🛒
If you want a UniFi console but feel taken aback by the sizeable rack-mount physical appearance of the UDM-SE or the newly released UDM-Pro Max, the Cloud Gateway Max (UCG-Max) is the answer. It's a compact eye candy.
However, as it turns out, the cool design is the least exciting about this thing. At the suggested retail price starting at only $199 (no storage included), the UCG-Max, among other things, is the best non-Wi-Fi router you can get. It's a super powerful piece of hardware that has almost everything—so much so that its lack of 10Gps ports is so painful for those who want everything.
Here's the bottom line: If you're happy with the 2.5Gbps multi-Gigabit wired grade, get the Cloud Gateway Max today, and when you're at it, also grab a U7 Pro Max on the way out to complete your network with Wi-Fi 7.
You won't be disappointed.
Dong's note: I first published this piece on July 16, 2024, as a preview and updated it on September 7 to an in-depth review after thorough hands-on testing.
Cloud Gateway Max: Impressive power in a tiny box
In most cases, you can think of the Cloud Gateway Max as a non-Wi-Fi router—it has no built-in Wi-Fi access point.
Having no Wi-Fi can actually be a good thing since the gateway itself never gets "obsolete"—like the case of the UDR or UDM. All you need is an access point (AP) to add Wi-Fi to the network, and if you get one of the available UniFi APs, you can manage them directly from the gateway itself.
And that's because, by design, this UCG-Max is much more than a typical router. It's a UniFi console, a compact, non-mounting version of the UDM-SE or the UDM Pro Max. They share the same UniFi OS and can host the full suite of UniFi applications for device management in Ubiquiti's "Enterprise of Things" approach.
Specifically, you can use the Cloud Gateway Max to handle multiple hardware categories (called "applications" by Ubiquiti) for different services, including:
- Network: All things related to the function of a network, including network settings/features, Wi-Fi, mesh, and the support for Wi-Fi access points, etc. This is the default application of any UniFi console and is where it works similarly to a traditional "router".
- Protect: The support for IP cameras as a surveillance system. The console can work as the NVR. This is where the hardware's local storage space is necessary.
- Talk: The support for Voice over IP phones. This app may also use the console's storage to hold recordings.
- Access: A "platform designed for Access Control Systems"—per Ubiquiti. Examples are door-related security IoT devices, such as doorbells, keyfobs, locks, etc.
- UID (UniFi Identity): A premium feature for enterprises that allows single sign-on across multiple hardware platforms and applications.
- Connect (currently in Early Access): A fully integrated "Enterprise of Things" hardware and software solution that works with UID to simplify IT management for organizations.
Each of these apps is a world of its own, and I generally only cover Network.
As a UniFi controller, the compact UCG-Max is inferior to the full-size counterparts in the sense that, no matter how many among the above apps you want to use simultaneously, it can handle a maximum of up to only 30 UniFi devices (such as Wi-Fi access points or IP Cameras/phones).
If that sounds low, the truth is that 30 UniFi devices are plenty for most homes and small businesses—for example, chances are you won't need more than a few access points and no more than half a dozen IP cameras. In terms of devices used by end-users, the gateway can handle up to 300 concurrent clients.
So, the UCG-Max is plenty powerful enough in most cases. I can't think of anyone I know who would need more than what it has to offer in terms of features and hardware support.
Cloud Gateway Max vs. Gateway Max vs. Cloud Gateway Ultra: In a way, the Cloud Gateway Max is a more souped version of the UDR. Ubiquiti has other devices with similar physical designs, such as the Gateway Max or the Cloud Gateway Ultra, which are much less capable since they are not UniFi consoles. The Ultra, for example, is a Gigabit gateway that can run only the Network application.
As a UniFi console, the Cloud Gateway Max is the same as the rest in terms of setup and management. To get the most out of it in the most convenient way, you need an account with Ubiquiti. After that, you can log in, set it up, and manage the entire system via the cloud-based unifi.ui.com web portal or the UniFi mobile app.
Ubiquiti and your privacy
Generally, Ubiquiti requires or insists on a vendor-connected login account before you can use its hardware via a mobile app or the cloud-based interface with remote management and other conveniences. Logging in with a vendor translates into privacy risks.
UI account and UniFi consoles
Here's the link to the U.S. networking company's privacy policy.
