Ubiquiti Unifi Security Appliance (USG), Single,White

Extremely simple to setup if you are using the UniFi software. I used this with a Cloud Key and other than changing the name of the device once it was running and modifying the network information on the internal side to match what I wanted to use it functioned flawlessly. Unlike past gateways I did not have to do any special configuration to get common things to work. My PS4 worked fine, all of my Nest devices pass through fine, no need to set up manual port forwarding. I had number of issues with the PS4 on past devices, so far in my initial testing know blocking/drops/anything. I'll continue to monitor. The only thing I'd wish for is that there was a rack-friendly version. I didn't need their PRO device as I only needed WAN -> LAN but if they had a rack bracket that held this and the cloud key, that'd be perfect. as it stands I had to get a shelf in my wire rack to sit this, the cable modem, and my cloud key on. I get wire level performance on my 300Mb cable line. That's the fastest my area offers. It also includes a number of deep packet inspection features (in beta) that I can see where my bandwidth is used. It has a number of pre-defined categories including the big ones like streaming media, social networks, but also has a number of website groups but also protocol layers like https or http , google APIs, Google SSL, etc. So if you get a 'you're using 3TB a month' from the ISP you can see what it is, and block it if needed. Overall I'm very happy so far, I'll update as things go but the ease of getting this up and running was perfect. The longest part was the firmware update. Also as a bonus, i never locked myself out of the thing either. I've done that before on every other device :)

Even though I was initially skeptical of using a "canned" solution "off the shelf" as it were. I did my research and found that while the software that's used to more easily program and configure this router/gateway didn't appear to offer configuration options for the functionality that I require, in the end an advanced console like interface, albeit with an obscure json/xml like configuration syntax allowed me to configure it in exactly the manner to replicate all the essential functionality that I required out of my old PC based router that was running a custom setup of OpenBSD. Though I am still a huge fan of OpenBSD's "pf" packet filter firewall and it's great strengths, this is Linux powered and has advanced IPTABLES functionality to get done what I need in a similar manner just minus the bells and whistles. #1 thing, it is FAST. It can route and translate at pretty much wire speed from at least my initial testing (admittedly I have a very simple ruleset). #2 it is super quiet having no fans and low power consumption, but also appears to be built well, sturdy metal casing and not some cheap plastic. #3 it doesn't skimp on security for accessibility or accessibility for security. Some routers, in the name of lazy security don't offer IPv6 setup and support, or just allow primitive connectivity with no actual firewalling going on (I have one such router at another location I am looking to eventually replace). #4 so far it seems reliable working well over two months of uptime and in the two or three times I've rebooted it, that's the only time it's gone down. That's also another good sign. #5 software updates, I did have to do an initial update when I first got it, especially to get the low level configured IPv6 functionality to actually work (the functionality is there even if the setup software doesn't show many options related to it in the GUI, and they have to be configured in the command line interface). I was tempted to knock a single star off this product because while I get it that it's still a work in progress, in 2017 to not have at least a minimal set of IPv6 configuration options that aren't hidden in the low level command interface only is pretty much inexcusable. Also while since I bought it mid 2017 I've only seen 2 firmware upgrades, I do not know how timely they are about releasing firmware upgrades related to known vulnerabilities of the various software components they employ in this device as I'm sure it makes use of a lot of common open source software as do many routers these days. Of course this is the risk die-hard do it yourselfers like me have deal with when choosing to use an off the shelf product to get the job done instead of rolling your own like I did for almost 7 years with FreeBSD/OpenBSD based router that I kept up to date myself.

