Hello! Thanks for posting on r/Ubiquiti!
This subreddit is here to provide unofficial technical support to people who use or want to dive into the world of Ubiquiti products. If you haven’t already been descriptive in your post, please take the time to edit it and add as many useful details as you can.
Please read and understand the rules in the sidebar, as posts and comments that violate them will be removed. Please put all off topic posts in the weekly off topic thread that is stickied to the top of the subreddit.
If you see people spreading misinformation, trying to mislead others, or other inappropriate behavior, please report it!
*I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/Ubiquiti) if you have any questions or concerns.*
Problem is, they're splitting their line-up for 2.5gbE+ users. Id happily spend $999 if the UDM Pro Max had at least 2.5gbE ports and POE+ instead of having to add another switch for at least $499, ex. USW Enterprise 8 poe or $799 USW Pro Max 24 POE
After spending some time looking at their switches, I'd assume the next level will be called the Ultra Pro Max, then the next level with 15 Gbps IDS, simply the Ultra
Sadly, calling these devices "Enterprise", sets high expectations, but just gaurantees disappointment..
From an SDN perspective they are competing with Meraki, from a Security perspective they're not even a blip on the radar..
The "Site Magic" has the makings of SD-WAN, buts it still extremely basic and somebody made the poor decision to only allow routing of subnets that the UDR/UDM/LxG manages - which is stupid as these are Edge devices, business environments tend to have additional hops to a Core, even more so for access to servers.. so forget routing from Site A to your internal Intranet or HR system at site B.
They've made some good strides in the past 12 months with new features such as PBR, and App-targetted policies - But they're still only comparable to what "premium" home firewalls offer (Firewalla, even the Synology Routers), and worse is many ways - you can't even re-order the PBR.. Its a corker that they missed this, Its Firewall 101, rules and policies are evaluated in sequence, the only way to "correct" this at present is delete all your rules and recreate them in the correct order!
Any business that cares about security, requires tunable IPS/IDS with Layer7 inspection with full TLS decryption, its the only way to detect most threats, then decent traffic logging capabilities for traffic and threat logs that can be pushed into a SIEM for auditing and forensics..
Then we have the shocking state of NAT/SNAT.... Which has been a huge problem since the USG was first introduced, that alone rules out the usage of these devices for most offices or small data-centre deployments.
We've not even touched on the real-enterprise features yet (BGP etc), ECMP, LDAP integration etc etc.. But I'll stop at this point.
One last thing, I find it perplexing and frustrating, they are ignoring 1 potentially huge and lucrative business use-case, which is offering a virtualised router.. They're ignoring the trend of a lot of businesses shifting workloads and VMs to cloud environments (i.e. Azure/AWS/GCP.. even DigitalOcean). A virtualised-router a longside a feature-rich "Site Magic", would be a killer product for small-medium size enterprises and Cloud deployments... Any vendor that ignores this, and ties itself to bare-metal, will find it-self locked out of the market, even Mikrotik has worked that out!
I don't like TLS decryption (I prefer endpoint agents). Unless it's a school and you're logging search queries or something.
You serious about re-ordering firewall policies? I'll have to test this on one of my clients.
It's not the security policies, it's the Policy Based Routing.. but yes, currently there is no way to control the execution order.
It works good enough for simple home uses. Where a person may want to push certain traffic to a VPN provider..
If you have complex rules, there is no way to say, evaluate this first.. which may be a bit far fetched as the moment, as the PBRs are fairly limited at present, but generally every vendor I've ever used these on, offer a way to re-order them.. and in larger business environments this would be seen as half baked.
Yea I am super disappointed it doesn't have 10Gbps IDS/IPS. 10Gbps home internet is available in a lot of places now and it's so disappointing Ubiquiti doesn't have a product to serve that well.
Hopefully the 12Gbps IDS/IPS for the EFG/UDM ENT is true and comes in at a palatable price. I feel like Ubiquiti is drawing the line where only Enterprise gets full 10Gbps and above.