Online privacy and security are a matter of degree. Different companies handle their users' data differently.
You can skip the login account and opt for the local web user interface, accessible via the default IP address, which is 192.168.1.1, but things are a lot less convenient, especially if you want to handle your network on the go.
In any case, if you have used any of Ubquiti's UniFi "routers" before, you'll feel right at one with the UCG-Max. Generally, within the same firmware level, you can also easily export the configuration of one unit and port it onto another.
The table below shows the specs of the UCG-Max and the UDM-SE.
Cloud Gateway Max vs. UDM-SE: Hardware specfications
 |  | |
|---|---|---|
| Full Name | Ubiquiti Cloud Gateway Max | Ubiquiti UniFi Dream Machine Special Edition |
| Model | UCG-Max | UDM-SE |
| Built-in Wi-Fi Bandwidth | None | |
| Processing Power | Quad-core ARM Cortex-A53 at 1.5 GHz, 3GB RAM | Quad-core ARM Cortex-A57 at 1.7 GHz, 4GB RAM |
| Routing Bandwidth (with security turned) | 1.5 Gbps | 3.5Gbps |
| Storage | 1x NVMe storage slot | 16GB eMMC, Integrated 128GB SSD, 1x 3.5-inch SATA storage bay |
| Dimensions | 5.6 x 5 x 1.2 in (141.8 x 127.6 x 30 mm) | 17.4 x 1.7 x 11.2 in (442.4 x 43.7 x 285.6 mm) |
| Weight | 1.1 lb (519 g) | 10.9 lb (4.95 kg) |
| Gigabit Ports | None | 8x LAN |
| PoE Ports | None | 6x 802.3af (PoE) 2x 802.3at (PoE+) |
| Multi-Gig Ports | 1x 4x 2.5GBASE-T WAN 4x 2.5GBASE-T LAN (or WAN) | 1x 2.5GBASE-WAN or LAN 1x 10Gbps SFP+ WAN or LAN 1x 10Gbps SFP+ LAN |
| Power Method | USB-C | Universal AC input, USP-RPS DC input |
| Supported Voltage | 100 -240V AC | |
| Power Consumption (per 24 hours) | ≈390 Wh | ≈ 430 Wh (measured with no PoE device connected) |
| Internal Fan | No | Yes |
| Notable Design | Palmzise compact, 0.96" LCM status display | Standard rackmount, 1.3" touchscreen |
| Default UniFi Application | Network | Network: Up to 75 access points/extenders |
| Optional UniFi Applications | Protect, Talk, Access, UID, and Connect (No more than 30 UniFi devices among all apps) | Protect: Up to twenty HD cams, twelve 2K cams, or seven 4K cam Talk: Up to 100 IP phones Access: Up to 50 doorbells UID: A premium enterprise feature for easy access across multiple platforms and locations. Connect: The support for new types of products, including UniFi screens and EV chargers. |
| Simultaneous Applications Support | All (limited by available resources) | |
| Release Date | July 16, 2024 | January 22, 2022 |
| US Cost (at launch) | Available options: $199 (no storage) $279 (512GB) $349 (1TB) $479 (2TB) | $499 |
Entry-level Multi-Gig, no PoE, NVMe storage-ready
As shown in the table above, the Cloud Gateway Max comes with five 2.5Gbps Multi-Gig ports and features multi-WAN with load-balancing or failover—you can turn any of its LAN ports into a WAN. Unfortunately, there are no 10Gbps ports, which is the main reason it simply can't replace the UDM-SE.
Another minor point is none of Cloud Gateway Max's ports feature PoE. You'll need to get a PoE switch, such as the Enterprise 8 PoE, if you want to host UniFi access points. Alternatively, if you just want one or a few PoE devices, a couple of injectors will do.
On the upside, the Cloud Gateway Max comes with an NVMe slot to host an internal SSD as its local storage to host data for different applications—you don't need this storage when using the gateway purely as a router. Ubiquiti has 512GB, 1TB, and 2TB options.
If you feel a bit disappointed that there's no USB port to host external storage like the case of many routers, you're not wrong. However, considering the compact design and the fact that NVMe SSDs have gotten so large in storage space, relatively low in cost, and are simply much faster, this internal approach makes a lot more sense.