works flawlessly, little challenging to set up, patience and troubleshooting is a must. Here's the quick setup instructions that worked for me without ubiquity key A. Download ubiquity unify software(s) UniFi-Discover & UniFi on your computer, This computer becomes the UniFi controller. B. Initial setup: 1. Follow Reset instructions on the device, connect it to cable modem on WAN port and your computer on LAN port (Use network preferences to configure LAN at manual address 192.168.1.2, mask 255.255.255.0 and gateway 192.168.1.1) 2. Open http://192.168.1.1 on browser, use DHCP and power cycle the cable modem, and wait for it to re-connect and show internet is available 3. Open UniFi-Discover app, Set Inform as "http://192.168.1.2:8080/inform" 4. Open UniFi app and follow following steps Configure -> Update Firmware -> wait for provision to finish Networks -> Gateway/Subnet = 192.168.1.1/30 -> update range s.t. its only one IP 192.168.1.2 Uplink Connectivity Monitor -> Default Gateway Disable Advance Features and Automatically upgrade firmware 5. Once provisioned disconnect your computer (At this time UniFi browser will report status as disconnected) C. Protected Network setup: 1. Connect your wifi router on LAN port of USG 2. Make sure wifi router is configured as manual address 192.168.1.2, mask 255.255.255.0 and gateway 192.168.1.1 3. Setup port forwarding setting s.t. traffic to 8080 is redirected to <your computer IP running UniFi software>:8080 4. For on-going monitoring/modification of USG from UniFi over wifi router, it is important to set inform to the IP of the UniFi controller/computer (can only be done on CLI) ssh <user id your setup when provisioning USG>@192.168.1.1 and run following commands set-inform http://<your computer IP running UniFi software>:8080/inform cat /config/config.boot D. VPN setup (can only be done on CLI): 1. ssh <user id your setup when provisioning USG>@192.168.1.1 and run following commands 2. configure 3. set vpn pptp remote-access authentication mode local 4. set vpn pptp remote-access authentication local-users username <vpn username> password <vpn password> 5. set vpn pptp remote-access client-ip-pool start 192.168.2.1 6. set vpn pptp remote-access client-ip-pool stop 192.168.2.2 7. set vpn pptp remote-access dns-servers server-1 75.75.75.75 8. set vpn pptp remote-access dns-servers server-2 75.75.76.76 9. set vpn pptp remote-access dhcp-interface eth0 10. show firewall group address-group authorized_guests 11. set firewall group address-group authorized_guests address 192.168.2.0/30 12. show firewall group network-group remote_user_vpn_network 13. set firewall group network-group remote_user_vpn_network network 192.168.2.0/30 14. show firewall name GUEST_IN rule 3008 15. set firewall name GUEST_IN rule 3008 action accept 16. set firewall name GUEST_IN rule 3008 description 'allow packets to authorized_guests' 17. show firewall name GUEST_IN rule 3007 18. set firewall name GUEST_IN rule 3007 action accept 19. set firewall name GUEST_IN rule 3007 description 'allow packets to remote user' 20. commit 21. save 22. cat /config/config.boot 23. show firewall name statistics E. Configure dynamic DNS from USG UI (Optional) alternatively, you can use public IP to connect over VPN F. VPN Client setup (On OSX) Open Network Preferences -> + -> Interface = VPN -> VPN Type = PPTP -> Service Name = VPN-UniFi Open VPN-UniFi -> Configuration = Default -> Server Address = <public IP or dynamic DNS host name> -> Account Name = <vpn username> -> Authentication, <vpn password> -> Apply -> Connect Validate VPN session by ssh-ing into USG, ssh <user id your setup when provisioning USG>@192.168.1.1 show vpn remote-access

[07-06-2016 Update] - Increased to 4 stars I have had this for about a week and am now really enjoying it. I received excellent help from the Ubiquiti team and was finally able to get into a configuration that works for me. I am now interested in integrating more Ubiquiti products to get the full effect of the USG. While still not incredibly easy to set up, there is a lot of information available in the Ubiquiti forums and their staff articles. Here are some links that helped me out: USG JSON Config [...] Config Properties [...] Content Filtering [...] SOHO FW Rules [...] [Old Review] - Not a very intuitive device I'm going to start off giving this 3 stars. I've had it for about 4 days now and it has not been an overly pleasant experience, but also not poor enough for me to actually say the product is not any good. It routes packets just fine, but that's not really what I was looking for. Most of the other reviews covered the basic problems. The GUI does not have any real firewall features, apparently there are some ways to do this through the CLI but the device does not come with the appropriate documentation to get you started. Even getting the GUI up and running was a chore. I tried about 4 different network configurations to launch and adopt to view the status of the USG. I reached out to Ubiquiti and they were able to help out (make sure you are on the exact same subnet not just network, hopefully you have a switch because directly plugged into the LAN port did not work). This would have been something nice to list in the product dependencies during set up. My biggest complaint at the moment is how the device drops offline if you take the client you used to set it up to a different subnet. You then need to switch back to the USG subnet and re-adopt, and so on. Also, the blocking feature does not seem to work during my initial testing... I blocked my phone just to test it out and nothing happened, no impact to my connection or routing. For my config I have my ISP going to my USG then to my home network switch and to the wireless router. I cannot get status on any of my wireless router connected clients (pretty much all of my home devices) unless I run a network cable from my router back to my switch. No clue why the WAN interface cable is not enough and I need to dual attach. The DPI feature is entertaining, but not worth the price of admission for the other annoyances. I will be spending more time playing with this and hope to find some USG help on the CLI capabilities. I will be happy to update this to a higher rating if my experience changes with more time on the device. So to anyone curious in a quick and easy to set up security device with a simple GUI to set up firewall rules, this is not the right product. If you want another hop in your network to possibly track what type of traffic is flowing across your network, this thing can do it.

