UDM Pro vs UDM SE vs UDM Pro Max: Which UniFi Dream Machine in 2026?

The three at a glance

Ubiquiti's Dream Machine line is a family of all-in-one UniFi consoles: each is a security gateway, a small switch, and a server running the UniFi Network, Protect, Access and Talk applications — in a single 1U rack-mount box with no licensing or subscription fees. The three rack models sold in Australia today are the UDM-Pro, the UDM-SE (Special Edition) and the UDM-Pro-Max.

Full specification comparison

Every figure below is from Ubiquiti's published specifications.

The PoE question (read this first)

This is the difference that changes what you actually have to buy, and it is the one most people get wrong: the UDM-SE is the only Dream Machine with Power over Ethernet. It provides a 180 W budget across eight ports supporting PoE (15.4 W) and PoE+ (30 W). The UDM-Pro and the UDM-Pro-Max have no PoE at all — their RJ45 ports are data only.

That matters because almost everything you plug into a UniFi network wants power over its network cable: access points, cameras, door readers, and phones. If your console has no PoE, you need either a PoE switch or individual PoE injectors for every device.

What 180 W of PoE actually powers

As a rough guide, a UniFi access point draws roughly 10–25 W depending on model, a 4K Protect camera around 10–20 W, and an Access reader about 5–6 W. A UDM-SE can therefore comfortably run a small site — say four access points and three or four cameras — with headroom. Beyond that, or if you need PoE++ (60 W) and PoE+++ (90 W) devices such as the UniFi E7 access point or PTZ cameras, you want a dedicated PoE switch regardless of which Dream Machine you choose.

Internet speed, WAN ports and multi-WAN

All three models accept up to eight WAN connections for failover and load balancing, and all three ship with a 10G SFP+ WAN port. The difference is the copper WAN port:

• UDM-Pro: the RJ45 WAN port is 1 GbE only. On a connection faster than 1 Gbps you must use the 10G SFP+ port (with an appropriate module or DAC) to get full speed.
• UDM-SE and UDM-Pro-Max: the RJ45 WAN port is 2.5 GbE, so a multi-gigabit service plugs straight in with a standard Ethernet cable.

With Australian NBN and fibre plans now routinely exceeding 1 Gbps, this is a real consideration. If your service is delivered on copper Ethernet from an NTD or fibre bridge and runs faster than gigabit, the SE and Pro Max save you sourcing an SFP+ module.

Does IDS/IPS limit my internet speed?

It can. Intrusion detection and prevention inspects traffic in real time, and each model publishes a maximum inspection throughput: 3.5 Gbps on the Pro and SE, 5 Gbps on the Pro Max. If your internet plan is slower than those figures — which covers essentially every Australian business connection — you can run full IDS/IPS without throttling your service.

UniFi Protect: cameras and recording

Every Dream Machine can run UniFi Protect and record cameras directly, with no per-camera licence fee — one of the strongest arguments for the platform. Capacity differs significantly:

Two practical notes. First, drives are not included with any model — you add surveillance-rated 3.5-inch hard drives sized to your retention requirement. Second, the built-in 128 GB SSD in the SE and Pro Max is not camera storage; it accelerates the operating system and applications, which makes the interface noticeably more responsive.

Clients, devices and access doors

Three separate numbers matter, and they are easy to confuse:

• Clients — the phones, laptops, tablets, TVs and IoT devices connecting to your network. 1,000 on the Pro and SE, 2,000 on the Pro Max.
• Managed UniFi devices — the access points, switches and cameras the console adopts and manages. 100+ on the Pro and SE, 200+ on the Pro Max.
• Access door hubs — 150 on all three, so door count is rarely the deciding factor.

For context, a 60-person office with laptops, phones and IoT typically sits somewhere between 200 and 400 clients, which any of the three handles comfortably. A busy café, school hall or function venue where hundreds of guest phones come and go is where the Pro Max's 2,000-client ceiling starts to earn its money.

IDS/IPS and security performance

All three models include the same security feature set: an application-aware firewall, intrusion detection and prevention with 55,000+ threat signatures via CyberSecure, VPN server support, VLAN segmentation and DNS filtering — with no subscription attached to the core features.

The difference is horsepower. The Pro Max inspects at 5 Gbps against 3.5 Gbps on the Pro and SE, and has double the memory (8 GB vs 4 GB), which matters most when you are running several UniFi applications at once — Network, Protect, Access and Talk together on a busy site.

Power, heat, noise and rack space

All three are the same physical size — a standard 1U, 442 mm wide, 285.6 mm deep — and all three carry a 1.3-inch touchscreen on the front for status and quick setup. Power draw is modest: 33 W on the Pro, 50 W on the SE excluding PoE output, and 60 W on the Pro Max, with heat output of 112, 170 and 205 BTU/hr respectively.

All three accept a USP-RPS redundant power supply for DC backup, and all three support Shadow Mode (VRRP) gateway failover, where a second console stands by to take over if the primary fails.

They are actively cooled and audible in a quiet room, so a comms cupboard or rack is a better home than an open office. Operating temperature is rated -10 to 40 °C — worth remembering in an unventilated Australian ceiling space or a western-facing comms room in summer.

Which one should you buy?

Choose the UDM-Pro if…

You already own — or are buying — a PoE switch, your internet is 1 Gbps or you can use the SFP+ WAN, and your site sits comfortably under 1,000 clients with fewer than eight 4K cameras. It is the most economical entry into a rack-mount UniFi console and shares the same software experience as its siblings. View the UDM-Pro →

Choose the UDM-SE if…

You want one box to run and power a small site. The 180 W PoE budget removes the need for a separate switch in small deployments, the 2.5 GbE WAN handles multi-gigabit internet directly, and the 128 GB SSD makes the interface snappier than the Pro. View the UDM-SE →

Choose the UDM-Pro-Max if…

Capacity is your constraint: more than 1,000 clients, more than 100 UniFi devices, more than eight 4K cameras, or you want two drive bays for longer retention or drive redundancy. The faster processor and 8 GB of memory also make it the better host when you run Network, Protect and Access together. View the UDM-Pro-Max →

What else you need alongside a Dream Machine

When to step up to a Beast or EFG

The Dream Machine range covers most Australian small and medium sites. You have outgrown it when any of these become true:

• You need more than 2,000 clients or 200 UniFi devices.
• You want threat inspection well beyond 5 Gbps.
• You need hardware power redundancy inside the chassis, not just a DC backup input.
• You are running many sites and want a dedicated management server.

At that point the UDM-Beast (25 Gbps inspection, 750+ devices, 7,500+ clients, eight 10 GbE ports and two NVR bays) and the Enterprise Fortress Gateway (95,000+ threat signatures, one million concurrent sessions and dual hot-swappable power supplies) take over. Both are covered in detail in our UniFi Cloud Gateway guide.