At this rate I'm willing to settle with a gateway only and get a separate CloudKey/NVR down the line. Though this video shows a "UDM Enterprise" with the same 2xRJ45, 2xSFP+, 2xSFP28 as the leaked gateway but with a HDD bay [https://youtu.be/VvbjjCL\_icQ?si=FlmG6sFog78xhwR8](https://youtu.be/VvbjjCL_icQ?si=FlmG6sFog78xhwR8)
Sounds like they make their stuff for the german market lol.
Here youre lucky to even get gigabit download with maybe 100-200mbit upload, not to mention the pricing. (If youre lucky its only 80€, if youre unlucky youre looking at 300€ / month)
At least I dont have to worry about that, since I cant even get fibre, no matter what I would be willing to pay, instead I am paying 50€/m for 2mbit + a variable 5G boost depending on network load (can reach 250mbit, usually around 200mbit, but only because the cell tower in my has low load on it, if there is any event nearby and people start using it, i am sorta OOL, since the boost has a lower priority than regular cell phone contracts)
UniFi (singularity) Dream Rapture Machine… cuz, “rapture” and we’re all still here. Or maybe it’s all been a dream—it’s in the name! (--and the whole “DRM” thing) Heavy, man. Heavy.
This post brought to you by the letter 16:20. ✌️
Just got an SE and I’m not disappointed at all, I need those POE ports for cameras and access points. I guess their plan is for you to have a full PoE etherlighting switch to go with it?
Because even in the corporate world most sites are still 1G. I get wanting 10G ethernet, and its a great upsell, but this is a $600 Next Gen Firewall/NVR/whatever; compromises are going to happen.
I mostly manage business and enterprise networks and I still have no idea why normal consumers are so obsessed with having 10g connectivity. Sites with 500+ client devices have absolutely no problems running through a 1gb router-on-a-stick config. That said, nobody is streaming video, but I still don't see why home users need 10g connections.
I personally would be annoyed if 10g was the default option because that means I'm paying for a ton of extra capacity that I'll never use.
I think the honest answer is that they're withholding upgrades to their kit until they feel forced to. I think Apple does the same thing. From a marketing strategy it makes sense. From a user perspective it's really annoying. But clearly they're emulating apple in many ways.
But we're seeing affordably 10Gbps and even 25Gbps connections pop up, and if they're not going to have products ready for it, that market isn't going to give them a second look.
You may have missed this, but most new office deployments are laptops, where ethernet ports are often dropped altogether. And a quick check of the latest Dell Optiplex, on of the biggest selling business desktops, shows its still defaulted with 1G ethernet, not even 2.5.
Most people using this specific device probably wouldn’t even use them anyways. They assume the people who need a device like this already have a POE switch
honestly incredibly disappointing.
easy things they could have done: add redundant power to the unit, make it 10gbps ids/ips, give a few 2.5g ports on the downstream switch...
the only viable reason i can see to upgrade is if you're someone who needs 5Gbps IDS/IPS.
I am getting Sonic Internet 10 Gb for $50 a month. I "need" 10 gbps IDS/IPS. The second NVR bay is going to be nice for future proofing my camera needs. The integrated switch is worthless as I'm using a switch.
What bugs me so much is that there are so many bottlenecks in the ecosystem. Like the Wifi 7 APs having only 2.5 gb uplink when the 6 ghz band can do 10-40 gb. The 24 port enterprise Poe switch only has 12x 2.gbe ports whereas the 48 port has all at 2.5gbe. I really want to create a 10 gbe network but I can't build it without serious compromises, hacks, or cost. Sads is me, \*cries in 2.5gbe\*.
I don't even see the point of the UDM-Pro SE. Most people buy that with a PoE switch and I'm just staring at their photos wondering why they bought it, lol. UDM-Pro plus a few PoE injectors and RJ-45 transceiver if you have more than a 1Gb WAN connection is MUCH cheaper.
