IT Pro Expert
Search
IT PRO EXPERT

Ubiquiti Universe

Ubiquiti partner · design, install, support

One platform. Every connection. No licence to keep it running.

Ubiquiti builds the whole stack — WiFi 7, routing and threat management up to 100 Gbps, 4K AI cameras, door access, VoIP, storage and environmental sensing — as one system on one operating system, with no licence fee to keep any of it working. We design, install and support it from London, Kent and Sussex, in the United States and remotely worldwide.

Why Ubiquiti

Why Ubiquiti is our first recommendation for every home and business

We install and support networks from most of the major vendors, so this is not brand loyalty. In 2026, when a client asks what to build on, Ubiquiti is the answer almost every time — for a four-bedroom house, a fifty-seat office or a multi-site estate. Here is why.

You own the hardware, you own the data, and nobody can switch it off.

No licence to keep it working

Every feature ships with the hardware and stays on. With Meraki, Verkada and most cloud-managed rivals, a lapsed licence turns a working device into a brick. That risk simply does not exist here.

One vendor does the whole building

Routing, switching, WiFi 7, cameras, door access, intercoms, phones, sensors, alarm and storage on one operating system. Nobody else offers the full stack; everyone else needs three or four vendors bolted together.

Your data stays on your premises

Footage, access logs, telemetry and AI processing live on your hardware. There is no cloud tier to be paywalled, breached or shut off by a policy change overseas — and it makes UK GDPR and Cyber Essentials evidence far simpler.

Enterprise features at a fraction of the price

IDS/IPS, a zone-based firewall, VPN, SD-WAN and multi-site management are included. A U7 Pro WiFi 7 access point lists at US$189 and needs no licence; flagship WiFi 7 access points from legacy vendors list at over £1,000 before the annual licence.

Starts small, scales to 100G

An Express 7 on a shelf and a 100-gigabit Enterprise Firewall Core run the same UniFi OS and the same app. Grow from a home to a campus without changing platform, retraining staff or migrating configuration.

Resilience is built in, not bolted on

Shadow Mode gateway failover, MC-LAG and stacking on the switches, port-level redundancy on the E7 access points, and a US$99 5G Backup that plugs into any PoE port. Most vendors charge licences and hardware for each of those.

It keeps getting better, for free

Network 10 shipped six feature releases this year — WiFi Doctor, roaming journeys, SafeOps, Time Machine, Channel AI — and every one was a free update to every gateway ever sold. Rivals ship the same improvements as licence upsells.

One app, and hardware you are proud of

A single interface on desktop or phone for everything, and equipment that is thin, quiet and good-looking enough to mount in a client-facing space. Etherlighting ports tell you what is plugged in from across the room.

For the home

  • Doorbell and camera footage stored at home — no monthly cloud plan, ever
  • Parental controls and schedules at the network level, which a teenager cannot uninstall
  • WiFi 7 mesh that covers the garden and garage, from £0 in subscriptions
  • Smart-home gadgets isolated on their own VLAN, away from the banking laptop
  • A router that does not need rebooting, managed from the same app as the cameras and door

For the business

  • Replace four or five vendors and support contracts with one platform and one partner
  • Threat prevention, segmentation and identity-aware policy included on day one
  • Door credentials on staff phones, revoked in seconds when someone leaves
  • Multi-site management, blueprints and zero-touch provisioning at no charge, however many sites
  • A five-year cost that is mostly hardware, so the budget is predictable and the kit is yours
100M+devices deployed
200+countries
£0licence fees
18+product lines
What changed this year

New for 2026: UniFi at 100G, at the edge and at home

Ubiquiti’s 2026 has run in both directions at once. At the top: a 100-gigabit firewall, a 100G core switch and a 16-bay ZFS NAS for campuses and data halls. At the bottom: cameras that need no recorder, a plug-in 5G backup for the smallest site, and a plug-and-play WiFi 7 mesh for the home. Everything below is shipping as of September 2026.

Gateways · June 2026

Enterprise Firewall Core

A 100-gigabit UniFi gateway: 79 Gbps IDS/IPS, 61 Gbps of full SSL inspection, 22,500+ clients, 10 million concurrent sessions and 5,000+ IPsec or WireGuard tunnels. Four 100G QSFP28, four 25G SFP28 and eight 10GbE ports, dual hot-swappable PSUs and Shadow Mode failover in 1U. It runs the Network application only — the firewall, not the cameras.

79 Gbps IPS100G22,500+ clientsDual PSU
Gateways · April 2026

Dream Machine Beast

The largest all-in-one console: 750+ managed devices, 7,500+ clients and up to 40 4K cameras from one rack unit, with eight 10GbE RJ45, two 10G SFP+ and two 25G SFP28 ports, two 3.5" drive bays and the full application suite — Network, Protect, Access, Talk and Connect. Up to 25 Gbps IDS/IPS. No PoE on board, so pair it with a PoE switch.

7,500+ clients8× 10GbE40× 4K camerasVRRP HA
Switching · September 2026

Enterprise Campus Core and Campus 48S PoE

The Campus Core is a 3.2 Tbps Layer 3 core with 32 100G QSFP28 ports, MC-LAG for high availability, redundant power and hot-swap fans. The Campus 48S PoE puts 32 2.5GbE and 16 10GbE ports on one stackable switch, all PoE+++ from a 2,150 W budget, with four 25G and two 100G uplinks. Both carry Etherlighting.

32× 100GMC-LAGPoE+++ all portsStacking
Protect · March 2026

G6 Edge cameras

Dome, turret and bullet cameras that work with or without a recorder. Each has 128 GB of on-board storage, a large 1/1.2" sensor, 2.36× optical zoom, 50 m+ detection range, built-in Edge AI with on-camera search, and zero-touch onboarding through Site Manager. The bullet adds radar for perimeter work. Add an NVR later for central, redundant recording.

NVR optional128 GB on boardOptical zoomRadar (bullet)
Recording · May and June 2026

UNVR G2 Pro and Enterprise NAS

The second-generation Pro recorder brings Edge AI analytics to the NVR itself, an HDMI output for a wall monitor and up to eight bays for around 60 days of retention. Above it sits the new Enterprise NAS: a 3U, 16-bay appliance built on ZFS with 25G connectivity, M.2 NVMe cache and redundant power, managed inside UniFi Drive.

