Ubiquiti USG-PRO-4 UniFi Security Enterprise Gateway Router with Gigabit Ethernet

Product Information

we replaced five legacy passive switches in our network with six 8 POE-60W actively managed switches, and we complemented our aggregator Unifi Switch 24 with a 16 POE-150W switch so that we can support current and future PoE devices like the Cloud Key Gen 2, Ubiquiti Unifi WiFi APs, and Ubiquiti Unifi Protect video cameras We are very excited to announceUniFi OS- a shared platform for all UniFi Controllers. Key features:

The fans in the USG and switch are on the loud side. Fortunately for me I have the system in a separate room in the basement so noise isn't an issue.

Enterprise Gateway Router with Gigabit Ethernet

I think long term, it will be better to move away from that system. Manual configuration file changes were unsupported, poorly documented, and your changes could be removed with firmware updates. Ubiquiti has promised full feature parity (and more!), but we will see. It will take a lot of development work to get parity with the officially supported USG features. Throughput Details Redesigned to be more intuitive and easier to navigate, the new UI raises the bar for enterprise network management efficiency. Important network details are logically organized for a simplified, yet powerful, interface.

as described below, even the USG Pro 4 is unable to make full use of a symmetrical gigabit Internet connection with both IPS and DPI enabled (even before enabling QOS).

TABLE OF CONTENTS

EdgeRouters have been around a long time, and are still technically supported with hotfixes and occasional software updates. The newer UISP hardware line is the safer bet for long term support, although EdgeRouters still have a lot of feature advantages. One potential problem with the UXG-Pro is the current state of the UDM-Pro and UniFi OS. Some features on the UDM-Pro are not working, incomplete, buggy, or just missing. Development for the Dream Machines has been steady, but after 9 months, the UXG is still on on beta firmware version 0.5.0.

Additionally, some IPS are anomaly-based. These IPS focus on statistical deviations from IP traffic baselines. For example, a server might be generating more traffic than usual. Or, a new host might be identified. Ubiquiti Support cannot assist in the creation of the config.gateway.json file nor will assistance be provided for command line configuration. If assistance is required, feel free to visit our Community to create a topic and ask for help with your desired configuration.Before customizing firewall or NAT rules, take note of the rule numbers used in the UniFi Network Firewall.Default firewall rules start at either 3001 or 6001, and NAT rules will also start at 6001 (which don't overlap with firewall rules). The custom rules created in the config.gateway.jsonfile cannot have duplicate rule numbers with the existing rules in the USG, or there will be a provisioning loop. It is recommended to put custom rules before the existing ruleset, as the lower number will win between two matching rules. When making changes via the config.gateway.json file, it is best to enter only the customizations that cannot be performed via the Network application. If the formatting is incorrect, a provisioning loop will be triggered on the USG, and a reboot will take place once the USG comes out of the provisioning loop. At this point the config.gateway.json file could be corrected or removed to correct this.