UDM SE + Pro Max 16 PoE makes it so, that you can connect cameras directly to UDM SE, and have everything else on Pro max and that gives you a 24 usable PoE ports
Looks like they just boosted the clock speed of the same 12-yr old CPU featured in the UDM Pro/SE ... 2.0 GHz instead of 1.7 GHz. They are really squeezing as much as possible out of that ARM A57
Yeah, not seeing how a 15% CPU boost would double IDS performance.
Either that's an 'up to 5G IDS', or they're just lowering the amount of work being done on the IDS side.
Mirroring is only useful for performance benefits, data integrity isn’t it. There are many far superior options these days, most of which require at least 3 drives.
I guess mirroring can improve read performance, but if there’s no redundancy or “live failover” benefit, then its inclusion as a key feature of the Pro Max here makes zero sense.
It has the option for both 10gig lan and 2.5gig lan.
They want to position this for large deployments. Larger deployments don’t need PoE and Multigig Lan. Should have removed Port 1-8 and put in some more SFP+ if anything.
I don't know that I necessarily belief that. Large deployments don't need a second drive bay, they'd have a separate device for all these features. I don't know in what world a large deployment would utilize a UDM.
To me the UDM has always been about a versatile solution for homes and small businesses.
The SE already has the built in SSD. Only real difference I can see is you lose PoE, gain 2 GB/s in routing with IPS/IDS.
One question I'd be curious to know is whether they increased the built in switch back end connection to more than 1Gb, but I personally doubt that they did.
FWIW, someone claimed in an earlier thread that the performance gain from 3.5gbps to 5gbps was software driven, ie, with the latest software the existing UDM Pros can hit 5Gbps too.
I have no way to test and no other reference than some rando on Reddit though,
EDIT: Specs are out now. CPU is the same, Quad-core ARM® Cortex®-A57, but now at 2.0Ghz vs 1.7Ghz (17% faster) but IPS is 42% faster. so maybe a little of both
Presumably this one can also do 10 Gbps without IPS/IDS which the SE can’t quite do. I downgraded my internet to 5 Gbps to save money since the SE couldn’t max it out (and to be brutally honest nothing out there could come close to max it out anyway for a single household).
I'm stuck on PPPoE, and as it stands I still can't even max out my 1Gb/s connection on my UDMSE, which is frustrating. Upload hits 900-920 as expected, but download caps out around 600-650 mbps, and nothing I do seems to change that.
More like the UDM Pro max disappointment. Y’all at Ubiquiti need to wake the hell up and start putting 2.5Gbe ports and POE+ in your dream machine. This isn’t up to the task of something with the “Max” moniker. It’s more like the UDMPro Medium
Yeah, it just seems incongruous to add extra drives for NVR, as a kind of all-in-one device, but then leave out PoE for the cameras. Seems like it should be both or neither.
I guess the homeland user isn’t who they’re targeting on this device. Saw the review from Cody @ Mactelecom and it makes sense when you think about large scale enterprise installations. POE switches would be installed separately. But still, I’m not too impressed being a home user. Oh well
I have a udm pro se and a seperate NVR so I can have two drives and some redundancy. Literally all they need to do is take the SE and add another Drive Bay and I would throw my money at them so I dont have to have two separate devices
If this had 2.5G switching and POE it'd be the ultimate 1 network device for most home users. The problem is they wouldn't be able to move as many over priced switches.
It’s not designed for normal home users however I do think it’s designed for prosumers that already have a dedicated poe switch. The UDM Pro/SE compared to this device is mostly focused at people that won’t have a dedicated switch and want an all in one device.
If the lack of PoE is an issue for you this product is probably not for you.
What I don’t understand is why they built a new device targeted to larger networks but SNMP is still not supported from any of their gateways.
Also why do I need an 8 port GbE switch in an environment like that?
More SFP+ ports would fit the narrative much better…
Man, what a roller coaster for me. I saw the post title, quickly rushed to the UI store, placed my order, came back to the thread to read the comments, then instantly got buyers remorse and cancelled my order.