Edge AI on the NVRHDMI out16-bay ZFS25G
Internet · May 2026

UniFi 5G Backup

A PoE-powered 5G RedCap antenna that plugs into any UniFi PoE port — not a WAN port — and takes over automatically when the line drops. Mount it on a wall, window or desk wherever the signal is best, use your own SIM or eSIM, and expect enough throughput to keep email, VoIP, card terminals and VPN alive. List price US$99 / €89.

Plug into any PoE portAuto-failoverOwn SIM / eSIM5G RedCap
WiFi · September 2026

Whole-Home WiFi 7

Express 7 gateways in two- and three-packs that mesh over a true 10G Multi-Link backhaul on 5 GHz and 6 GHz together, with placement guidance in the app and about 160 m² of coverage per unit. Plug-and-play for a home, yet still a UniFi network: the same VLANs, the same app, and any other U7 access point can join the mesh.

MLO mesh backhaul6 GHzUSB-C powered2 or 3 pack
Management · all year

Fabrics, Site Manager and Network 10

Fabrics turns Site Manager into one management fabric for an estate: central policy with data kept on-premise, role-based access, identity-provider sync, device blueprints and full-site zero-touch provisioning. Network 10.1 added WiFi Doctor and roaming journeys; 10.4 brought eBGP, IPv6 VPN and Handoff Suggestions; 10.6 added Topology Spotlight, Time Machine views, nightly Channel AI, SafeOps rollback protection and port locking.

Multi-site policyRBAC + SAMLBlueprintsSafeOps
Product universe

Everything your network needs, built by one company

From a 100G core to a temperature sensor in the loft, every Ubiquiti product shares UniFi OS — one console for the whole estate, physical and digital.

Cloud gateways and firewalls

From the Cloud Gateway Ultra, Max and Fiber on a desk, through the Dream Machine Pro Max and Dream Machine Beast, up to the Enterprise Fortress Gateway and the 100G Enterprise Firewall Core. Zone-based firewall, IDS/IPS, deep packet inspection, VPN and SD-WAN in one box, managed from anywhere.

IDS/IPSSD-WANVPNShadow Mode HA

Managed switching

Pro Max switches with Etherlighting for at-a-glance port status, Pro XG for 10GbE PoE++, Enterprise for all-port 2.5GbE, and Enterprise Campus for stackable PoE+++ access and 100G aggregation and core. Layer 3 routing, MC-LAG and per-port power control throughout.

PoE++ / PoE+++2.5 / 10 / 25 / 100GEtherlightingStacking

WiFi 7 access points

U7 Pro, Pro Max and Pro XGS indoors; U7 Outdoor and Pro Outdoor outside; U7 Pro Wall and In-Wall for rooms; Express 7 and Whole-Home WiFi for homes; and the E7 and E7 Campus for enterprise density with native port-level high availability.

802.11be6 GHzMLOSpectral scanning

AI cameras

The G6 range runs person, vehicle, animal and package detection on the camera with the Multi-TOPS AI engine, and the G6 Edge models record on board with no NVR required. 4K, HDR and low-light sensors, IP66 and IK-rated housings, and footage that stays on your hardware.

4KOn-device AISmart zonesPoE

Recorders and storage tiers

UNVR Instant for a handful of cameras, UNVR and UNVR Pro for standard sites, UNVR G2 and G2 Pro with Edge AI for larger estates, and the ENVR where camera counts run into the hundreds. RAID protection, 4K playback and AI-powered event search.

RAID4K playbackAI searchOn-premise

Doorbells and entry readers

The G4 Doorbell Pro PoE Kit ships with chime and injector as one SKU. The G6 Entry is a doorbell and access reader in one, with an 8 MP camera and AI detections. The G6 Pro Entry adds a 12 MP camera, a second package camera, a 3" touch display and Face ID alongside Touch Pass, NFC and PIN.

PoE wiredPerson detectReader + cameraFace ID (Pro)

Intercoms

The G3 Intercom terminal offers full-duplex audio, a directory for multi-tenant entrances and Touch Pass support, and the Intercom Viewer display lets staff screen visitors and unlock remotely from inside the building.

Full duplexDirectoryViewer displaySingle PoE

Access hubs

Door Hub and Door Hub Mini for single doors, the Enterprise Access Hub for up to eight doors with battery backup, Gate Hub for vehicle entrances, Elevator Hub for up to 18 floors, and Retrofit Hub to keep existing Wiegand and OSDP readers in service.

8 doorsBattery backupWiegand / OSDPOffline capable

Readers and credentials

G3 Reader Pro, Reader Flex and G3 Reader, plus the compact Access Ultra for low-traffic interior doors. Credentials can be NFC cards, keyfobs, PINs, Face ID on the G6 Pro Entry, or Touch Pass in Apple Wallet or Google Wallet — all revocable instantly from the dashboard.

NFCFace IDTouch PassInstant revoke

UniFi Drive storage

UNAS 2 for a small office, UNAS Pro 4, UNAS Pro and UNAS Pro 8 for growing sites, and the 16-bay Enterprise NAS on ZFS for the rack — RAID-protected storage with SMB and NFS sharing, camera footage offload and backup targets for Mac and Windows, managed from the same console as everything else.

RAID / ZFSSMB / NFSBackup targetUniFi OS native

Cellular backup and rugged

UniFi 5G Backup for low-cost automatic failover from any PoE port, UniFi 5G Max where cellular is the primary line, and the Dream Router 5G Max with dual-SIM 5G built into the gateway. The UniFi Industrial series covers plant rooms, yards and temperature extremes.

5G RedCapDual SIMAuto-failoverIndustrial temp

Building-to-building links

UDB Pro and UDB Pro Sector bridges carry a network across a car park, a yard or to a second building without trenching fibre, and the new AirWire adds a WiFi 7 Multi-Link bridge — all aimed, adopted and monitored in the same console as the rest of the estate.