I had recently purchased a Ubiquiti Unifi switch and a couple of APs for my place and was really impressed with the whole Unifi concept so I went ahead and purchased the USG and another switch to complete the re-vamping of my home's entire network infrastructure. In anticipation, I read blogs, forums, and watched videos about this particular device and was really wondering how easy it was going to be to setup given some of the feedback but, for me, it was a breeze. The LAN interface is set to 192.168.1.1 by default, and as long as you are aware of that and account for it (like pretty much any other router you may purchase), the setup goes very easy. I plugged the WAN interface into my modem and my existing switch into the LAN port and that was pretty much it. I had to wait for a few minutes for it to sync up with the modem (get an IP, etc...) and for it to assign my PC an IP on the 192.168.1.x range but it eventually just started working and I could get on the Internet. After it was connected, I adopted it into my Unifi Controller and upgraded the firmware with no issues. I did have to re-boot my modem and then re-boot the USG in order to see full speeds but that was not really an issue. The only other thing I did was to change the default DHCP scope by making sure it ended lower than my old router to avoid potential IP conflicts. So, in my experience, for basic internet connectivity and DHCP setup it was very easy. Assuming your network is already 192.168.1.x and that your modem/ISP assigns you an IP via DHCP, it "just works". But is it an "easy" device? That really depends. On the one hand it integrates into the Unifi environment really well and the separate controller really gives you great insight into your network, way more than you would ever get with typical consumer grade stuff. However, while learning the controller interface is not hard (especially if you are reasonably savvy with networking) you do have to spend some time with it to understand where all the configurations are. And sometimes not everything is where you think it ought to be! But if you enjoy stuff like this, it's really fun! If you really can't be bothered it may be too much. Also, remember, for a typical consumer router, you just have a GUI to the router itself. With the Unifi environment you get a controller (purchased or downloaded separately) that controls everything (switches, APs, etc...). That means you have many more perimeters and areas to explore in the GUI than you may be used to which could add to the learning curve.. There are lots of forum posts and blogs that say that the USG is really limited by the Unifi controller GUI and that to do anything really complicated you have to go into the Command Line Interface. I guess that really depends on what you want to do! If you just want a good, solid router/firewall for Internet access that is easy to setup, inexpensive, and gives you a ton info about your network (via the Unifi Controller software) I think this is great. If you are brave and have more advanced needs you can do all that stuff as well. Just be aware that you may have to learn how to SSH into the device and configure things by the CLI. Otherwise, I'm super happy with this purchase as well as the entire Unifi environment. With the managed switches, professional grade APs, and advanced routing configurations this really gives people the opportunity to have a first-rate network at home without spending a ton on pro-grade gear. FYI, I have RCN cable in Chicago with 150Mbs speed and the USG seems to handle the speed/traffic without any issues. I believe I could go up to Gig speed without any worries.

