1 Gbps IDS/IPS Throughput
Signature-based Intrusion Prevention (IPS/IDS) runs at up to 1 Gbps — enterprise-grade threat detection and prevention in a palm-sized device, ideal as a modern upgrade from the original USG.
Layer 7 Security Suite
Application-aware Layer 7 firewall, DPI & traffic identification, zone-based advanced filtering (regions, domains, apps), content filtering, ad blocking, and a full stateful firewall.
WireGuard, OpenVPN & L2TP
Built-in WireGuard and OpenVPN VPN servers, L2TP, IPsec, Site Magic site-to-site VPN, and one-click Teleport zero-configuration VPN — all with no additional licensing fees.
Licence-Free SD-WAN & Routing
Policy-based WAN and VPN routing, OSPF dynamic routing, advanced NAT, advanced QoS, mDNS, customisable DHCP server, and IPv6 ISP support — all included at no extra cost.
USB-C Powered — 3.83 W Max
Powered by a standard USB-C adapter (5V/3A, included) drawing just 3.83 W maximum — silent, fanless, and suitable for any location including behind a TV or in a small comms cabinet.
Ultra-Compact Form Factor
At just 98 × 98 × 30 mm and 320 g in a durable polycarbonate enclosure, the UXG-Lite fits anywhere — on a desk, shelf, or wall — without taking up rack space.
RADIUS & LTE Backup Ready
Integrated RADIUS server with RadSec (RADIUS over TLS), internet quality and outage reporting, plus failover support via UniFi LTE Backup for resilient connectivity.
NDAA Compliant
Fully NDAA compliant per the ui.com tech specs — suitable for government, defence, and security-sensitive Australian deployments where supply-chain integrity is required.
Home Networks
The most affordable way to add enterprise-grade IDS/IPS, VPN, and UniFi gateway features to a home network — pairs perfectly with UniFi switches and access points.
Small Offices & Retail
Compact enough to hide behind a monitor or in a small cabinet, yet powerful enough to handle IDS/IPS, VPN, and QoS for a full office deployment.
USG Replacement
The recommended upgrade path from the original UniFi Security Gateway — same compact philosophy, far higher performance, and full compatibility with existing UniFi infrastructure.
Remote Site Gateway
Ideal as a remote site gateway in SD-WAN or site-to-site VPN deployments — managed centrally via UniFi Network with no on-site IT required.
UXG-Lite Unit
Compact UniFi security gateway with 1 × GbE WAN and 1 × GbE LAN.
USB-C Power Adapter
USB-C power adapter (5V/3A, 100–240V) included.
Quick-Start Guide
Installation guide and documentation included.
Controller Required
Managed via UniFi Network 8.3.32+ on a Cloud Key, UniFi OS Console, or Official UniFi Hosting.
How is the UXG-Lite managed?
The UXG-Lite is managed through UniFi Network (version 8.3.32 or later) running on a Cloud Key, UniFi OS Console, or Official UniFi Hosting, so it integrates into any existing UniFi deployment.
What is the difference between the UXG-Lite and UDM-Pro?
The UXG-Lite is a compact gateway-only device (no built-in controller, no NVR, no PoE). The UDM-Pro is an all-in-one UniFi OS Console with a built-in controller, NVR HDD bay, and 10G SFP+. The UXG-Lite is ideal when you already have a controller and just need a gateway.
Is it a replacement for the USG?
Yes — the UXG-Lite is the recommended upgrade path from the original UniFi Security Gateway (USG), offering far higher routing and IDS/IPS performance in the same compact form factor.
Does it support VPN?
Yes. WireGuard, OpenVPN (server and client), L2TP, IPsec, Site Magic site-to-site VPN, and Teleport VPN are all supported with no additional licensing fees.
Does it have Wi-Fi?
No. The UXG-Lite is a wired gateway only. For Wi-Fi, pair it with UniFi Access Points (U6 Lite, U6 Pro, U6 Mesh, etc.) managed through the same UniFi Network controller.
Is the UXG-Lite NDAA compliant?
Yes. Ubiquiti lists the UXG-Lite as NDAA compliant on its official ui.com tech specs — suitable for government and security-sensitive sites.