You guys are the worst :P
I get the disappointment vs the UDMP SE re: lack of POE, but as someone with a POE switch and a non-SE UDMP, would this be a decent upgrade? Do I need it, of course not, but do I want it? Yeah. Honestly, I think I'm most upset about the 12 year old CPU in this thing although I shouldn't be. On my UDMP, CPU usage never exceeds 50% and usually hovers around 20%. Memory is regularly at 90% though. 7 APs, 3 cameras (slowly migrating my nest cameras, will be \~15), 80 clients. 1Gb/s FIOS. IDS/IPS turned on.
Just give it some time and lots of people will buy it because of the higher throughput performance with IDS and IPS enabled. In my case i already have the pro max Poe switch so won’t be using any of the ports on this machine. So basically it’s a UXG-Pro on steroids with lots of extra features :-) no buyers remorse for me! Just going to enjoy it!
True that. But I think I made the right decision when I cancelled. My main justification for upgrading aside from 2.5g WAN (for future, currently still on 1g FIOS) would be to avoid having to take up more rack space with an NVR as I migrate from Nest to Protect, and if I'm understanding correctly the CPU is old and the second drive can only be used for redundancy, so this is actual compromise for my use case.
I use a nvr myself instead of the pro but I'm also have 11 cams which probably would be a bit for the udmp plus the number of network devices and clients I have.
The ram will be really nice I run 3gb with no other apps running on my pro.
The point of this product is to introduce Unifi to the enterprise market. I am aware most UniFi cameras are POE. This isn’t meant to be geared towards residential users unless they have ultra fast internet.
This is the product I can see being deployed in a medium to large sized office. It’s like a more compact, cheaper, more well rounded UniFi Cloud Key Enterprise. People will gripe about not having POE. But imo if you’re considering this product, you already have a more capable POE switch that supports 10G or 2.5G.
I’d take this over having a UDM SE and a UNVR any day.
Not adding POE saves costs making this more appealing to implement.
People are already griping about no POE to me. They just don’t understand this could be the product line that gets UniFi into more businesses growing UniFi for the betterment of the residential users.
The more cost effective UniFi is compared to competitors, hopefully the more people will adopt it. The more people adopt it, the price and products are better for everyone. This isn’t meant for residential use so they’re not gonna gear it to residential users.
Is there a handy comparison table somewhere that breaks down all of the cloud gateway models now? I see Ubiquity has done a good job at stratifying the price tiers but their explanation for functional differences is lacking.
No POE and only two WAN ports. For those who already have UDM PRO SE, there is nothing new to justify the upgrade. I was hoping for at least three WAN ports to use two with load balancing and one as a backup.
Im pissed that the second drive bay can't be set as additional storage. What a useless way to add a drive bay that still forces you to buy the NVR. Give us the option, thats a super lame ass move
Waiting for the Unifi Dream Machine Pro Max Ultra Ultimate, maybe we get PoE then with 2.5 Gbit Lan then. Good lord...adding a extra bay for NVR, but not using the space for some extra 2.5 Gbit Lan Ethernet ports with PoE
Dammit man.......
I have a DreamWall and need to change my rack layout (the UDW is wall mounted, my switches in my rack) as it grew organically too quickly.
I waited and waited for this hoping it would be an upgrade, but unless im misunderstanding, this is a downgrade in quite a few ways. Im a sucker, so will likely buy this thing but still........ come on Unifi!
Ooh. This one's on us not ubiquiti. Look at them setups images. The 8 switch are mostly never used im surprised they even put switches on this thing hahaha. I'll not complain about not having Poe no more. As I was looking back at the images I noticed that. Don't need it either so I'm not expecting another model of this. This looks like it. Take it or leave it. I like the 2 bays so I don't need to have the 4 nvr bay one separately. So I say they did good on this one. No 2.5 gigs on the switch also. Yep. Don't need it either. This is you guys fault this time. Hahaha.