August 25, 2017 - Update: Still 5 Stars - Very Pleased! At home, I've been using Unifi for nearly a year and I couldn't be happier. The USG works perfectly with the entire system. They're currently up to USG Version 4.3.49.5001150 and Controller Version 5.5.20. Over the past year, one of the most noticeable things is how far along Ubiquiti has brought the Unifi line through their product updates to the controller and devices. They seem to listen to their customers and work to incorporate their requests. I did some Layer 3 VLAN testing and did not experience any drops or packet loss like another reviewer had reported. I'm using the USG and a 24 port non-POE Unifi switch for testing and had 100% success. USG to USG VPN connections work perfectly - without issue - but getting the USG to create a connection to other devices over IPSEC requires a lot of CLI work and JSON files. As stated earlier, UBNT listens to their customers and they've told me they plan to include the ability to create tunnels to any device in a future firmware release. I still think anyone who has multiple public IP addresses and the need to NAT ports to multiple IPs would be better suited with another solution, but if you've got a single public IP or dynamic (cable/dsl), this would work perfectly. My IT firm has deployed these to about six organizations to date and we have had zero issues. It's been invaluable for us to be able to log into a single console and remotely connect to a client's controller and get instant feedback on their network. We've experienced no Unifi related network outages and clients love the range of the wireless and the fact that they never have to call us about network issues. To those who have had issues with equipment, all I can say is: these are pieces of electronics and it happens. We've deployed enough of these to get a sense of reliability and we're pleased. As a Disaster Recovery plan, we've ordered a few spare units that we've stocked in the office. That way, if a client ever does have an issue, we can easily re-deploy a new piece of hardware - a lot more cost effectively than than if we'd gone with Cisco or another, more expensive, vendor. I'm still very pleased with Unifi and the USG. November 7, 2016 - Update It's been about a month since installing my USG and I have been extremely pleased. I have had zero issues with uptime or reliability and I love having the near realtime visibility into my network statistics. I introduced it to my company (I work for a small IT firm) and we've also been testing it there for the past month. We started with a USG, Unifi Switch 24-150w, a cloud key and a UAP-AC-PRO but upgraded the USG to a USG-PRO-4 - everything has works flawlessly. We're in the process of rolling it out to a few smaller customers who don't need everything Cisco has to offer and my co-workers have been blown away with the ease of management/configuration and we all love the iOS app/remove management using Chrome. We have discovered that there is a very specific setup process for these and you can only adopt one USG per Unifi Controller. If you wish to replace/update the USG, you must first forget the one paired with the controller. Just a small caveat I thought I'd share. I'll post updates as I have them and/or maybe as we roll them out to customers. October 11, 2016 - Original Review As far as I can tell, the Ubiquiti Unifi Security Gateway has come a long way. I came across Ubiquiti's Unifi line about five months ago (May, 2016) when I purchased a pair of WAPs for my home. I was so impressed with their Wireless products that I decided to give their USG a shot. If you notice, the reviews for this unit have gradually gotten better and better as Ubiquiti has released newer versions of their controller and firmware. I'm currently using the USG with the Unifi Cloud Key, version 5.2.9 and this whole setup works flawlessly. My LAN IP scheme is different than what comes default on the USG, so my setup required a few additional steps but it wasn't difficult by any means. Essentially, I had to run their controller application locally from my computer while giving my computer a static IP address and connected to the LAN port of the USG. I adopted the USG to the local controller, then adjusted my site network to the correct IP range. Once the USG had the new IP address, I connected it up to my live network where I was able to use my Cloud Key to adopt the USG and that was it. The unit itself feels physically sturdy - the case is metal and feels very well made. It comes with the USG, a power adapter, instruction guide and wall screws in the box. When powered up, prior to being configured, the square on top flashes white which changes to blue once configured. As stated above, initial configuration was pretty simple. Once that's done, new configuration is handled through the controller, but CLI is also avaiable. Configuring port forwarding couldn't be easier as it requires only a few simple clicks to complete. The new version of the Controller adds features for Routing as well as advanced Firewall control, as well as some nifty autobackup features for the Cloud Key. I actually upgraded from a Ubiquiti Edgerouter Lite so I could take full advantage of the Data Packet Inspection and having the real-time view of my network and bandwidth. I really like the main dashboard screen that shows the current bandwidth utilization, your attached Unifi Devices as well as the top devices, clients and top users (if DPI is enabled). I feel slightly ridiculous seeing that I have 33 devices connected to my home network but, since this is what I do for a living, I find it very helpful to have that kind of visibility. My plan is to ultimately replace the core switch in my home lab with a Unifi 24 port PoE to do some additional testing with their VOIP security cameras and NVR and/or their VOIP desk phones. I am very pleased with my purchase and have already recommended the Ubiquiti Unifi solution to several of my coworkers/friends.

I just moved my home network from an Asus RT-AC88U, to a USG, 8 port 150w unifi switch, a nano HD upstairs, and a Flex HD downstairs (too hard to run cable to the ceiling between floors), and I have an umanaged dlink switch downstairs in my office for my desktop, and consoles. I have a Synology DS918+ as well, and am running the Unifi controller in docker, and it is also my primary DNS server (set in unifi, with [1.1.1.1](https://1.1.1.1) as my secondary in case it goes down). I really am enjoying the control, and information I'm getting out of this setup. I've setup a guest network with a guest portal, and am beginning to setup an IoT network for all my stuff made over seas that I don't trust. On my laptops, with VHD 160mhz, I'm getting 650mb up/down (fiber to my house). And on anything wired, I'm getting about 920-930. I have DPI enabled, and it does not seem to effect performance at all. I know that IPS would, and have not enabled it. I first bought an Edgerouter 4, and Edgeswitch 10XP, and setup UMNS on my NAS, and quickly got tired of going to 4 different places to administer my network, and replaced with the USG and unifi switch after 2 days of being fully setup on that gear. I REALLY enjoy Unifi. It gives enough control for anything I would do at home, and was worth the headache of setting up my network a second time in a matter of days. The performance without IPS on is the exact same as the edgerouter was on gigabit fiber. The one thing I lost, was the ability to set local DNS resolution, but thanks to the DS918+, I just set that as my DNS server, and added what I needed there. One last quick note, if your fiber requires a VLAN to work due to IPTV, be sure to update your USG first, as the firmware it came with had NO option to set this up. I had to go back to my edgerouter setup, plug the USG in to that, run the update through SSH, and it was a real PITA to get it running, but again, still worth it now that everything is good.

