Core Routing and Traffic Control
​
Static routes: Define fixed paths for network traffic. This is a standard routing feature supported by all Unifi gateways and Layer 3 Unifi switches.
Dynamic routing protocols: Some models, particularly enterprise-grade gateways, support advanced protocols like OSPF (Open Shortest Path First) for automatically mapping optimal routes and providing network resiliency. The Border Gateway Protocol (BGP) is also available for complex, multi-homing setups.
Advanced NAT: Supports various forms of Network Address Translation, including Source NAT (SNAT), Destination NAT (DNAT), Masquerade, NAT Pooling, and 1-to-1 NAT.
VLAN/Subnet-based traffic segmentation: Create multiple virtual networks to segment and isolate different types of traffic, such as guest networks, IoT devices, or corporate resources.
Policy-based routing (PBR): Direct specific traffic to a particular WAN interface or VPN tunnel based on criteria like source/destination, application, or network. ​
​​
Multi-WAN and Failover
​
Multi-WAN support: Configure multiple Wide Area Network connections for increased bandwidth or redundancy. This is available on most current UniFi gateways.
Internet failover: Automatically switch to a secondary internet connection if the primary one goes down. This can also be supplemented with a UniFi LTE Backup device for cellular failover.
Multi-WAN load balancing: Distribute traffic across multiple WAN connections to maximize throughput. Some models allow for customizable weighting to prioritize certain links.
​
VPN Options
​
VPN server: Set up a secure, encrypted tunnel to allow remote users to connect to the local network. Supported protocols include Teleport (UniFi's zero-configuration VPN), WireGuard, OpenVPN, and L2TP.
Site-to-site VPN: Securely connect multiple locations or remote offices over a VPN tunnel. Unifi offers Site Magic SD-WAN for effortless configuration, as well as support for IPsec, WireGuard, and OpenVPN.
VPN client: Connect the Unifi gateway itself to an external VPN service, such as NordVPN, to secure all network traffic. ​
​
Key Benefits
Cost Effective Networking
Licensing Free Management Advanced Security Capabilities Remote User Access - One-Click-VPN
VPN Site-to-Site | IPSEC | SSL-VPN
Configuration SSL Advance capabilities
BGP + OSPF
Multi WANs + Backup Internet [LTE]
Multi SD-WAN
Network Segregation
Cyber+ Security + Geographical control
Location GPS tracking
AirFiber + Remote Uplinks [ 100km+ ]
IPS/IDS Suite and Signatures
Geographical Control and Management
Wireless Configuration for Business
Guest Network | Pay Portal | Hotspot
Intercom | Gate | DoorBell [AI enhanced]
Video monitoring and Surveillance
VoIP and PBX Integration 3rd Party
Small | Medium | Large | Enterprise Networking Advanced AI Capabilities
HA
Redundant Power Cabling and Racking
RMA and Warranty
Cloud & Local Management + Storage
Network Planning and Configuration
Domain | Business e-mail | Website inquire
​​Security and Firewall
​
Stateful Firewall: Filter network packets based on the state of connections.
Application-Aware Layer 7 Firewall: Use Deep Packet Inspection (DPI) to identify and filter traffic based on application, not just ports.
Intrusion Detection and Prevention (IDS/IPS): Monitor network traffic for malicious activity and block threats. The throughput capability of IDS/IPS varies by the gateway model.
Content and domain filtering: Block traffic based on pre-defined or custom categories, such as adult content, social media, or malicious domains.
Ad blocking: Automatically block advertising across the entire network. ​
​
Quality of Service (QoS)
​
Advanced QoS: Prioritize certain types of network traffic to ensure a better experience for critical applications.
Traffic shaping and limits: Implement flexible bandwidth controls to prevent specific clients or networks from monopolizing bandwidth. ​
​
Other features
​
DHCP Server and Relay: Automatically assign IP addresses to devices and forward DHCP requests to another server.
DNS records and local hostnames: Simplify network access by creating custom DNS records for local devices and services.
Integrated RADIUS server: Some UniFi gateways include a built-in RADIUS server for enterprise-grade authentication.
IPv6 support: Comprehensive support for IPv6 connectivity.
mDNS (Multicast DNS) and IGMP Proxy: Support for Bonjour and other multicast services, allowing for easier discovery of network resources across subnet
[ Business_UmbrellaA]
​
BusinessA Internet Connection and Management
BusinessA Camera
BusinessA Video
BusinessA Switch
BusinessA Remote Access
BusinessA Security
BusinessA Door Access
BusinessA VoIP Business
BusinessA NVR
BusinessA Wireless Configuration
BusinessA Peripherals Support
BusinessA Business Monitoring​
No Licensing Cost!!
​
Network Configuration
Network Management
Network Support
Network Security
Full Suite VoIP
Intercom | Access Control
​
R 127500.00 Startup Fee
R 1350 per head Monthly Fee includes Internet & SIP
​
No Infrastructure Costs!
BusinessA 11+ heads
[ Business_UmbrellaB]
​
BusinessB Internet Connection and Management
BusinessB Camera
BusinessB Video
BusinessB Switch
BusinessB Remote Access
BusinessB Security
BusinessB Door Access
BusinessB Gate Access
BusinessB VoIP Business
BusinessB NVR
BusinessB Wireless Configuration & Management
BusinessB Peripherals Support
BusinessB Monitoring
No Licensing Costs!!
Network Configuration
Network Management
Network Support
Network Security
Full Suite VoIP
Intercom | Access Control
​
R 248800.00 Startup Fee
R 1250 per head Monthly Fee includes Internet & SIP
No Infrastructure Costs!
BusinessB 51+ heads
[ Business_UmbrellaC]
​
BusinessB Internet Connection and Management
BusinessC Camera
BusinessC Video
BusinessC Switch
BusinessC Remote Access
BusinessC Security
BusinessC Door Access
BusinessC Gate Access
BusinessC VoIP Business
BusinessC NVR
BusinessC Storage
BusinessB Wireless Configuration & Management
BusinessB Peripherals Support
BusinessB Monitoring
No Licensing Costs!!
Network Configuration
Network Management
Network Support
Network Security
Full Suite VoIP
Intercom | Access Control
​
R 320000.00 Startup Fee
R 1200 per head Monthly Fee includes Internet & SIP
No Infrastructure Costs!
BusinessC 100+ heads