Point-to-pointSectorNo trenchingOutdoor

SuperLink sensors

A SuperLink Gateway links wireless environmental sensors, smoke and CO alarms, vape and air-quality detectors, glass-break sensors and relays into the same dashboard as the network and cameras, with threshold alerting through Alarm Manager.

Temp / humiditySmoke and COVape detectionThreshold alerts

Alarm and audio

Door and window contacts, motion and glass-break detection, indoor and outdoor sirens, keyfobs and the new 100 dB AI Speaker Indoor for spoken warnings — all tied to the same event pipeline as your cameras, so a trip starts recording automatically.

PIR motionSiren PoECamera-linkedAI Speaker

UniFi Talk VoIP

A phone system inside UniFi OS with desk phones, softphones, SIP trunks, IVR menus, voicemail-to-email and call recording, and no per-user software licence. Lines and numbers are the only running cost — see our VoIP services for line supply and number porting.

SIP trunksIVRNo per-user feesCall recording

Smart power

Smart PDUs and power strips with per-outlet monitoring, remote reboot, scheduled outlets and energy reporting — so a hung device can be power-cycled from a phone instead of a site visit.

Per-outletRemote rebootEnergy reportingScheduling
The unified ecosystem

Every product. One platform. Total visibility.

Where most vendors bolt subsystems together after an acquisition, Ubiquiti engineered the stack to work as one organism — networking, cameras, physical access, telephony, storage and sensing sharing a single database, a single app and a single set of rules.

UniFi OS — application map One console · one database · one policy set
UniFi OS Site Manager + Fabrics Gateways Routing / IDS/IPS / SD-WAN Switching PoE / VLAN / stacking WiFi 7 U7 / E7 / Express 7 Protect G6 / Edge / NVR Access Doors / gates / lifts Talk SIP / IVR / handsets SuperLink Sensors / alarm Drive UNAS / Enterprise NAS
Console Network layer Physical security and comms Cross-application event

Cross-system intelligence

A door sensor trips, the nearest cameras start recording and the event lands on one timeline — because every application shares the same event pipeline inside UniFi OS.

One app for everything

Network health, live camera feeds, door events, calls, power draw and alarm state in a single interface on desktop or phone.

Blueprints and zero-touch

Adopt a device and it inherits VLANs, PoE limits, firewall rules and QoS from the site blueprint. Whole sites can be provisioned from the mobile app before the hardware is unboxed.

Fabrics for multi-site

Push firmware, configuration and policy templates across every site from one fabric, with role-based access control and SAML identity sync for the people who administer it.

Hardware, by category

Precision-engineered hardware. Every detail considered.

From the ultra-thin U7 Pro access point to a rack of Enterprise Campus switching, every UniFi device is designed for professional environments — and looks the part in a comms cupboard that clients walk past.

Gateways and routing UniFi core

Dream Machine Pro Max

1U all-in-one for growing businesses: 200+ UniFi devices and 2,000+ clients, dual WAN over 2.5GbE RJ45 and 10G SFP+, two drive bays for recordings, up to 5 Gbps IDS/IPS and Shadow Mode failover. Still the right answer for most offices.

5 Gbps IPS10G SFP+Dual drive bays

Dream Machine Beast

The 2026 campus-scale console: 750+ managed devices, 7,500+ clients, up to 25 Gbps IDS/IPS, eight 10GbE RJ45 plus 10G SFP+ and 25G SFP28 ports and two 3.5" bays in a single rack unit — the full application suite without stepping up to a dual-PSU chassis.

25 Gbps IPS7,500+ clients8× 10GbE

Enterprise Fortress Gateway and Enterprise Firewall Core

The Fortress Gateway brings 25 GbE, 5,000+ clients, dual hot-swappable PSUs and true high-availability pairing. The Firewall Core moves to 100G: 79 Gbps IDS/IPS, 61 Gbps SSL inspection and 22,500+ clients, for estates where a gateway outage is a business incident.

25 / 100GDual PSUHA pair

Cloud Gateway Fiber and Cloud Gateway Max

Desktop consoles that run the full UniFi application suite. UCG-Fiber terminates fibre directly with 10G throughput; UCG-Max adds on-board recording for a small camera estate. No rack required for either.

Multi-gigDesktopFull app suite

Dream Router 7 and Express 7

Gateway, WiFi 7 access point, PoE switch and console in one unit with the Dream Router 7, or the palm-sized Express 7 that can be a gateway, a wired access point or a mesh node — the shortest path to a complete UniFi network for a home or first site.

WiFi 7PoE ports (UDR7)All-in-one

5G Backup, 5G Max and Dream Router 5G Max

Three ways to keep a site online when the line fails: the plug-in 5G Backup for automatic failover from any PoE port, the 5G Max where cellular is the primary connection, and a Dream Router with dual-SIM 5G built in. Cellular presents as a standard WAN.

5G RedCap to full 5GAuto-failoverDual SIM
Managed switching PoE · Layer 2/3 · stacking · MC-LAG

Pro Max 16 / 24 / 48 PoE

The volume choice. Selective 2.5GbE PoE++ ports for WiFi 7 access points alongside standard gigabit, Layer 3 routing, and Etherlighting — ports that glow by link speed, VLAN or locate mode, which turns a rack audit into a glance.

Etherlighting2.5GbE PoE++Layer 3

Pro XG 10 PoE

Ten 10GbE ports with PoE++ in a compact chassis — the aggregation layer for U7 Pro XGS and E7 access points, high-throughput servers and NVR appliances that would otherwise bottleneck on gigabit.

10GbEPoE++Aggregation

Enterprise series

2.5GbE on every port with a large PoE budget, built for floors that are entirely WiFi 7 and where every port may end up feeding an access point or a camera rather than a desk.

All-port 2.5GbEHigh PoE budgetWiFi 7 ready

Enterprise Campus 48S PoE and 24S PoE

Stackable Layer 3 access switches with 2.5GbE and 10GbE copper ports that are all PoE+++, 25G SFP28 and 100G QSFP28 uplinks and redundant power. The 48S carries a 2,150 W PoE budget for floors full of WiFi 7, cameras and AV.

