Ubiquiti UDM-Beast: Complete Australian Guide (2026)

What the UDM-Beast is — and who it is for

Most networks are built from separate boxes: a firewall, a switch, and a recorder for the cameras. The UDM-Beast collapses all three into one 1U unit and manages them from a single interface, with no per-device or per-camera licensing.

That consolidation is the point. It suits organisations that want serious capacity without a rack full of equipment — larger offices, warehouses and logistics sites, hospitality venues, and managed service providers standardising client sites on one hardware model. It is the top of the Dream Machine line, and the only one that combines multi-gigabit inspection with built-in 10 GbE switching and a large camera recorder.

Full specifications

What 25 Gbps of inspection actually means

The 25 Gbps figure is IDS/IPS throughput — traffic inspected with intrusion prevention switched on, which is the demanding measurement. Three practical implications:

• Your internet connection will never be the limit. Even a 10 Gbps business fibre service uses under half of it with full inspection running.
• Internal routing is where it gets consumed. Traffic crossing VLANs passes through the gateway — cameras writing to a recorder, staff pulling from a NAS, backups moving between segments. On a busy site that can dwarf internet traffic entirely.
• Headroom protects the experience. A gateway running near its inspection ceiling produces latency and jitter long before it produces any obvious failure.

For comparison, a UDM-Pro-Max inspects at 5 Gbps and the Enterprise Fortress Gateway at 12.5 Gbps. The Beast is the fastest inspecting UniFi gateway Ubiquiti publishes.

The eight 10 GbE ports — the underrated feature

This is the specification most buyers overlook, and it often changes the bill of materials more than the throughput does. The Beast includes eight 10 GbE RJ45 ports, each also negotiating 5G, 2.5G, 1G and 100M, alongside two 1 GbE ports, two 10G SFP+ and two 25G SFP28.

In effect the gateway includes a small 10-gigabit switch. Servers, a NAS, a video-editing workstation or the uplinks from your access-layer switches can plug straight in at full speed. On a modest site that can remove the need for a separate 10 GbE switch entirely.

UniFi Protect: 40 4K cameras inside the gateway

The Beast has two 3.5-inch drive bays and a built-in 128 GB SSD that accelerates the operating system and applications. It records up to 100 HD, 60 2K or 40 4K UniFi Protect cameras — a genuinely large surveillance system, with no per-camera licence fee.

Two practical notes. Drives are not included: fit surveillance-rated 3.5-inch drives sized to your retention target. As a guide, a 4K camera consumes roughly 30–50 GB per day of continuous recording, so twenty 4K cameras kept for 30 days needs in the order of 24 TB — which will exceed two bays, and is the point at which a dedicated recorder makes more sense. See our camera and NVR guide.

Users, devices and session scale

Three separate figures matter, and they are easy to conflate:

• 7,500+ simultaneous users — the phones, laptops, tablets and IoT devices connected at once.
• 750+ managed UniFi devices — the access points, switches and cameras the console adopts.
• 200 Access door hubs — so door count is rarely the limiting factor.

Its 32,000-entry MAC address table is also eight times that of the Dream Machine range, which matters on networks with very large numbers of connected devices.

One honest caveat: Ubiquiti does not publish concurrent-session or new-sessions-per-second figures for the Beast, where it does for the Enterprise Fortress Gateway (one million sessions, 71,000 per second). If your scaling problem is session churn — a school at bell time, a stadium concourse — that is worth weighing. We cover the distinction in UDM-Beast vs EFG.

Ports and connectivity in detail

• (2) 25G SFP28 — one is the default WAN; the other typically uplinks to an aggregation switch.
• (2) 10G SFP+ — additional fibre or DAC connectivity.
• (8) 10 GbE RJ45 — the built-in switch, for servers, storage and access-layer uplinks.
• (2) 1 GbE RJ45 — management and lower-speed devices.
• Up to 8 WAN ports can be configured for multi-WAN failover and load balancing.
• Console port for direct serial access.

SFP28 and SFP+ cages accept direct-attach copper (DAC) cables for short in-rack runs, which is substantially cheaper than optics.

Power, cooling and high availability

The Beast draws a maximum of 100 W from an internal 150 W supply and dissipates 342 BTU/hr. It also accepts a USP-RPS DC input for external redundant power, and supports Shadow Mode (VRRP) gateway failover, where a second console runs synchronised in standby and takes over automatically if the primary fails.

What it does not have is internal hot-swappable power supplies — that is the Enterprise Fortress Gateway's differentiator. If a failed power supply must be replaceable without any interruption, that is the model to look at.

It is an actively cooled 1U unit rated 0–40 °C, so it belongs in a rack or comms room rather than an occupied office, and ventilation deserves attention in an Australian summer.

What the UDM-Beast does not do

An honest guide should be as clear about limits as capabilities:

• No PoE. None of its ports power devices. You need a PoE switch for access points and cameras.
• No hot-swappable power supplies. Redundancy is via USP-RPS DC input and Shadow Mode failover.
• The standard threat-signature tier. 55,000+ signatures with CyberSecure, not the 95,000+ CyberSecure Enterprise tier used by the EFG and UXG Enterprise — and no published SSL/TLS inspection figure.
• No integrated WiFi. Access points are separate.
• Two drive bays only. Large camera counts with long retention need a dedicated NVR.

Designing a UDM-Beast deployment

Where the Beast makes sense

A logistics warehouse and office

Heavy inter-VLAN traffic between scanners, WMS servers and cameras is a throughput problem, and the 25 Gbps ceiling absorbs it. Servers connect directly to the 10 GbE ports, and fifteen to twenty cameras record in the same chassis — one box instead of three.

A managed service provider standardising sites

750+ managed devices and 7,500+ users per site mean one hardware model covers nearly every client, and Site Magic links them. Fewer SKUs to stock, fewer platforms to learn.

A large office consolidating a rack

Replaces a gateway, a small 10 GbE switch and an NVR with a single 1U unit — freeing rack space, power and cooling while raising throughput.

Where it is the wrong choice

Sites needing hot-swappable power redundancy, encrypted-traffic inspection or the 95,000-signature tier should look at the EFG instead. Sites under 2,000 clients should look at the UDM-Pro-Max.

How it compares to other UniFi gateways

Read the detail in UDM-Beast vs EFG, the three-way rack-mount comparison, or the Dream Machine range guide.