In my day job, as a server DevOps, I work extensively with networking across different servers. From security to VLANs to load balancing, my knowledge of networking is definitely above the average Joe. I have a full 1Gbps connection capable into my home, and when connecting directly into my ISP connection, I get full speed at the source. If you want to see how to properly test each new piece of any network device, please skip to the bottom. So after waiting, and waiting, and waiting for the Ubiquiti UniFi Security Gateway (USG) to be found in the UniFi Controller (which you must have to use this device), then configuring a small Ubiquiti UniFi 8 port PoE switch, I run some tests, and my internet speeds are cut in half! The Ubiquiti UniFi Controller, not the USG device, but a necessary piece of software, is either a small device you buy, or you can designate your laptop to be the UniFi Controller, and download the software. This controller will take anywhere from 8 to 12 minutes to find, adopt and provision the USG, if it finds it at all. I can't stress enough what a horrible environment this is to operate their network. Most networking devices have a simple Web GUI, and an SSH terminal to help setup a network environment. Since the vast majority of you will never use the SSH environment, then you're going to be using the UniFi Controller. If you're getting a headache at this point, it's time to move on, because this is just the beginning of the nightmare. So after removing all the old network components, you have to because one of them is likely your DHCP server, connecting in the new UniFi devices, and trying to connect. Nothing. And then nothing. And then nothing. Finally, something shows up on the screen, but you can't use it because you have not "Adopted" and "Provisioned" it. The UniFi Controller is a small Linux server that runs Java to show you a pretty picture on your screen of your devices on your network. This is all great until you realize that the devices are grayed out, and you can't control them until you first "Adopt" it. Did I mention, that there are zero instructions for any of this in the box? Did I mention that there's no mention anywhere on the Ubiquiti website that explains how to setup the USG? Oh sure, they have instructions like "Start the UniFi Controller". What's a UniFi Controller? Is it in the box, is it another device I had to buy? So vague that you'll have no idea where to turn. This product review is providing more details than the Ubiquiti website. Once the USG is found, and you have figured out how to Adopt it, you must now wait for it to "Provision" itself. Provisioning can take 2 minutes, or it can take 8 minutes. Keep in mind, you have to figure all this out first, there's no instructions in the box. To add even more salt to your already gaping wound, the only UniFi Controller that can access your network, is the one you installed on your laptop. You can't switch over to your desktop back in the office. You will have to be "on-site" to get this to work. Of course, you can always use their "cloud" infrastructure for remote management, but could you imagine what a nightmare this would be to setup, when installing a simple 3 port WAN router is this difficult?? So you just bought the USG, figuring since it's a newer device, built within the last 10 years, you would figure it could handle the internet speeds coming into your network. This assumption is a grave mistake. Since I already had the Ubiquiti 8 Port Managed Switch, I continued setting up my network using other Ubiquiti devices. The switch, as it now turns out, is a waste of money because it cannot be managed "without" the USG. It cannot be configured or controlled in any way. It's just a simple unmanaged switch without the USG. But would I know that upfront before I bought either device. No. Could I have searched for a solution before making the purchase? No. Who thinks to search for "Will the Ubiquiti UniFi <device> cut my internet speeds in half?" No one. To test your internet speeds, simply unplug your internet connection (RJ45 network cable) at the source, and plug it into your laptop. Speedtest it, and you should get the internet speed you're paying for. If not, then you have a network failure from your ISP. In my case, my internet speeds were slightly more than what I pay for from the source, and half when coming straight out of the Ubiquiti UniFi Security Gateway. WAN -> LAN (Port on the USG) -> Laptop == Internet speeds are now cut in half. When I went to the Ubiquiti website, this is clearly a huge problem! Hundreds of negative comments on the issue, and I'm guessing, most people don't know how to test their network devices. If they did, there would be thousands of negative comments. OK. With all these bad comments, and clearly others like me, with my level of expertise, having the same issues, they must have a