PoE+++ all portsStacking100G uplinks

Enterprise Campus Aggregation and Core

A 1.8 Tbps 100G/25G aggregation switch and a 3.2 Tbps core with 32 100G ports, both Layer 3 with MC-LAG so a pair can present one logical uplink to every downstream switch. Redundant power and hot-swap fans throughout.

3.2 TbpsMC-LAG32× 100G

Flex 2.5G PoE, Flex Utility and ProAV

Compact switches powered by their own PoE uplink that pass PoE onward — for rooftop cameras, AV cabinets and desks — plus the EAV ProAV switches and EAV Bridge for video-over-IP installations that need multicast handled properly.

PoE poweredPoE passthroughProAV
WiFi 7 access points 802.11be · 6 GHz · MLO

U7 Pro XGS

Eight-stream ceiling WiFi 7 with a dedicated spectral scanning radio, so the access point monitors interference continuously instead of interrupting client traffic to scan. Uplinks at 10/5/2.5/1 GbE and needs PoE++.

Spectral scanning10GbE uplink8 streams

U7 Pro and U7 Pro Max

The everyday WiFi 7 workhorses: tri-band with 6 GHz and multi-link operation, ultra-thin ceiling mount, single PoE+ cable. The right access point for offices, classrooms, hotel rooms and retail floors.

Tri-bandMLOPoE+

E7 and E7 Campus

The enterprise tier, with native high availability through port-level redundancy and AFC-enabled 6 GHz for standard-power use where regulators allow it. Specified where an access point going dark has to be survivable.

Native HAAFC 6 GHzPoE++

U7 Pro Wall and U7 In-Wall

Replaces a wall plate with a WiFi 7 access point plus wired passthrough ports — the practical answer for hotel rooms, student accommodation, clinics and any building where ceiling mounting is not on the table.

In-wallPoE passthroughPer-room

U7 Outdoor and U7 Pro Outdoor

Weatherproof WiFi 7 for terraces, car parks, yards and warehouses, with mesh uplinks for the spots a cable cannot reach. Pair with a Flex Utility switch to power cameras from the same run.

WeatherproofMesh capableOutdoor PoE

U7 Lite, U7 Long-Range and Express 7

Entry WiFi 7 on standard 802.3af PoE, so they work with switches already in the rack: Lite for straightforward coverage, Long-Range for open spaces. Express 7 packs bring the same radios to homes as a plug-and-play Whole-Home mesh.

802.3afBudget tierWhole-Home mesh
Cameras, doorbells and recorders UniFi Protect · local AI

G6 Pro Turret / Dome / Bullet

The flagship line: a large sensor with optical zoom, 4K capture, and the Multi-TOPS AI engine running person, vehicle, animal and package detection on the camera. IP66 and IK-rated housings; footage stays local.

Optical zoom4KEnhanced AI

G6 Edge Turret / Dome / Bullet

The 2026 line that records on board: 128 GB storage, a 1/1.2" sensor, 2.36× optical zoom, 50 m+ detection and AI search on the camera. Run them standalone with cloud onboarding, or adopt them to an NVR for redundant central recording.

NVR optionalRadar (bullet)Zero-touch

G6 PTZ, G6 180, G6 Pro 360 and G6 Mini Dome

Motorised pan-tilt-zoom with auto-tracking; a dual-sensor 180° camera with spotlight for a wide frontage; a 12 MP ceiling-mounted 360° view with digital PTZ; and the compact Mini Dome with two-way audio for busy indoor spaces.

Auto-trackOne-for-fourTwo-way audio

AI Multi Sensor 4 and AI Theta

Multi Sensor 4 covers 360° from four 4K sensors on one PoE++ mount — 32 MP combined, 2.33× optical zoom on each lens and on-camera SSD storage. AI Theta is a modular hub with interchangeable wide, long-distance and 360° lenses for discreet interiors.

4× 4KModular lensesSingle timeline

AI LPR, G4 Doorbell Pro PoE Kit and G6 Entry

Dedicated licence plate recognition for gates and car parks, with list matching and gate triggering handled locally. The doorbell ships as one SKU with chime and injector, and the G6 Entry combines doorbell, 8 MP AI camera and Touch Pass reader in one unit.

Plate recognitionGate triggerPoE wired

UNVR G2 / G2 Pro, ENVR and Enterprise NAS

Second-generation recorders with Edge AI, faster processing and HDMI output, backward compatible with G3, G4, G5 and G6 cameras. The ENVR takes the same architecture into estates with hundreds of cameras, and the 16-bay Enterprise NAS provides ZFS bulk storage alongside.

RAID hot-swapBackward compatibleEstate scale
Physical access control UniFi Access

Enterprise Access Hub

Entry and exit control for up to eight doors from one hub, with battery backup so doors keep working through a power interruption. One hub often covers a whole warehouse or floor plate that used to need four controllers.

8 doorsBattery backupEntry + exit

Door Hub, Door Hub Mini and Retrofit Hub

Single-door control with full I/O for strikes, magnetic locks, request-to-exit sensors and door contacts. Retrofit Hub keeps existing Wiegand and OSDP readers in service on existing cabling, which often halves the cost of a changeover.

Full I/OWiegand / OSDPRetrofit

Gate Hub and Elevator Hub

Gate Hub drives a vehicle gate with intercom check-in and licence plate unlock when paired with a Protect AI camera. Elevator Hub authorises floor selection from in-car readers, supporting up to 18 floors.

Plate unlock18 floorsPoE

G6 Entry and G6 Pro Entry

Door entry stations that report into both Protect and Access from one PoE cable. The G6 Entry pairs an 8 MP AI camera with Touch Pass and NFC; the Pro adds a 12 MP camera, a second package camera, a 3" touch display and Face ID, PIN and QR unlock. Both need an Access Hub for door control.

Face ID (Pro)Protect + AccessTwo-way audio

G3 Reader Pro, Reader Flex, G3 Reader and Access Ultra

A touchscreen reader with intercom, a keypad-and-NFC reader, a compact hand-wave reader, and the Access Ultra for low-traffic interior doors such as a server room. All support Touch Pass; the Pro adds two-way audio and live view.