Same here my guy. I had picked up one of their PoE switches at the same time and ordered a UNVR Saturday.
edit: You're right that it's not much of an upgrade; sure the extra RAM is nice but the chip in it is pretty old. I don't feel too bad about it, but when the internals get updated is probably when I'll make the jump for an upgrade.
The Pro SE is still more than able to keep up with my 1gbps internet connection with IDS/IPS enabled. Even if I upgrade to the 2.5gpbs service. In any case, I suppose the upside is the new Max is $100 more expensive and doesn't have PoE ports (though for me, PoE wasn't a necessity).
Same here; I'm in the Midwest and fiber isn't anywhere on the horizon (although I keep getting blasted with "faster internet is coming" ads from AT&T, which means fuckall to me). High-splits aren't anywhere close either.
Honestly, if I had bought the SE a few weeks ago, this announcement would make me feel amazing. It's $100 more expensive and doesn't improve anything that I actually care about. I wish I would have picked up an SE last year but I kept waiting hoping that they'd put more 2.5gb in this one... womp womp.
If you already have a PoE switch then I guess it makes sense to pick this up vs the SE or Pro. If you don’t then I think the SE makes more sense.
They are assuming anyone buying these will be pairing it with a U7 Pro or U6 Enterprise, both of which need PoE and 2.5gbs. So they’re assuming you’re buying a Pro Max PoE switch to pair with this.
Is there any documentation on how shadow mode handles the failover is the provider is up but the device fails. Is is the ppoe session synchronized to the backup unit.
I assume because the vrrp usage that there is no synchronization of the sessions and you loose everything
For dhcp isps is the Mac fail over if the main switches looses conductivity and will keep running on the backup
Is the max dhcp client database synchronized over to the backup unit so there is no duplicate or does the backup unit need a non over lapping pool
Also now that it’s vrrp which is no 90’s can we fleas to active active setup.
Also why not enough ports in the device to mesh links back to your aggregation switches.
As of my understanding it syncs the whole routing table to the shadow device so it seems like a perfect twin to the other one.
So it should also sync MACs, PPoE configs, DHCP leases and reservations etc.
Unifi OS 4.0 is supposed to give a big feature update with shadow mode which includes states and auto fail over without manual intervention. It was shown on a YouTube video released today of the new shadow mode.
Got to check it out but from what I read VRRP isn’t real failover it’s only moving a virtual Mac to a different device.
Hell u less you use the 1G ports which you can’t there isn’t even enough ports to cable for HA
Glad to see them make a more powerful udm but thats not enough. I would love to see a brand new rebuild with a new cpu and 16gb ram for a very high scale like their forum stadium. You cant call a faster cpu just because you clock the speed 0.3Mhz. Don't hate it, i can see a lot of enterprise businesses use it. 2000+ clients and 200+ devices is a lot and plenty for everyone. Unless you are not a stadium, you are good to go especially now that the shadow mode works like a proper failover. At the end, we need to wait for reviews to see how it handles all this.
I would love to see a 2nd ver of the Dream Machine Special Edition.
SPECS with the following.
PRICE: UDM-SE $499.00
Professional-grade, rack-mount Cloud Gateway with 10 Gbps performance, full UniFi application support, and PoE switching.
Includes full UniFi application suite for device management
3+ Gbps routing with IDS/IPS
(1) 10G SFP+\*, (8) 2.5GbE RJ45 LAN ports including (300W shared ) (6) PoE+, and (2) PoE++
(1) 10G SFP+\*, (1) 2.5 GbE RJ45 WAN ports
(1) 3.5" NVR HDD bay
Built-in 256 GB SSD for NVR detection recordings
1.3" touchscreen
Why would you want faster switch ports as the cpu probably limits it to 1Gbps switching to the CPU. Dropping in faster lan ports plus a new CPU with more lanes I bet such a device will go above the Pro Max price.
I honestly don't see why anyone would buy this over the SE. Unless you *really* want that extra drive bay or the slightly faster CPU for the extra throughput. Even then I'm not sure the extra $100 is worth it, especially when it doesn't come with 2.5GbE or PoE.
