UniFi Dream Machine

Go with the U7 Pro XG instead of the Pro. Get the UCG Fiber instead of the UDM SE. If you are going to use protect get Ubiquiti cameras for the best integration. If AI detection is your priority, and you feel Ubiquiti doesn’t do it for you, don’t use protect or Ubiquiti cameras. Choose another manuf

UDM Beast is interesting, but at that price I would have expected some next-generation firewall functionality. I understand that it's a wonderful world without any licensing, but there are other vendors.They offer this functionality even though they're much less powerful. It's clear that Ubiquiti de

You can keep UDM or UDR, depending on your use case. But UDR can not be integrated in a UDM setting as an Accesspoint. Both devices are capable of managing your whole UniFi Setup (accesspoints, Switches, Cameras), including IDS/IPS. UDR has 1 PoE Port, so if you need more than one additional AP you

If you are concerned about remote access, you can just buy Ubiquiti hardware that can host those apps like a UDM Pro Max or UNVR, run all of those apps on it, Kill their internet connection, and use a VPN to access so its local only. You can turn off their remote access features like site manager. A

So you’ll need an actual router. Whichever device is directly plugged in to the Starlink will receive a single IP address. There will be no NAT or firewall so all ports that device has open will be completely open to the internet. It’s a security nightmare. With a router you’ll get NAT and a firewal

ngl for 6700sqft retail you're on the right track. i'd swap the G6 APs for U6 Pros or U7 Pros - better value and plenty for retail traffic. the Dream Machine + separate NVR adds cost; you could start with a UDM Pro or SE which has built-in NVR for up to 12 cameras. 29 cameras total is a lot for a re

Man. I was never excited for firewall updates before I bought my first UniFi dream machine in 2020. It’s been 5 years of exciting updates, every single f*** time.

You can lock down your home network, but you also have to lock down their phones. DNS‑only filters are easy to bypass — all it takes is a VPN app, a hard‑coded DNS in an app, or switching to cellular data. That rules out most of the ‘simple’ filtering solutions people recommend. A UniFi Dream Machin

My $0.02: Look for Fiber over copper cable for the shed uplink; it is future-proof. If you have the budget (pricing is reasonable), you can order pre-fabricated custom-length fiber cables (no splicing required) https://www.fs.com/products/29606.html?attribute=1263&id=1099185. Both UDMSE and Flex sup

Sonicwalls are notorious for flawed updates and constant emergency security patches. If you want something that works, and is easy to manage, I would recommend a unifi dream machine. Get the SE if you want to plug unifi WiFi access points or cameras directly into it or just use the remaining ports a