NFC + PINTouch PassLive view (Pro)

Intercom, Intercom Viewer and credentials

An outdoor terminal with a directory for multi-tenant entrances and an indoor display for screening visitors and unlocking remotely. Credentials live in Apple Wallet or Google Wallet as Touch Pass, or on encrypted NFC cards and keyfobs, with instant revocation.

DirectoryApple / Google WalletInstant revoke
Sensing, alarm, storage and voice SuperLink · Drive · Talk

SuperLink Gateway and sensors

The wireless hub that carries UniFi’s sensor estate: temperature, humidity, vibration and door contact for server rooms and cold storage; smoke and CO alarms; and vape and air-quality detection, which schools and hospitality sites are increasingly asked to provide.

Temp / humiditySmoke and COVape detection

Alarm hub, sirens and AI speakers

Door and window contacts, motion and glass-break detection, indoor and PoE sirens, panic and keyfob controls, plus the AI Speaker Indoor and horn speakers for spoken warnings triggered by a camera event.

Glass breakCamera-triggeredPanic / keyfob

UNAS 2, UNAS Pro 4, UNAS Pro and UNAS Pro 8

Network storage from a two-bay unit for a small office to an eight-bay appliance, with RAID, SMB and NFS sharing, camera footage offload and backup targets for Mac and Windows — administered inside UniFi OS.

2 to 8 baysRAIDSMB / NFS

Enterprise NAS

A 3U, 16-bay rack appliance on ZFS with 25G connectivity, M.2 NVMe for cache and redundant power — bulk storage for camera archives, backups and file shares at campus scale, in the same console as the recorders it serves.

16 baysZFS25G + NVMe

UniFi Talk handsets

PoE desk phones tied to the Talk application running on your console: HD voice, presence, transfer, conference, busy-lamp keys and voicemail-to-email, with SIP trunks and no per-user licence. Talk 5.2 arrived in June 2026.

HD voiceBLF keysNo per-user fee

Smart PDUs and UISP

Per-outlet monitoring, remote reboot and energy reporting for the rack. For service providers, UISP manages subscribers, CPE provisioning, tower equipment, QoS and network maps at ISP scale.

Per-outlet powerRemote rebootISP scale
Worked example 01 · medium business (illustrative)

Riverside Consulting Group — 50 employees, 2 floors, 1 platform

A fictional 50-person professional services firm replaces an ageing mix of business broadband, a Cisco Meraki licence costing £18,000 a year, three separate CCTV DVRs, an Avaya phone system and HID door fobs with a single UniFi deployment. Here is their Tuesday morning.

Riverside Consulting — network topology 47 clients · 0 threats · 5G backup standing by
Floor 1 Floor 2 Internet 1 Gbps fibre UniFi 5G Backup PoE · auto-failover Dream Machine Pro Max Gateway / IDS/IPS / 10G SFP+ / VPN Pro Max 24 PoE VLAN 10 / 20 / 30 / 40 / 50 Pro Max 16 PoE Floor 1 distribution U7 Pro XGS Reception U7 Pro XGS Open plan G6 Pro Turret Front entrance G3 Reader Pro Server room Talk handset Reception desk U7 Pro Meeting rooms U7 Pro Directors’ floor UNVR G2 RAID / 6 cameras G6 Entry Front door / Touch Pass IoT VLAN 40 Fully isolated

A Tuesday morning at Riverside Consulting

  1. 07:45

    Sarah arrives first. The building is smart enough to know.

    Sarah holds her phone to the G6 Entry at the front door. UniFi Access verifies her Touch Pass credential from Apple Wallet, unlocks the door and logs the entry. The camera in the same unit tags the event as a person with access granted rather than simply recording it. Lights and heating, on their own isolated IoT VLAN, come up. Nobody pressed a button.

    Access controlAI cameraIoT automation
  2. 08:30

    The team arrives. 38 devices connect in 12 minutes. Zero complaints.

    Four U7 Pro XGS access points carry 47 laptops, phones and tablets at once, each with a dedicated radio scanning for interference rather than interrupting client traffic to do it. Channel AI re-planned the channels overnight. Guests land on an isolated portal VLAN, separated from staff data. The reception handset is ready for calls seconds after boot.

    WiFi 7Spectral scanningGuest portalVoIP ready
  3. 09:15

    A courier arrives. The door station knows before anyone walks to the door.

    The G6 Entry detects a person approaching six seconds before the button is pressed. A notification with a live preview lands on the receptionist’s phone; she unlocks the door remotely and the visitor is in within 30 seconds. Protect has already logged the event as a package delivery. No DVR, no separate security software, no cloud plan.

    Door station AIRemote unlockAuto-tagging
  4. 11:00

    The IT manager gets an alert. IPS just caught something.

    The gateway flags an unusual outbound connection from a laptop on VLAN 10 that matches a known command-and-control signature, blocks it inline and logs the event. The IT manager sees the alert before he is aware anything happened. With competing vendors that visibility would cost an additional £3,200 a year in UTM licences. Here the base IDS/IPS came with the gateway, and the enhanced Proofpoint signature set is an optional US$99 a year for the site.

    IDS/IPSInline blockCyberSecure (optional)
  5. 14:00

    The Manchester office calls. It rings on every device simultaneously.

    UniFi Talk routes the inbound SIP call to an IVR the receptionist configured herself in 20 minutes, with no PBX engineer involved. It rings the director’s desk phone, mobile app and laptop at once; she answers on the laptop, the call is recorded and the recording lands in her email. The former Avaya system cost £8,000 to install and £1,400 a year to maintain.

    UniFi TalkIVRHD voiceCall recording
  6. 17:30

    The office empties. The system locks itself.

    When the last credential exits, an automation runs: heating drops back, non-essential PoE ports power down, cameras switch to high-sensitivity motion mode and the server room door reverts to credential-only. If the fibre fails overnight, the 5G Backup takes over and the cameras keep uploading alerts. The IT manager checks the app on the way home — all green. Nine months after deployment, not a single on-site support visit has been needed.