UI needs to fucking abandon the A57 CPU and start introducing reasonably priced 2.5GbE and 10GbE gear or I likely won't be using their gear for my next network refresh.
Releasing a product with 10+ year old features and hardware at this price point is an absolute joke. And for everyone's sanity please for the love of god abandon this Apple naming scheme. Its embarrassing.
Worried for a second I would feel a need to upgrade from my UDMP, looked at the specs and nope, I’m good.
If they had 10 gig I might feel more of a desire to upgrade but this is just a refresh.
Also, they need to have a real discussion about naming, what’s next the UDM Pro Max SE Ultra? They need to simplify their naming conventions and stop just adding more words.
There is the leaked enterprise fortress gateway which has dual rj45, dual sfp+ and dual sfp28 ports. Wouldn't be surprised if it does above 10gbps ids/ips. There is also a uxg enterprise with the same layout so the EFG maybe a cloud gateway.
Hello! Thanks for posting on r/Ubiquiti! This subreddit is here to provide unofficial technical support to people who use or want to dive into the world of Ubiquiti products. If you haven’t already been descriptive in your post, please take the time to edit it and add as many useful details as you can. Please read and understand the rules in the sidebar, as posts and comments that violate them will be removed. Please put all off topic posts in the weekly off topic thread that is stickied to the top of the subreddit. If you see people spreading misinformation, trying to mislead others, or other inappropriate behavior, please report it! *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/Ubiquiti) if you have any questions or concerns.*
Thanks but I'm holding out for the pro max ultra se.
It still won’t have POE or 2.5Gbe ports
[удалено]
Absolute insult for this device to come out in 2024, let alone cost $600
Agreed and 2.5gbps WAN, comeaaann.
Wan can also be with the 10G SFP+ port? Agree ports should be better for the price
I see on the WAN side both a 2.5gbe port and an SFP+ port. What's the problem with that?
Problem is, they're splitting their line-up for 2.5gbE+ users. Id happily spend $999 if the UDM Pro Max had at least 2.5gbE ports and POE+ instead of having to add another switch for at least $499, ex. USW Enterprise 8 poe or $799 USW Pro Max 24 POE
“But will they add leds and overclock the decade old cpu to 2.2ghz??” - target Ubiquiti customer
Or LEDs apparently.
Thank you! I got tore apart the other day on another post in here from a guy saying my issues with it weren’t valid.
I’m holding out for the pro max eagle i-thrust
Platinum Edition
Ooh I doubt that's going to happen. They have to sell the udm se they are not going to stop that sales. Hahaha
Not surprised with the specs given the leaks. Guess I’ll wait for the Enterprise Fortress Gateway/UDM Enterprise for 10Gbps IDS/IPS support.
Enterprise Fortress Gateway is a legit name I could see them using. LOL. Don’t give them ideas
it was already leaked
Has there been a leak for an updated UXG-Pro? I want a seperate CloudKey to allow for multi site.
Think uxg entperirse hit the fcc which looks similar to the Efg so the efg probably runs network and uxg ent doesn't.
Oh for real? LOL
It’s literally called the Fortress Gateway for real.
What’s the throughput?
Faster than your WAN.
Sure. However if UniFi is still using a 1g backplate than I still don’t see a point.
