Ubiquiti UniFi Express 7 review: the cheapest honest way into UniFi

Item: Ubiquiti UniFi Express 7 (UX7), UniFi OS 4.3.x / Network 9.x
Rating: 7.8

Seven weeks as the only router in a 14-client apartment. The UX7 is a $199 gateway that runs a real controller — and a 2x2 radio that you will eventually outgrow.

By Dev Patel · Senior Reviewer, AI Software & Networking

Last updated August 7, 2026 · Tested over: 7 weeks as the sole router on a 14-client network

Product tested: Ubiquiti UniFi Express 7 (UX7), UniFi OS 4.3.x / Network 9.x

At a glance

Pricing$199 USD

Best forApartments, condos, and small offices with a sub-2.5 Gbps connection, where the appeal is UniFi's networking model rather than maximum wireless throughput

Our rating7.8 / 10

What works

Full UniFi Network controller runs on the device — VLANs, firewall rules, traffic identification, no separate host required
Measured 2.3 Gbps NAT routing throughput, comfortably ahead of its $199 price class
Wi-Fi 7 with 320 MHz channels on 6 GHz, and MLO that worked on every client we had that supports it
Genuinely local administration: no cloud account required for configuration, and remote access is opt-in
Fanless, small, and drew 8-11 W in normal operation

What doesn't

Enabling IDS/IPS cut routing throughput from 2.3 Gbps to about 950 Mbps
2x2 radios cap single-client wireless well below 4x4 competitors, and coverage falls off fast past one wall
One LAN port. Plan on a switch as a mandatory second purchase
Controller capacity is small by design — this is not the base of a growing multi-AP deployment
UniFi's configuration model is still the steepest learning curve in consumer networking

Overview

Ubiquiti’s problem for a decade has been that its networking model is excellent and its cheapest entry point kept being expensive. The UniFi Express fixed that in 2023 by putting a real controller in a $149 box with mediocre radios. The UniFi Express 7 is the same idea with Wi-Fi 7 attached, at $199.

The pitch is narrow and honest: this is not a router that competes on wireless throughput with $400 mesh systems. It is the least expensive way to run an actual UniFi network — VLANs that work, firewall rules you can read, per-client traffic identification, and a controller that lives on the device instead of on a Raspberry Pi in a cupboard.

We ran it for seven weeks as the only router on a two-bedroom apartment network: 14 clients across Wi-Fi 5, 6, and 7, a 2 Gbps fibre connection, one wired workstation, a NAS, and a small pile of smart-home devices that we deliberately isolated on their own VLAN to see how painful that would be.

Disclosure: unit purchased at retail by our team.

Key features tested

The UX7 is a tri-band Wi-Fi 7 gateway with 2x2 radios on 2.4, 5, and 6 GHz, supporting 320 MHz channel width and Multi-Link Operation on the 6 GHz band. It has two 2.5 GbE ports — one WAN, one LAN — and that is the entire wired story.

It runs UniFi OS with the Network application onboard. That means the full configuration surface: multiple networks with VLAN tags, inter-VLAN firewall rules, traffic identification, DNS filtering, WireGuard and OpenVPN server support, and IDS/IPS with the usual profile tiers. It can adopt a small number of additional UniFi devices, which is how most people will extend coverage.

It is fanless, silent, and drew between 8 and 11 W through our testing, spiking to 14 W under simultaneous heavy NAT and IDS load.

Performance over seven weeks

Wired routing first, because that is where this device is unexpectedly good. Using the iPerf3 methodology described on our methodology page — a wired Linux host on the WAN side, a wired workstation on the LAN side, five-second TCP averages — the UX7 sustained 2.3 Gbps of NAT throughput, which is effectively line rate for its 2.5 GbE ports and well beyond what its price class normally delivers.

Then we turned on IDS/IPS at the balanced profile and measured again: 952 Mbps. That is not a subtle penalty. On the detection-only profile we measured 1.4 Gbps. The pattern is consistent with a small CPU doing deep packet inspection in software, and it is the single most important number in this review for anyone with multi-gigabit service.

Wireless, measured with a Wi-Fi 7 phone and a desktop with a discrete BE200 card:

Same room, 3 m, 6 GHz, 320 MHz channel: 1.55 Gbps
One wall, 8 m: 1.02 Gbps
Two walls, two rooms, 14 m: 610 Mbps
Far bedroom, three walls: 240 Mbps, and unstable enough that we would not run a video call on it

Those numbers are respectable for 2x2 and clearly beneath the 4x4 systems we have measured. The drop-off past one wall is the honest limit of this product: it is a flat’s router.

MLO worked. With 5 and 6 GHz aggregated on the phone we measured 1.6 Gbps and, more usefully, watched it re-balance to the unloaded band inside about 250 ms when we saturated 6 GHz from another client. In an apartment building with 30 visible SSIDs, that failover behaviour was worth more day to day than the peak figure.

Stability was good. Three firmware updates installed cleanly across seven weeks. One controller restart after an update took the network down for 90 seconds. We saw no unexplained client disconnections and no DFS-related incidents on 5 GHz.

The VLAN experiment worked as intended and took about twenty minutes: a separate IoT network, tagged, with an inter-VLAN rule blocking it from reaching the workstation and NAS while still allowing mDNS reflection so that casting kept working. That is a configuration most consumer routers simply cannot express, and it is the reason to buy this device.

Strengths

The software is the product. You are getting the same networking model as Ubiquiti’s expensive gateways: readable firewall rules, real VLAN support, traffic identification that names applications rather than guessing, and a configuration surface that behaves like network equipment rather than a phone app.

