops. For integrated 5G, see the Dream Router 5G Max ($499).