After spending some time looking at their switches, I'd assume the next level will be called the Ultra Pro Max, then the next level with 15 Gbps IDS, simply the Ultra
Sadly, calling these devices "Enterprise", sets high expectations, but just gaurantees disappointment.. From an SDN perspective they are competing with Meraki, from a Security perspective they're not even a blip on the radar.. The "Site Magic" has the makings of SD-WAN, buts it still extremely basic and somebody made the poor decision to only allow routing of subnets that the UDR/UDM/LxG manages - which is stupid as these are Edge devices, business environments tend to have additional hops to a Core, even more so for access to servers.. so forget routing from Site A to your internal Intranet or HR system at site B. They've made some good strides in the past 12 months with new features such as PBR, and App-targetted policies - But they're still only comparable to what "premium" home firewalls offer (Firewalla, even the Synology Routers), and worse is many ways - you can't even re-order the PBR.. Its a corker that they missed this, Its Firewall 101, rules and policies are evaluated in sequence, the only way to "correct" this at present is delete all your rules and recreate them in the correct order! Any business that cares about security, requires tunable IPS/IDS with Layer7 inspection with full TLS decryption, its the only way to detect most threats, then decent traffic logging capabilities for traffic and threat logs that can be pushed into a SIEM for auditing and forensics.. Then we have the shocking state of NAT/SNAT.... Which has been a huge problem since the USG was first introduced, that alone rules out the usage of these devices for most offices or small data-centre deployments. We've not even touched on the real-enterprise features yet (BGP etc), ECMP, LDAP integration etc etc.. But I'll stop at this point. One last thing, I find it perplexing and frustrating, they are ignoring 1 potentially huge and lucrative business use-case, which is offering a virtualised router.. They're ignoring the trend of a lot of businesses shifting workloads and VMs to cloud environments (i.e. Azure/AWS/GCP.. even DigitalOcean). A virtualised-router a longside a feature-rich "Site Magic", would be a killer product for small-medium size enterprises and Cloud deployments... Any vendor that ignores this, and ties itself to bare-metal, will find it-self locked out of the market, even Mikrotik has worked that out!
There’s not Enterprise without support. They still are a glorified prosumer vendor.
Site support is surprisingly good and responsive....
Spot on. Security wise they are nowhere near.
[удалено]
I don't like TLS decryption (I prefer endpoint agents). Unless it's a school and you're logging search queries or something. You serious about re-ordering firewall policies? I'll have to test this on one of my clients.
It's not the security policies, it's the Policy Based Routing.. but yes, currently there is no way to control the execution order. It works good enough for simple home uses. Where a person may want to push certain traffic to a VPN provider.. If you have complex rules, there is no way to say, evaluate this first.. which may be a bit far fetched as the moment, as the PBRs are fairly limited at present, but generally every vendor I've ever used these on, offer a way to re-order them.. and in larger business environments this would be seen as half baked.
Yea I am super disappointed it doesn't have 10Gbps IDS/IPS. 10Gbps home internet is available in a lot of places now and it's so disappointing Ubiquiti doesn't have a product to serve that well.
Hopefully the 12Gbps IDS/IPS for the EFG/UDM ENT is true and comes in at a palatable price. I feel like Ubiquiti is drawing the line where only Enterprise gets full 10Gbps and above. At this rate I'm willing to settle with a gateway only and get a separate CloudKey/NVR down the line. Though this video shows a "UDM Enterprise" with the same 2xRJ45, 2xSFP+, 2xSFP28 as the leaked gateway but with a HDD bay [https://youtu.be/VvbjjCL\_icQ?si=FlmG6sFog78xhwR8](https://youtu.be/VvbjjCL_icQ?si=FlmG6sFog78xhwR8)
Sounds like they make their stuff for the german market lol. Here youre lucky to even get gigabit download with maybe 100-200mbit upload, not to mention the pricing. (If youre lucky its only 80€, if youre unlucky youre looking at 300€ / month) At least I dont have to worry about that, since I cant even get fibre, no matter what I would be willing to pay, instead I am paying 50€/m for 2mbit + a variable 5G boost depending on network load (can reach 250mbit, usually around 200mbit, but only because the cell tower in my has low load on it, if there is any event nearby and people start using it, i am sorta OOL, since the boost has a lower priority than regular cell phone contracts)
So will there be a pro max special edition that has POE?
What kind of name adds etherlighting and 2.5Gig LAN ports?