Local administration is real. We configured, tuned, and ran this device for seven weeks without a Ubiquiti account, and remote management was opt-in. In a category where port forwarding routinely requires a vendor cloud login, this deserves more credit than it usually gets.

2.3 Gbps of NAT routing at $199 is a genuinely strong number, and it means the device is not the bottleneck on any connection below 2.5 Gbps as long as you leave inspection off.

Wi-Fi 7’s reliability features — MLO band failover in particular — behave properly here, and in a dense building they are the features that matter.

Power draw and noise are negligible. It is a small fanless box you can put on a shelf and forget.

Weaknesses

IDS/IPS throughput is the headline compromise. Losing roughly 60% of your routing capacity to enable inspection is a real architectural constraint, not a tuning problem, and Ubiquiti’s interface does not warn you about it clearly enough.

One LAN port is not enough. Every buyer of this device needs a switch, and the honest price of a UX7 network is $199 plus whatever switch you buy. Ubiquiti should say so.

The 2x2 radio ceiling is fine in the room and inadequate two walls away. If your home has more than about 900 square feet or more than one floor, this is the wrong shape of product and you should be looking at multiple access points.

Controller capacity is deliberately small. This is not a device you grow a multi-access-point deployment on; if that is the plan, start with a Dream Router or a Cloud Gateway instead and avoid a migration in eight months.

UniFi’s learning curve remains the steepest in consumer networking. Everything is possible and very little is obvious. Someone who wants a router that works out of the box with three taps will be unhappy, and should be told that before they buy.

Verdict

The UniFi Express 7 is the cheapest honest way into UniFi, and “honest” is the operative word: nothing about the software has been cut down to hit the price. What has been cut is radio capability, port count, and inspection headroom, and Ubiquiti has cut them in the places that hurt least for the intended buyer — someone in a flat or a small office who wants a real network rather than a fast one.

We score it 7.8. For an apartment on a gigabit connection who wants VLANs, readable firewall rules, and no vendor cloud account, it is the best $199 in networking. For a house, for multi-gigabit service with inspection enabled, or for anyone planning a multi-access-point deployment, spend more the first time.

FAQ

See frontmatter.

Dev Patel reviews networking gear and AI software for The Review Bench. The UniFi Express 7 was purchased at retail by our team in June 2026. Ubiquiti did not provide compensation, review samples, or pre-publication review of this article. Our Ethics & Independence policy explains how we test.

The verdict

The UniFi Express 7 is the least expensive way to run a genuine UniFi network: an onboard controller, real VLANs, real firewall rules, and Wi-Fi 7 with 320 MHz channels, for $199. In seven weeks as the sole router on a 14-client apartment network it routed 2.3 Gbps of NAT traffic and delivered 1.55 Gbps to a Wi-Fi 7 client in the same room. The compromises are the 2x2 radio, a single LAN port, and an IDS/IPS engine that costs you more than half your throughput when you turn it on. We score it 7.8 — the right buy for a flat or a small office, the wrong buy for a house.

Frequently asked

Is the UniFi Express 7 a good first UniFi device?

Yes, and it is the cheapest honest one. Unlike the consumer routers it competes with on price, the UX7 runs the real UniFi Network controller on the device, so the VLANs, firewall rules, and traffic insights you would get from a Dream Machine are all present. What you give up is radio capability and expansion headroom, not the software model. If you want to learn UniFi properly on a $199 budget, this is the entry point.

Can the UniFi Express 7 cover a whole house?

No, and Ubiquiti does not claim it can. It is a 2x2 device designed for a flat, a condo, or a couple of rooms. In our testing, throughput to a Wi-Fi 7 phone dropped from 1.55 Gbps in the same room to 610 Mbps two rooms and two walls away. For a multi-floor house you want a mesh or multiple access points — our [TP-Link Deco BE95 review](/reviews/tp-link-deco-be95-mesh-review/) covers the high end of that category.

Does IDS/IPS work on the UniFi Express 7?

It works, but it costs you. With IDS/IPS set to the balanced profile, measured NAT throughput fell from 2.3 Gbps to roughly 950 Mbps. If your internet connection is 500 Mbps to 1 Gbps that is irrelevant. If you pay for multi-gigabit service, you have to choose between inspection and speed, and at that point a dedicated device like the one in our [Firewalla Gold SE review](/reviews/firewalla-gold-se-review/) is the more coherent architecture.

Do you need a Ubiquiti cloud account to use it?

No. Setup and full configuration can be done locally, and remote access through Ubiquiti's site manager is opt-in rather than required. This is the clearest advantage the UX7 has over the mainstream consumer competition, where core features are routinely gated behind a vendor cloud account.

How many devices can the UniFi Express 7 handle?

It handled our 14-client apartment network without complaint, and the onboard controller is intended for a small deployment — a handful of adopted UniFi devices, not a campus. In our load testing the CPU became the visible constraint before the radios did once we combined heavy NAT traffic with IDS/IPS. Treat it as a one-device network with room for a couple of access points, not as a controller you will grow into.

Is Wi-Fi 7 worth it on a 2x2 device?

Partly. You get 320 MHz channels and MLO, both of which we measured working, and MLO's band-failover behaviour is genuinely useful in a congested apartment building. But 2x2 radios halve the spatial streams a 4x4 router offers, so peak single-client throughput is much lower. The Wi-Fi 7 features you benefit from here are the reliability ones, not the headline-speed ones.