Extra note on the Cloud Gateway Max’s storage
If you buy the non-storage version of the gateway, the SSD lot is there, but the required M.2 tray (or caddy) is not included.
That said, even if you plan on getting an SSD of your own, you might still need to get the lowest storage version (512GB). In this case, the drive and the M.2 tray will come in a separate box that also includes the tool to open the storage slot, which is a bit more convenient than a thin tweezer. The tray itself is slated to be available as a separate accessory later this month, but knowing Ubiquiti, I won't count on its availability.
On the inside, this M.2 tray can accommodate an NVMe SSD of all standard lengths, from 2030 (like the case of the Crucial P310) all the way to 20110—you can open the tray easily with a hex screwdriver.
In my trial, I replaced the included 1TB Kingston 2080 drive with a number of NVMe SSDs from different vendors with capacities ranging from 250GB to 4TB, and they all worked without issues.
Note that you need to turn the console off before swapping out the SSD—the console will restart if you remove the drive without turning it off. Replacing the drive will not cause the gateway to reset—you won't have to set it up from scratch again. However, naturally, you'd lose all existing recordings of different applications.
Cloud Gateway Max’s performance: A satisfying experience
As mentioned, for this review, I used the Cloud Gateway Max in a network with a couple of UniFi devices, including an Enterprise 8 PoE, a U7 Pro Max, and a G5 IP camera(*). During the over 10 days of testing and real-world trial, I was thoroughly impressed.
(*) The console's Protect application proved to be an excellent surveillance system, easily rivaling Synology's Surveillance Station. However, this is the topic of possibly another post.
The UCG-Max performed without any hiccups and delivered the same experience as the much larger UDM-SE. And, like the case of the U7 Pro Max, it did better than what Ubiquiti said it would. Specifically, even with all the security turned up to the max, I was able to consistently get over 2Gbps of sustained real-world speed on both the LAN and WAN side—the latter was out of my 10Gbps fiberoptic plan.
Sharing the same firmware and app as the full-size consoles, the Cloud Gateway Max has well-organized features that are easy to access and manage for both home and advanced users. And it has everything you'd ask for regarding network features and settings without requiring additional payment or subscription.
In the end, the only complaint I had was that there were no 10Gbps ports. Again, that's the only reason I'd keep my UDM-SE. While 2.5Gbps is more than fast enough for all of my daily needs, it's pointless to pay for a 10Gbps plan and use it with hardware that's only capable of a fourth of the bandwidth.
In terms of raw speed, the Cloud Gateway Max had the best 2.5Gbps real-world performance, as you can see in the chart. It was the fastest among all 2.5Gbps routers and switches I've tested, albeit by a small margin. As shown in one of the screenshots above, when connected to a 10Gbps broadband, the gateway also consistently had sustained Internet speeds of over 2Gbps.
In terms of heat, the gateway did get quite warm—mostly on its underside. However, it wasn't hotter than previous UniFi devices I've used, such as the U7 Pro Max. I'd even be generous to say that it was among the least hot UniFi hardware I've tested. And considering it's completely silent—there's no internal fan—and the compact, aesthetically pleasant design, the Cloud Gateway Max is indeed one of the coolest UniFi consoles or non-Wi-Fi routers you can find.
Ubiquiti Cloud Gateway Max's Rating
Pros
Excellent entry-level Multi-Gig performance for a comparatively low-cost
Compact and aesthetically pleasant design with powerful hardware to handle a home or small business networks via multiple simultaneous enterprise-class application
A complete set of useful networking features, including powerful security/web-filtering and WireGuard VPN; excellent web user interface; useful mobile apps
No subscription is required
Cons
No 10Gbps ports or built-in PoE
Ubiquiti login account is required for convenient remote management and mobile apps
Runs a bit warm, no SSD caddy is included in the non-storage version
The takeaway
The new Cloud Gateway Max is easily one of the best, if not the best, 2.5Gbps non-Wi-Fi routers you can find, and that's just its UniFi Network app alone. The fact it can work as an NVR recorder for an IP-based camera surveillance system or a host for IP phones, not to mention the UniFi apps, means it has more to offer than any home or most small businesses ever need. So, if you're looking for a top-notch router for your network, get it today!