solution. Right? I'll just call the 800 number and talk to support. Wait .... there's no 800 number for support! OK, so let's try the chat. The chat people send me links to articles that do not address my issue, and blame me for the troubles. OK, so let's experiment with any possible settings I can configure for this device. There are no physical switches on the outside of the USG, and there's only 6 options in the UniFi Controller. Alright, quickly doing the math in my head, adjusting these settings, and assuming only 2 of the 6 will be enabled, that's a total of 36 possible combinations. That's the bare minimum. Now multiply this times the 8 to 12 minutes for the provisioning of the new settings, and you're looking at sitting in front of the servers for approximately 7.2 hours while waiting for the new settings to take effect! So let's do this! 7.2 hours later ... the same results. Internet speeds still cut in half, and my total income loss spent wasting time on this Ubiquiti UniFi Security Gateway is well over $1,000 dollars at this point. Time to return it. How to test your network devices: 1) Test from the source first. Just a straight connection into your computer. You should get full speeds. If not, then the trouble is with your Internet Service Provider (ISP) network. Call them first. 2) Test your connection speed one device at a time. Isolate each device, and test straight from it's primary port. That includes security gateways, switches, firewalls, and even WiFi. The primary port is the first port. In all cases, this will be labeled "1" or "eth0", if there are multiple ports. That's it. That's all you do to test your internet. Avoid the Ubiquiti UniFi Security Gateway. Nothing but trouble and zero support from Ubiquiti. And since it's required for their other devices, then that will be a problem for you moving forward. Ubiquiti needs to step up and fix these issues.

Funciona bien, ya tenía un switch y punto de acceso de Ubiquiti y compre este por su integración con UniFi. Me costo ponerlo en marcha por que había que actualizar el firmware antes de adoptarlo pero para actualizar necesitaba internet y no lo podía configurar. El caso es que desde el soporte de Ubiquiti me han ayudado a actualizar el firmware por ssh y poder adoptarlo. He sustituido un router ASUS que funciona con Orange en la VLAN 832. Me gusta mucho como se integra con el controlador de Unifi

This is a home-based installation after a purchase in October 2017. A way of thinking about this is to consider the usual modem/router/switch combo your ISP gave you as being the same as an all-in-one Hi-Fi. This is the separates version, and darn good separates too. This bit is just a router. It connects two networks, as routers do, being the internet (WAN) and all the stuff in your house/business (LAN). It only has one LAN output by default, and no WiFi, so, you'll need a modem of some form with an ethernet output on the WAN side to connect to the outside world, and assuming you have more than one device a switch of some form to allow them to connect to the internet on the LAN side, and then a wifi access point if you want to connect wirelessly. That means cost. But, you get what you pay for. This is a big step up from the consumer kit you'd normally see to business quality hardware and associated software. We're lucky and have fibre to the home, so the OpenReach GPON (sort of fibre modem) unit dumps 300Mb goodness into this, and it handles it effortlessly. Ours is matched to a Ubiquity switch, which in turn is matched to a controller (runs the software) and several PoE driven access points, so our house has seamless WiFi just like a properly setup office. It's been subject to roughly monthly firmware and software updates, all of which happened without drama, and added useful features to it all, including easy IPv6 support. Other than rebooting following those updates it's been on the whole time. A couple of warnings: Read a bit and watch some videos before diving in, it's not for the technically faint of heart as it won't 'just work'. It's not hard to set up, but will be more trouble than a BT/Sky/ISP preconfigured one. If you deal with this sort of thing for a living, it's a walk in the park. It can get hot, mounting vertically is recommended to use the vents effectively. (Ethernet ports go down) Just mind the dust, and don't cover it. The similar looking 3 Edge Router is pretty much identical to this, cheaper, and easier to use without the controller software. The main difference is that in the controller software with this you get more green circles, and access to it from that control panel. Oh and it glows a cool blue when it's working. If that does not interest you, save a few quid and get the 3 Edge Router. Just like Hi-Fi separates, once you start your wallet will weep as you feed your new addiction, but you'll love the improved everything.