    PoE automationSmart schedulesRemote management
Riverside Consulting — illustrative five-year IT cost
£127,400former multi-vendor stack
£18,600Ubiquiti UniFi, hardware only
£108,800 five-year saving

Riverside is a worked example, not a client. The figures show the shape of a typical comparison; we will model the real numbers for your sites.

Worked example 02 · smart home (illustrative)

The Thompson Residence — 4 bedrooms, 2 floors, utterly connected

The Thompsons are done with consumer routers that reboot monthly, a £100-a-year doorbell cloud subscription, random voice-assistant outages and the one blind spot in the garden where the WiFi dies. They want it to work, everywhere, always — and look good doing it.

Thompson Residence — whole-property overview 22 devices connected · 0 dead zones
Upstairs Ground floor Garage Front door WiFi 7 coverage: whole property + garden Garden U7 Pro Landing SuperLink sensors Loft + bedrooms Kids VLAN Scheduled off 21:00 G6 Pro Turret Front drive Dream Router 7 Gateway / UniFi OS Flex 2.5G PoE Comms cupboard U7 Outdoor Garden G6 Entry Doorbell / Touch Pass UNAS Pro Family archive EV VLAN + PDU Isolated / metered

Life inside a properly built smart home

Night mode, automatic

After 11pm the IoT VLAN is throttled so smart bulbs and thermostats cannot pull updates during sleeping hours, and cameras switch to enhanced night vision. Silent inside, wide awake outside.

Children’s devices, actually controlled

Tablets and consoles sit on their own VLAN with a schedule — internet stops at 9pm on school nights. Parental controls that work at the network level, not an app a teenager can uninstall.

Someone at the door at 2am

The G6 Entry detects motion before the bell rings and both parents get a live preview. They watch, decide it is a fox, go back to sleep. The clip is already on the recorder — no cloud, no monthly fee.

Working from home that works

Two video calls, 4K streaming, three IoT devices and the children gaming, all at once, without buffering. WireGuard on the gateway means corporate laptops connect securely with one tap.

Holiday mode

One toggle sets cameras to maximum sensitivity, restricts the door reader to family credentials and fires a notification the moment any device joins the WiFi — whether it should be there or not.

Every room, every temperature

SuperLink sensors watch temperature and humidity in bedrooms, loft, utility room and garage. If the boiler room passes 30°C, or a window is left open in winter, you know before it becomes a problem.

A proper alarm, not a gadget

Door and window contacts, motion detectors and an outdoor siren share a dashboard with the cameras. A 2am trip starts the exterior cameras recording, arms the siren in unauthorised zones and rings your phone.

After dark, AI eyes that never sleep

From dusk the exterior cameras run in low-light mode, infrared-assisted in total darkness, with person and vehicle detection running all night. Any movement in the drive or garden sends a clip — stored locally.

EV charging, isolated and scheduled

The charger sits on its own VLAN, so its app and cloud traffic never touch the family network, and charging is scheduled to the cheap-rate tariff. The garage’s smaller loads sit on a metered smart PDU, so unexpected overnight draw raises an alert.

Family photos, yours, locally

The UNAS holds the photo library, video and camera footage on RAID-protected drives in your own house. It is a Time Machine target for the Macs and an SMB share for the PCs. No storage bills, no question about who owns your memories.

Tradesperson access, controlled and logged

Electrician arriving while you are at work? Issue a credential that expires at 4pm. They get isolated guest WiFi and the front door only, and the cameras log arrival and departure while you watch from the office.

One app, one login

Network, cameras, doors, sensors, storage and power in a single interface — instead of four apps that each want their own account and their own subscription.

The old smart home

  • ISP router with a 20 m² dead zone in the garden
  • Ring doorbell: £99 a year cloud subscription
  • Nest cameras: another £60 a year cloud plan
  • iCloud or Google Photos: £36–£120 a year for family storage
  • Separate alarm system: £25–£40 a month monitoring
  • No temperature monitoring until something goes wrong
  • EV charger with no visibility on cost or schedule
  • Four separate apps for cameras, router, lights and alarm
  • IoT devices on the same network as the banking laptop
  • Router rebooted every three weeks to fix dropouts

The Thompson home on UniFi

  • WiFi 7 across every room, the garden and the garage
  • AI cameras and door station stored locally — £0 a year, permanently
  • Family photos and video on a private NAS — £0 a year, no cloud
  • Full alarm: door contacts, motion, siren, camera-triggered
  • Temperature and humidity monitored in every zone
  • EV charging isolated on its own VLAN and scheduled
  • One app controls everything — no juggling five accounts
  • IoT, children, guests and cameras each on their own VLAN
  • Network-level parental controls that cannot be bypassed
  • A router that simply does not need rebooting
Thompson home — illustrative annual subscription costs
£480 / yrdoorbell + cameras + photo storage + alarm monitoring
£0with Ubiquiti, every year

Cameras record locally. Photos live on your own storage. The alarm needs no monitoring contract. The AI runs on your hardware. There is no cloud tier, no premium plan and no annual renewal — you buy the hardware once.

Artificial intelligence

AI isn’t a feature. It’s the foundation.

Machine learning runs on the UniFi device itself, not in a vendor cloud that can be revoked or paywalled. From camera analytics to nightly channel planning, the inference happens on your hardware, on your premises, around the clock.

Enhanced video detections

The Multi-TOPS engine in the G6 generation identifies people, vehicles, animals and packages on the camera, with smart zones, cross-line detection and loitering alerts — no cloud round trip.

Fingerprinting and drift detection

The gateway fingerprints every client to classify it, flags unknown devices on sensitive VLANs, and the Drift Inspector spots configuration that has wandered from the blueprint before it becomes an outage.

Channel AI and client steering

Channel AI re-plans the radio environment in a nightly window and access points steer clients to the best band using live signal, airtime and interference data — which is what removes sticky clients and edge-of-cell dead spots.

AI-powered video search

Ask for every vehicle that entered the car park on Tuesday between 6 and 8pm and get it in seconds, because every event was indexed as it was recorded — on the NVR, or on a G6 Edge camera itself.

