MikroTik RB760iGS (hEX S)

MikroTik RB760iGS (hEX S)

Compact 5-Port Gigabit VPN Router with SFP Port and Hardware IPsec Acceleration

The MikroTik RB760iGS, better known by its product name hEX S, is a small, affordable, fanless Gigabit router built for home networks, small offices, and anyone who needs solid VPN performance in a low-cost package. It pairs five Gigabit Ethernet ports with an SFP cage for a fiber uplink and, notably, hardware-accelerated IPsec encryption — a feature usually reserved for more expensive routers — making it a favorite among RouterOS users who want secure site-to-site or remote-access VPN throughput without spending on enterprise-tier hardware.

Overview

The hEX S is built around a dual-core MediaTek MT7621A processor running at 880 MHz, with 256 MB of RAM and 16 MB of onboard flash storage (expandable via the included microSD slot). It runs MikroTik's RouterOS with a Level 4 license, which covers the vast majority of home and small-office routing needs, and it comes with free RouterOS updates for the life of the device (a minimum of five years).

Ports and Connectivity

The router provides five Gigabit Ethernet ports (10/100/1000) and a single SFP cage rated for 1.25 Gbps, giving it a fiber-ready uplink option that many similarly priced routers lack. It also includes a USB 2.0 Type-A port (1A max) for storage or a USB modem, and a microSD card slot for expanding local storage — useful for logging, The Dude network monitoring server (included with RouterOS), or other on-device applications.

Hardware-Accelerated IPsec

The standout feature of the hEX S is its onboard IPsec hardware encryption engine. This allows the router to handle IPsec VPN tunnels at much higher throughput than software-only encryption would allow on a device in this price range, making it a popular choice specifically for VPN gateway duty — site-to-site tunnels, remote office connections, or secure remote access — without the performance penalty typically seen on budget routers.

Power and PoE

The hEX S can be powered via its DC jack (12–57V) or via 802.3af/at PoE input (12–57V), and it ships with a 24V/1.2A power adapter in the box. Port 5 doubles as a passive PoE output (up to 500mA at up to 57V), letting it power a small downstream device like an access point directly. Maximum power consumption is rated at 24W under full load, or as low as 6W without attached devices, and the unit is entirely fanless.

Build and Physical Design

Measuring a compact 113 x 89 x 28 mm, the hEX S is small enough to sit unobtrusively on a desk or shelf. It's rated for a wide operating temperature range of -40°C to 70°C, has an estimated MTBF of around 100,000 hours at 25°C, and carries an IP20 rating with CE, EAC, and RoHS certification. A mode button, USB Power Reset function, and built-in beeper round out its hardware features.

Software: RouterOS

Running RouterOS with a Level 4 license, the hEX S supports firewalling and NAT, VLANs, hardware-accelerated IPsec alongside WireGuard and OpenVPN, dynamic and static routing (OSPF, BGP, RIP), traffic shaping and queueing, hotspot/captive portal features, and the bundled Dude network monitoring server, all configurable through WinBox, WebFig, or the command-line interface.

Typical Use Cases

The hEX S is a strong fit for home networks and small offices that want a reliable, low-cost Gigabit router with a fiber-ready SFP uplink, and it's especially well suited to anyone setting up site-to-site or remote-access VPN connections thanks to its hardware IPsec acceleration. It also works well as a secondary or branch-office router, a RouterOS learning device, or a compact firewall/VPN gateway sitting in front of a larger LAN.

Key Specifications at a Glance

Feature Specification CPU MediaTek MT7621A, dual-core, 880 MHz RAM 256 MB Storage 16 MB flash (+ microSD slot) Gigabit Ethernet ports 5 SFP ports 1 (1.25 Gbps) USB 1x USB 2.0 Type-A (1A max) Storage expansion microSD card slot PoE-in DC jack or 802.3af/at, 12–57V PoE-out Port 5, passive, up to 500mA / 57V Power input 24V/1.2A DC adapter (included) or PoE-in Max power consumption 24W (6W without attachments) Security acceleration Hardware IPsec encryption Cooling Passive (fanless) Dimensions 113 x 89 x 28 mm Operating temperature -40°C to 70°C MTBF ~100,000 hours at 25°C Operating system RouterOS License level RouterOS Level 4 Bundled software The Dude server Other features Mode button, USB Power Reset, beeper

Specifications sourced from MikroTik's official product page. Actual retail pricing (approximately $79 USD suggested) and availability vary by region and reseller.

Frequently Asked Questions

What is the difference between "RB760iGS" and "hEX S"? They're the same device — RB760iGS is MikroTik's model/part number, while "hEX S" is the marketing name used on packaging and most retail listings. The "S" distinguishes it from the plain hEX (RB750Gr3), which lacks the SFP port and hardware IPsec engine.

Does the hEX S include Wi-Fi? No. The hEX S is a wired-only router. For a similar form factor with built-in Wi-Fi 6, MikroTik's L009UiGS-2HaxD-IN is a comparable option (see the link below).

Can the hEX S handle a gigabit internet connection? It has Gigabit Ethernet ports and a Gigabit-capable SFP port, but real-world routing throughput depends on which features are enabled (NAT, firewall rules, VPN, queueing). For plain routing/NAT it can generally keep up with gigabit-class connections; heavy simultaneous firewalling or non-accelerated VPN use will reduce throughput below line rate.

Why is IPsec hardware acceleration important? Without it, VPN encryption is handled entirely by the CPU, which can slow throughput significantly on budget routers. The hEX S offloads IPsec encryption/decryption to dedicated hardware, so it can sustain much higher VPN speeds than its price point would otherwise suggest — useful for site-to-site tunnels or remote worker VPNs.

What license level does it ship with, and does that matter? It ships with a RouterOS Level 4 license pre-activated, which is sufficient for the great majority of home and small-business use cases (routing, firewall, VPN, wireless management for connected APs, etc.). You do not need to purchase a separate license for normal use.

Can I power it with PoE instead of the included adapter? Yes. It accepts 802.3af/at PoE (12–57V) as an alternative to the included 24V/1.2A power adapter, which is convenient if you already have PoE infrastructure or want to avoid running a separate power cable.

Does it support RouterOS v7? Yes, the hEX S runs current RouterOS v7 releases and receives free software updates for the life of the product.

Where to Buy / Related Resources (Kenya)

• MikroTik Kenya — Kenyan MikroTik reseller storefront
• MikroTik L009UiGS-2HaxD-IN product page — a comparable MikroTik router with built-in Wi-Fi 6, useful as a reference if you need onboard wireless instead of the wired-only hEX S
• MikroTik Router Prices in Kenya — Orbit Link Solutions — local pricing across the MikroTik router range
• Fiber Optics Kenya — Kenyan networking and fiber equipment supplier

Pricing and stock at the retailers above are set independently and were not verified as part of this description — check each site directly for current availability and cost.

Note: As with all MikroTik devices, the hEX S runs RouterOS, which offers extensive configurability but has a steeper learning curve than typical consumer routers. Its hardware IPsec acceleration makes it a particularly good value pick for VPN-focused deployments relative to its low price.