In A Nutshell After switching my home wifi to the Unifi AC-Lite access points and getting a taste of the Unifi controller, I decided to go "all in" on the Unifi ecosystem and replace my Cisco small business firewall/router with the Ubiquiti Security Gateway. The deep packet inspection provides really useful traffic information. I really love that there is "one admin to rule them all". If you're already partially invested in Unifi gear, I highly recommend that you consider getting one of these. The Good Parts * Works great, setup is super easy - for me, it was a drop in replacement for my Cisco small business firewall * Deep Packet Inspection provides useful traffic stats * Does not use a power bar crowding wall wart * Works great with a Unifi Controller - the Unifi Controller has one of the best web admin interfaces I've ever used * Easy to give static DCHP MAC bindings to devices * Can run scheduled Internet speed tests * Small * Nicely designed * Well priced Hit or Miss * Extra LAN port creates a second network -- this might disappoint people who are used to routers that are also switches Could Be Better * You can't create DHCP MAC bindings in advance, you have to connect the device to the network first * Some of the deep packet inspection guesses are off. Windows Updates register as Financial Times traffic for some weird reason. Notes / Tips * Unlike a lot of consumer routers, the USG does not have its own web admin. You need to either get the Cloud Key or install the Unifi Controller on a PC/server. I have my controller running off an Atom-based stick PC that I wasn't really using

Update 30.12.17: Inzwischen läuft mein Unifi Netzwerk seit 9 Monaten stabil und ich habe es erst die letzten Tage erweitert. Es zeigt sich für mich dass es absolut die richtige Wahl gewesen ist, von der Fritzbox auf Unifi umzusteigen. Hauptgrund war ja, dass ich gesehen habe dass bei zunehmendem Alter meiner Kids der Anspruch an ein funktionierendes Netzwerk im Haus rapide ansteigt. Youtube, gestreamtes Fernsehen und Musik, Online Games usw. fordern Performance im Netz. Bei über 12 WIFI-Geräten, die permanent an den Accesspoints hängen und dabei vor allem Multimedia streamen hat die Fritzbox evtl. mit Repeater keine Chance mehr. Mein Setup ist jetzt wie folgt: Modem: Vigor Draytek Router/Firewall: Unifi USG Switch: 2x Unifi Switch 8 - 60W Accesspoints: 1x AP AC LR, 1x AP AC Lite Telefonie: Fritzbox als reiner IP-Client Netzwerkteilnehmer: ca. 20 Geräte Ich habe mein Netzwerk in 3 Netze aufgeteilt: 1x LAN-Management (wo die Unifi-Komponenten drin laufen) 1x Home-Netz 1x Netz für die Kinder Die Netze habe ich aus Sicherheitsgründen untereinander geblockt. Allerdings ist es möglich den Router so zu konfigurieren, dass trotzdem die Kids den Drucker im Home-Netz nutzen können. Die beiden Accesspoints decken das gesamte Haus über 3 Stockwerke mit einem genialen WLAN-Signal ab. Ich habe keine Verbindungsabbrüche mehr, Roaming zwischen den beiden AP's merke ich bei keinem der Geräte. Die Performance ist erstklassig und zu 100% stabil. An der unten stehenden Begeisterung hat sich nichts geändert. Im Gegenteil: Die damals noch empfundenen Nachteile sind durch regelmäßige Softwareupdates inzwischen aufgehoben. Ein VPN-Zugang ist möglich, DynDNS wird durch das USG gestellt. Der zweite LAN-Ausgang am USG ist inzwischen nutzbar. Ich kann jedem, der den Invest nicht scheut, absolut nur zu diesen Komponenten raten. Durch die Nachbesserungen habe ich jetzt 5 Sterne vergeben. ********************************************************************************************************* Ich schreibe diese Rezension gleichlautend für alle meine Unifi Komponenten: Ein Unifi Security Gate (USG), einen Unifi Switch 8 60W, einen Unifi Access Point AP AC LR und einen Unifi Cloud Key als Controller des Netzwerkes. Ich bin über das Internet (Youtube) auf Unifi aufmerksam gemacht worden. Nachdem ich selbst inzwischen im Haus über 150 qm und 3 Stockwerke mit der Abdeckung durch Powerline, Repeater und Fritzbox bei insgesamt 20 Endgeräten am Netz an die Grenzen gekommen bin, weil vor allem die Kinder mehr und mehr Datenvolumen durch Youtube, Games und Video-Streaming ziehen, musste ich etwas an der Netzwerkkonfiguration ändern. Die oben genannten Komponenten arbeiten hervorragend miteinander zusammen. Ich behaupte, wir befinden uns hier schon im semi-professionellen Bereich was die Performance angeht. 