However, the hardware is not perfect for lacking 10Gbps ports. While that's not a huge deal in most cases—2.5Gbps is plenty fast—it's a deal breaker for those who want to enjoy 2.5Gbps or faster broadband. In this case, the full-size consoles, such as the UDM-SE or the UDM-Pro Max, are the only (barely) fitting options for the general consumers within the UniFi ecosystem.
Hi Dong,
Just reread the salient parts of this brief on the UXG-Max (now residing in Joshua, our whopper cabinet). Played around with a XG setup as an AP, liked the whole setup (especially with the “early access” to upcoming improvements within the OS, Protect 5 was the final nail in my ASUS XT8 setup at home). Doubled down with a Enterprise POE+/2,5G switch & 3 x 7 Pro Wall units (with desktop mounts), that arrive next Tuesday, to cover our 250sq m of stone cottage (walls are 2’ thick dressed stone). We’ll let everything settle down for a couple of weeks then look for the blindspots using Ubiquiti’s excellent free planning tools (although setting up the thick walls wasn’t easy).
I suspect the Wi-Fi 7 will not last as long as our 198 year old cottage, yep there will be a party in 2 years; I won’t be holding my breath for more than 2,5G in my remaining years.
Glad I followed your advice reference CAT6a throughout, even if it wrecked a few drill bits on the way!
Again, great review
Kindest regards from France,
Vern
Thanks for sharing the expreince, Vernon! Cheers!
Hi Dong! Love to read your reviews here in Austria. Clear, concise and fun to read. Thanks for that!
Just one co,plaint from my side on Unifi hardware. I was thinking on switching, but I honestly can’t understand why they bring UCG-Max, that doesn’t at all feature internal WiFi, without any POE ports, when on the other hand all their AP require POE via their wired ethernet cable connection. Am I the only one who finds that a bit weird? If you had any guess on that, I’d be curious.
It’s a bit disapointing as mentioned but not weird, Rene. Something has to give considering the compact size. Also, getting a separate PoE switch can be a good thing. The UDM-SE, for example, has no Multi-Gig PoE ports. You can consider the UDR.
No hardware gives you everything in a single box.
What about this? … it’s getting close …{…}
I have no expreince with it and I don’t have experince with all routers in the world, Serge, only stuff made for the U.S. market. But, just because a router has a few ports doesn’t mean it’s “getting close” to anything.
I simply responded to the fact that this router has PoE ports that are missing on the Unifi. I understand very well that you don’t know all routers, but this could be a good test candidate. However, I got the impression that my question bored you, given your quick answer with errors in it. I apologize if I’m bothering you. A loyal reader from Belgium, whose native language is far from English. Sorry.
English is not my first language, either, Serge. I actually spoke French way before English and a trip to Brussels a few years back was the reason I still drink beer today… It’s hard to type on a phone and typos are my middle name, which is why I have a typo report on this site (the button at top right corner). Also note that I handle comments via a messaging system on the backend of the site (not via the post on the front end.)
Your question didn’t bore me, if it did, I would have said something to that effect. Take my answer at the face value since I meant it.
Bear in mind the UCG-MAX is designed to run Protect, hence the NVMe storage, and the wired cameras will all be PoE powered, so it’s almost a given that there will be a downstream PoE capable switch for the cameras and any APs, because 4x PoE ports is just not enough for most Protect users.
4x PoE ports will benefit a small minority of users that have minimal needs, but for pretty much everyone else they will already have a PoE switch (8/16/24/48 etc.) and they won’t need the extra cost (or reliability/complexity) of PoE that they won’t use (they may use the ports, yes, but not with PoE).
The truth is, if you need PoE for only a single AP (and don’t have another PoE switch) then use a PoE injector – it will pass through the 2.5GBps data.
True, users will probably want to add a switch, but even then a 10Gbps SFP+ would be more better, considering *all* their multi-gig PoE switches have one, and a DAC cable is very cheap. Also, their injectors are 1Gbps only, so connecting a U7 at 2.5Gbps would require a third-party injector.
Rene is correct, having all ports non-PoE 2.5Gbps is not very useful.
1Gbps injectors will pass through 2.5Gbps just fine – it’s simply an electrical connection.
2.5Gbps is confirmed as working on the Ubiquiti forum when testing with multiple 1Gbps injectors (Ubiquiti and non-Ubiquiti).