Licence plate and face recognition

Plate matching against allow and deny lists with automated gate triggering, and Face ID unlock on the G6 Pro Entry — processed locally, with no third-party service in the loop.

Counting and occupancy insights

Count people crossing a line or entering a space, see peak-hour patterns and export reports for fire safety, compliance and space planning.

UniFi AI engine Illustrative console
Local processingNo cloud requiredReal time24/7 autonomous
Enterprise security

Security isn’t an add-on. It’s included.

Every UniFi gateway ships with threat management that would carry an annual licence with competing vendors — running locally, under your control. If you want that hardened further, our cyber security team takes it from there.

Intrusion detection and prevention

Signature-based IDS/IPS with inline blocking and per-network sensitivity, running at line rate on the gateway — up to 79 Gbps on the Enterprise Firewall Core.

Deep packet inspection

Layer 7 application identification with per-application bandwidth control, category blocking and clear visibility into what each device is actually doing.

DNS and content filtering

Malware domains, phishing sites, ad networks and adult categories blocked at the network level, protecting every device without endpoint software.

WireGuard, IPsec and OpenVPN

Site-to-site and remote-access VPN with modern key exchange, split tunnelling and multi-factor integration, plus licence-free Site Magic SD-WAN for multi-site estates.

Zone-based segmentation

Zone-based firewall policy, unlimited VLANs, client isolation, guest portals with vouchers and per-device rules — so IoT, CCTV, staff and guest traffic never share a broadcast domain.

Identity-aware access

RADIUS, LDAP, Microsoft Entra ID, Google Workspace and SAML give you policies tied to people rather than IP addresses, with MFA, SSO and door credentials in one system.

Threat signatures update automatically — and can go further

Built-in IPS signatures and blocklists refresh on their own. The optional CyberSecure service adds Proofpoint’s curated set of 55,000+ signatures with weekly updates and Cloudflare-powered content filtering for US$99 a year per site, with an Enterprise tier for the largest gateways. It is the one security subscription in the platform, and it is optional.

Local data sovereignty

Security processing, camera footage, access logs and network telemetry stay on your hardware rather than being handed to third-party cloud infrastructure.

Safer changes, fewer outages

Network 10.6’s SafeOps protects against configuration changes that would cut you off, including management VLAN edits; port locking binds a switch port to a specific UniFi device; and DHCP guarding stops rogue servers on the LAN.

Ready for the frameworks you are audited against

On-premise retention, configurable footage expiry, complete audit trails and local RADIUS or LDAP support the evidence UK GDPR, ISO 27001, PCI-DSS and Cyber Essentials assessments ask for. Admin sign-in supports hardware security keys and TOTP.

The subscription question

Buy the hardware once. Keep every feature.

No licence fees. No feature tiers. Nothing to renew to keep the network running.

Cisco Meraki, Fortinet, Sophos and Verkada all hold features behind an annual licence, and with some of them the hardware stops working when it lapses. Ubiquiti does not: every feature of Network, Protect, Access, Talk and Drive ships with the hardware, and Site Manager is free for unlimited sites. A handful of optional services carry a charge — listed below, because a plain-spoken page should say so.

Traditional vendors

  • Cisco Meraki: every device needs an annual licence, and hardware stops passing traffic after it lapses
  • Fortinet: IPS, web filtering and antivirus are FortiGuard subscriptions — when they expire, the protection stops
  • Sophos: Xstream protection bundles and orchestration add-ons renew annually
  • Verkada: every camera and sensor carries a mandatory cloud licence
  • Avigilon Alta: cloud video and AI detection are subscription products
  • Feature sets tied to payment tiers
  • A lapsed licence means a degraded, or bricked, device

Ubiquiti UniFi

  • Buy the hardware once — every feature included
  • IDS/IPS, DPI, SSL inspection and AI video all included, with no upsell
  • Multi-site management and Site Magic SD-WAN free, across unlimited sites
  • Site Manager and Fabrics always free — no tiered plans
  • Camera AI runs on the device, with no cloud fee
  • Access control, VPN and Talk bundled into the OS
  • The full feature set is available from day one

Optional extras that do carry a charge

  • CyberSecure: Proofpoint threat signatures and Cloudflare content filtering, US$99 a year per site (US$499 for the Enterprise tier on large gateways). The base IDS/IPS works without it.
  • Phone lines and numbers: UniFi Talk itself is free; the SIP trunks or call plans that carry your calls are a running cost, as with any phone system.
  • Touch Pass credentials: each reader includes free one-year mobile passes; beyond those, Touch Pass is licensed per user. Cards, fobs, PINs and Face ID carry no per-user charge.
  • Cellular data: the 5G Backup and 5G Max need a SIM or eSIM plan from a carrier of your choice.
  • UI Care and official hosting: extended five-year replacement cover, and Ubiquiti’s hosted Network application for those without a console, are both paid and both optional.
The operating system

UniFi OS — the brain behind everything

One operating system runs on every console, gateway and Dream Machine, hosting Network, Protect, Access, Talk, Drive, Connect and InnerSpace as modular applications on shared hardware.

One dashboard

One login, one URL. Topology, camera feeds, door events, call logs and power draw in a single view, with Topology Spotlight to focus on the clients that matter in a busy estate.

Fabrics and Site Manager

Orchestrate policy centrally across every site on a hybrid-cloud fabric while the data stays on-premise, with no hosting licence attached.

Blueprints and zero-touch

Define a site once as a blueprint, then provision hardware against it — including whole-site setup from the mobile app before the boxes are opened.

Role-based administration

Granular roles, consolidated people management and identity-provider sync over SAML, so access to the estate follows your directory rather than a shared password.

Updates you can trust

Firmware rolls out across adopted devices inside your maintenance window, with granular bulk updates, SafeOps protection against changes that would cut you off, and Drift Inspector to catch configuration that has strayed.

Hybrid cloud or fully self-hosted

Run through Site Manager or entirely on your own hardware. The features are identical; only the data location changes.