1.) Der Access Point deckt das gesamte Haus lückenlos ab - ohne Repeater (wenn auch das hinterste äußerste Eck etwas knapp ist, aber wenn ich ein Signal habe, dann bleibt es stabil) 2) Ich habe vor Umrüstung und nach Umrüstung einen Helios Test laufen lassen, bei dem Daten auf meine Diskstation geschaufelt wurden und die Zeiten gemessen worden sind. In beiden Fällen war die angeschlossene Hardware exakt dieselbe (iMac -> Synology Diskstation 916+) und dazwischen einmal die Fritzbox und dann das neue Unifi Netzwerk. Ergebnis: Das Unifi Netzwerk war doppelt so schnell in den Ergebnissen (jetzt weiß ich nicht ob die Diskstation eventuell die Performance ausgebremst hat und der Unterschied noch krasser gewesen wäre mit einer schnelleren DS). Auch bei meinen Kids ist beim Online-Gaming über Powerline festzustellen, dass das Netzwerk deutlich stabiler eine gleichbleibende Leistung bringt und die Latenz nicht mehr zwischen 25 und 150 ms schwankt, sondern konstant bei 25-30 ms bleibt. Das war bei absolut gleichen Hardware-Komponenten vorher über die Fritzbox nicht der Fall. 3.) Der Preis ist meines Erachtens für die gebotene Leistung in Ordnung ABER: Einen Stern ziehe ich ab, denn Unifi ist einerseits absolut nicht selbsterklärend. Das Manual ist nichts anderes als eine Referenz-Buch und die Software ist noch sehr stark in der Entwicklung. Heißt, es erfolgt zwar eine hervorragende Produktpflege und laufend kommen Updates mit tollen neuen Features, aber bis jetzt gibt es in der regulären Controller Software noch ein paar Lücken, die erst über das Stable Candidate gelöst wurden und dort dann noch BETA-Status haben: - Anbindung über VPN - DynDNS, hier gibt es nur minimale Auswahl an Anbietern (gut das kann ich über die Diskstation lösen, wer das nicht hat -> Pech) - Funktion des zweiten LAN-Ausgangs am USG ist noch tot (außer im BETA) - Software zwar in Deutsch, Dokumentation komplett in Englisch Man muss also schon ein gewisses Grundverständnis für Netzwerke mit bringen, sonst ist man m.E. hoffnungslos verloren. Aber Unifi hat auch einige enorm positive Punkte: + Performance, Performance, Performance + der Switch ist "gemanaged", heißt, man kann die Zuweisung auf den Ports detailliert editieren + VLANs können easy eingerichtet werden + Sehr gute Benutzeroberfläche + extrem gute Statistiken und grafische Darstellungen der Datenströme + Extreme Leistung des WIFI Access Points + Trotz der nur englischen Dokumentation und der aktuell stark in der Entwicklung befindlichen Software ist aber die Community und der Support (auch nur in Englisch) hervorragend und super schnell und damit sehr sehr hilfreich Und das sind nur die Pluspunkte, die ich als Laie empfunden habe. Ich würde jedem, der drüber nachdenkt sein Netzwerk schneller, größer und leistungsfähiger zu machen, empfehlen, Unifi anzuschauen. Vorausgesetzt Sie haben ein solides Grundverständnis für Computer und auch ein wenig für Netzwerke. Wer dann Spaß daran hat, ein wenig auszuprobieren und auch neues zu lernen - dem sei Unifi wärmstens empfohlen.

Ho acquistato questo prodotto per una rete in cui tutti gli apparati sono ubiquiti, la semplicità della configurazione e l' integrazione con la "controller" on-line è impareggiabile. L'alternativa è Cisco Meraki ma sappiamo tutti che Cisco è la Ferrari degli apparati di rete. Unici 2 "Nei", ma forse per incapacità mia o perchè manca ancora la funziona nella controller, è vedere i log: ma si risolve da riga di comando utilizzando la funzione "debug" su un altro apparato all' interno della rete (nel mio caso sono andato in SSH da un AP al FW) e la possibilità di implementare un QoS (esistente invece per la sola parte Voip). Trovo molto utile la funzione del controllo pacchetti e la semplicità nel creare le Nat sia esse in UDP che in IP, ho reso disponibili i servizi interni in pochi secondi! Sono veramente contento nel complesso e lo trovo uno strumento utilissimo. Le 5 stelle anche se non meritatissime, le ho date perchè dal forum del produttore ho appreso che con la nuova release della controller (gestibile on-line con i dovuti accorgimenti) implementeranno anche queste funzioni.