There are also several multi-gig PoE switch options for connecting to the UCG-MAX with copper (or fibre/SFP+).
FYI, Ubiquiti will soon be selling the SSD tray separately, for $19, available from Sep 23 according to their site:
https://store.ui.com/us/en/category/accessories-installations/products/uacc-ssd-caddy
It’s a much better option if one intends to buy an SSD off the shelf.
That’s great news! Thanks, Dror.
I struggle to see why getting this, and two U7 Pro AP’s would not be the best and most cost effective multi gig wired mesh home network out there? It would be <$600 for a 2 AP multi gig mesh network, right? What am I missing?
As mentioned, you’ll need a couple of injectors or a PoE switch (preferably one from Ubiquiti), too, Charles. Other than that, you’re correct.
Or just use cheap PoE+ injectors – no extra PoE switch required.
However the biggest issue with the UCG-MAX and also the U7-PROs is that they’re very effective space heaters. Ubiquiti really need to get a grip on the thermals in these new IPQ53x2 based products.
Thank you both for the input. How directional are the U7 Pros? For example ceiling mounted on the first floor, would it effectively reach the floor above? Does it mainly propagate along its plane or with depth as well (for example if it was wall mounted would its signal propagate horizontally?)
I can’t answer quewstions based on false asumptions. I think this post will help, Charles. Assuming you’ve read that, this one will make clear what you can expect on Wi-Fi range.
Take “cheap” out and Fred is 100% correct—you don’t want to the injector to fail on you. And yes, UniFi stuff can be quiet warm, so don’t stack them too tight.
Fair point on “cheap” – I actually intended that to mean that a pair of PoE+ injectors would still be cheaper than pretty much any PoE+ switch. But yes, use good quality injectors.
If cost & spec performance are the only considerations, a Deco BE63/65 2-pack would be cheaper. My pair of BE63s cost $450 a few months ago, have gone as low as $400 since, and have roughly the same 2.5GbE & Wi-Fi 7 specs as the U7 Pro system you specified; the U7 Pro Max is slightly better with 4×4 MU-MIMO at 5 GHz only. The Decos also have USB 3.0 ports for more flexibility in adding networked storage than the Cloud Gateway Max, and can do wireless as well as wired backhaul. Of course there are other reasons for some to prefer UniFi over Deco, especially if you already have an Ubiquiti setup.
👍
You wrote…
It’s worth noting that Ubiquiti has an existing Gateway Max of a similar physical size that can run only the Network app…
But that’s not correct. The Gateway Max doesn’t run any apps. You need a separate network controller like a Cloud Key Gen2.
You’re correct, Jacco. I meant it was only part of the Network app as in it hardware was designed for the app.
Hi Dong, any chance you can compare the Unifi Cloud gateway Ultra with the Asus Experwifi EBG15, seems like many features are same and they both are targeting same environments. Can EBG15 adopt XT8 as APs?
UniFi is *very* different from ExpertWiFi, Jon. More on UniFi is on my review of the UDM-SE, and here’s the overview post on ExpertWiFi. And this one talks about all of them briefly.
The UXG-MAX has 3GB RAM not 4GB – Ubiquiti posted incorrect specs at launch, now corrected on their website.
This one is not the UXG-MAX, Fred. But the info is corrected. Thanks.
Whoops sorry, I meant UCG-MAX – I keep typing UXG when I meant UCG!
No worries! That happens.
2.5Gbps is really nice, but if you consider that in order to connect it to APs like the U7 Pro or U6 Enterprise you must add a switch such as the Enterprise 8 POE or Pro Max 24 PoE, connecting using with a DAC using the 10Gbps SFP+ is better.
Yeap, this one is missing all that. All of Ubiquiti controller is missing something. I think they do that on purpose. 🙂
Can you add a POE switch from another manufaturer or will that mess things up? For example, if I would have this and a Netgear POE switch (108EUP) will I still be able to use the UI software to see and control the AP?
You can, Thomas. I mentioned that in the review of the UDM-SE.
Great, thank you and thanks for having this great site going. Missed to mention that in my initial question! 🙂
This product targets small offices needing only several devices where a few POE injectors won’t be a problem. Think of “starter” home offices or pro consumers. If it’s easily upgradable and fits their needs, those customers very likely to come back for more powerful hardware later.