Open API and webhooks

Documented APIs for Network, Protect and Access plus Alarm Manager webhooks let you connect a SIEM, an ITSM platform or home automation without waiting for an integration to be blessed.

Real diagnostic tools

WiFi Doctor, roaming journeys, Time Machine history for radios and ports, remote packet capture and CLI access — the tools an engineer actually reaches for when something is wrong.

Trusted at scale

From startup to stadium

Ubiquiti is deployed across demanding environments — arenas, campuses, hospitals, government sites, service providers and global enterprises — and recommended by MSPs, consultants and network engineers worldwide.

Universities and colleges NHS and healthcare Sports stadiums Retail chains Hotels and hospitality Manufacturing plants Government offices Law firms Logistics and warehouses Data centres Property management ISPs and WISPs Airports and transport Schools and MATs

Sport and live events

Stadium WiFi for tens of thousands of concurrent fans alongside ticketing and point of sale, all managed from one console.

Healthcare

Clinical network segmentation, IP telephony, secure access on medication storage and ward CCTV, with retention and audit trails that stand up to scrutiny.

Education

Multi-building campus WiFi, student isolation, content filtering, timed access policies and visitor portals, run by the in-house IT team.

Hospitality

Guest WiFi across hundreds of rooms with in-wall access points, property management integration, bandwidth tiers, staff isolation and CCTV in one system.

Manufacturing and warehousing

Weatherproof and rugged access points, mesh where cabling is impractical, sensor integration for production monitoring and camera coverage throughout.

Corporate offices

Replace five vendors with one — routing, switching, WiFi, door access, phones and cameras, managed by one person rather than five contracts.

ISPs and WISPs

UISP manages the subscriber base, tower equipment, CPE provisioning, billing integration and network maps, built specifically for service providers.

Managed service providers

Multi-tenancy, templated configuration and centralised alerting let an MSP run hundreds of client sites without adding headcount for each one.

Head to head

How Ubiquiti compares

The clearest difference is the commercial model rather than the feature list — all four vendors make capable hardware. This is where the running costs come from.

Question Ubiquiti UniFi Cisco Meraki Fortinet Verkada
Licence needed to keep the hardware working?NoYes — devices stop passing traffic after the licence lapsesRouting works without; security services need FortiGuard renewalsYes — mandatory cloud licence per device
Intrusion prevention (IDS/IPS)Included; optional Proofpoint signature upgradeAdvanced Security licenceFortiGuard IPS subscriptionn/a
Multi-site cloud managementFree (Site Manager and Fabrics)Part of the licenceFortiCloud / FortiManager tiersPart of the licence
WiFi 7 access pointsYesYesYesn/a
Cameras that record without a cloud planYes — NVR or on the cameraOn-camera storage, but a cloud licence is requiredSeparate product rangeOn-camera storage, but a cloud licence is required
Door access on the same platformYesThird partyNoYes
Phone system on the same platformYes (Talk)NoSeparate product (FortiVoice)No
Environmental sensorsYes (SuperLink)Yes, licensed (MT)NoYes, licensed
Cellular failover from the same vendorYes — 5G Backup from US$99Yes, licensed (MG)Yes, licensed (FortiExtender)n/a
Fully self-hosted optionYesNoYesNo

Reflects each vendor’s published licensing model as at September 2026 and is general in nature; products and terms change, so check the vendor’s current terms for your region. Vendor names are the trademarks of their owners.

What professionals say

Recommended by IT professionals across every industry

We ripped out £180,000 of Cisco Meraki licences and replaced the entire multi-site network with UniFi. The total hardware cost was less than one year of Meraki licensing. Performance is exceptional.
James S.Head of IT, national retail chain — 47 sites
The AI camera analytics saved us immediately — ALPR flagged a vehicle from a previous incident on day one of deployment. The fact it runs locally with zero ongoing cost is genuinely remarkable.
Rachel K.Security Director, commercial property group
As an MSP managing 200+ client sites, UniFi is simply unbeatable. Zero-touch provisioning, templated configs, and centralised monitoring — we tripled our managed site count without adding headcount.
Tom M.Technical Director, IT Pro Expert MSP
We deployed 400 APs across our university campus, 6,000 student devices, and integrated with our existing AD infrastructure. The stability and performance during exam season peak load was flawless.
Prof. P. HillNetwork Architect, UK university
The UniFi ecosystem replaced our legacy Avaya phones, Axis cameras, HID access control, and SonicWall firewall. Four vendors, four apps, four support contracts — now it’s one. The IT team finally has sanity.
Laura W.IT Manager, 600-bed hotel group
We’ve been a Ubiquiti partner for 8 years. The product quality, community, and constant innovation make it our first recommendation every time. Nothing else comes close at this price point with this feature set.
Daniel G.Senior Network Engineer, systems integrator
See it running

The platform in motion

Your Ubiquiti specialist

Designed, installed and supported by us

Please feel free to contact us about any Ubiquiti solution. Our lines are open 9:30 to 5:30 and critical support services are available 24/7.

  1. Survey

    We walk the site, check the cabling and the RF environment with the devices you actually use, and tell you what the network has to carry — before anyone quotes hardware.

  2. Design

    A specified design in UniFi Design Center with VLANs, PoE budgets, camera positions, storage retention and door hardware set out, priced as one build with no licence surprises attached.

  3. Install

    Cabling, mounting, adoption and configuration handled by our engineers, with blueprints applied so every site in your estate is built the same way.

  4. Support

    Monitoring, firmware, changes and fault resolution under one agreement, with critical support available around the clock.

Ready to get your network on one platform?

Tell us about the site and we will come back with a straight answer on what it needs. We cover London, Kent and Sussex, our US base in Florida, and remote support worldwide.

Get in touch

Related services: network installation, CCTV installation, VoIP, cyber security and IT support.

Ubiquiti, UniFi, UniFi OS, UniFi Protect, UniFi Access, UniFi Talk, UISP and associated product names are trademarks of Ubiquiti Inc. This page is an independent showcase; specifications and prices quoted are Ubiquiti’s published figures as at September 2026 and may change. For official products, pricing and support visit ui.com.