UniFi Dream Machine

That's actually a really good quetsion. But let's tart at the bginning: What an IDS typically does is to look into the behavious of a host OR the content of packets (deep packet inspection).It checks if the content is suspisious, e.g. by using a list of known patterns how an atack looks OR the behav

Latest 5.x releases have memory leaks. Latest 5.0.16 seems to be impacting a lot of folks, see here: https://community.ui.com/releases/UniFi-OS-Dream-Machines-5-0-16/4b8a0a8b-f241-49a0-b0a3-c3de80d503ef?reply=1 Sounds like disabling IDS/IPS might be a good workaround for now … Pretty bad that they r

Hot swappable redundant power supplies and fans, as well as TLS inspection. You could speculate Ubiquiti left out these features intentionally from the Beast to not kill the EFG entirely. It's pretty dead anyways. It's a similar situation as with UCG FIber vs UDM Pro.

Go with the U7 Pro XG instead of the Pro. Get the UCG Fiber instead of the UDM SE. If you are going to use protect get Ubiquiti cameras for the best integration. If AI detection is your priority, and you feel Ubiquiti doesn’t do it for you, don’t use protect or Ubiquiti cameras. Choose another manuf

UDM Beast is interesting, but at that price I would have expected some next-generation firewall functionality. I understand that it's a wonderful world without any licensing, but there are other vendors.They offer this functionality even though they're much less powerful. It's clear that Ubiquiti de

You can keep UDM or UDR, depending on your use case. But UDR can not be integrated in a UDM setting as an Accesspoint. Both devices are capable of managing your whole UniFi Setup (accesspoints, Switches, Cameras), including IDS/IPS. UDR has 1 PoE Port, so if you need more than one additional AP you

If you are concerned about remote access, you can just buy Ubiquiti hardware that can host those apps like a UDM Pro Max or UNVR, run all of those apps on it, Kill their internet connection, and use a VPN to access so its local only. You can turn off their remote access features like site manager. A

So you’ll need an actual router. Whichever device is directly plugged in to the Starlink will receive a single IP address. There will be no NAT or firewall so all ports that device has open will be completely open to the internet. It’s a security nightmare. With a router you’ll get NAT and a firewal

ngl for 6700sqft retail you're on the right track. i'd swap the G6 APs for U6 Pros or U7 Pros - better value and plenty for retail traffic. the Dream Machine + separate NVR adds cost; you could start with a UDM Pro or SE which has built-in NVR for up to 12 cameras. 29 cameras total is a lot for a re

Man. I was never excited for firewall updates before I bought my first UniFi dream machine in 2020. It’s been 5 years of exciting updates, every single f*** time.