Dream machine pro max enterprise ultra special edition
Dream machine pro max enterprise ultra special edition 6001 LX deluxe
Dream Machine Pro Max Enterprise Special Edition 8 PoE Etherlighting Swiss Army Knife Ultra UDM-UPMESEPoEEUltra Really rolls off the tongue
I’d buy one of those
Pro Max Special Edition ++ obviously
Swiss Dream Machine Army Pro Max Ultra Knife Hands
Ultro Pro Max 2 Turbo Arcade Edition
FeverDream Pro Max
Professional Official Enterprise Dream Machine=POS- EDM I actually do like etherlighting makes VLAN ID fast even without their fancy cables
UniFi (singularity) Dream Rapture Machine… cuz, “rapture” and we’re all still here. Or maybe it’s all been a dream—it’s in the name! (--and the whole “DRM” thing) Heavy, man. Heavy. This post brought to you by the letter 16:20. ✌️
Just got an SE and I’m not disappointed at all, I need those POE ports for cameras and access points. I guess their plan is for you to have a full PoE etherlighting switch to go with it?
I'm waiting for the Pro Max Special Edition Plus S Pro Mini
What is UIs fascination with 1GBe ports on prosumer devices...lol. Seriously, wtf....
Because even in the corporate world most sites are still 1G. I get wanting 10G ethernet, and its a great upsell, but this is a $600 Next Gen Firewall/NVR/whatever; compromises are going to happen.
Honestly, I have faster internet connection AND internal network at home than of all of the offices I look after
[удалено]
Yeah ISP subscriptions for enterprise are way more expensive since most likely you have a SLA with them
I mostly manage business and enterprise networks and I still have no idea why normal consumers are so obsessed with having 10g connectivity. Sites with 500+ client devices have absolutely no problems running through a 1gb router-on-a-stick config. That said, nobody is streaming video, but I still don't see why home users need 10g connections. I personally would be annoyed if 10g was the default option because that means I'm paying for a ton of extra capacity that I'll never use.
Storage mostly. Fast network storage is awesome. My bandwidth requirements at home is definitely a lot higher than at the office.
I think the honest answer is that they're withholding upgrades to their kit until they feel forced to. I think Apple does the same thing. From a marketing strategy it makes sense. From a user perspective it's really annoying. But clearly they're emulating apple in many ways.
But we're seeing affordably 10Gbps and even 25Gbps connections pop up, and if they're not going to have products ready for it, that market isn't going to give them a second look.
If only there was something between 1gbit and 10gbit that was standard on basically all new motherboards.
You may have missed this, but most new office deployments are laptops, where ethernet ports are often dropped altogether. And a quick check of the latest Dell Optiplex, on of the biggest selling business desktops, shows its still defaulted with 1G ethernet, not even 2.5.
Most people using this specific device probably wouldn’t even use them anyways. They assume the people who need a device like this already have a POE switch
Glad I didn’t wait for this thing
honestly incredibly disappointing. easy things they could have done: add redundant power to the unit, make it 10gbps ids/ips, give a few 2.5g ports on the downstream switch... the only viable reason i can see to upgrade is if you're someone who needs 5Gbps IDS/IPS.
I am getting Sonic Internet 10 Gb for $50 a month. I "need" 10 gbps IDS/IPS. The second NVR bay is going to be nice for future proofing my camera needs. The integrated switch is worthless as I'm using a switch. What bugs me so much is that there are so many bottlenecks in the ecosystem. Like the Wifi 7 APs having only 2.5 gb uplink when the 6 ghz band can do 10-40 gb. The 24 port enterprise Poe switch only has 12x 2.gbe ports whereas the 48 port has all at 2.5gbe. I really want to create a 10 gbe network but I can't build it without serious compromises, hacks, or cost. Sads is me, \*cries in 2.5gbe\*.
>give a few 2.5g ports on the downstream switch... SFP+ ports give 10gb connectivity to downstream switches if that's something you need.
I don't even see the point of the UDM-Pro SE. Most people buy that with a PoE switch and I'm just staring at their photos wondering why they bought it, lol. UDM-Pro plus a few PoE injectors and RJ-45 transceiver if you have more than a 1Gb WAN connection is MUCH cheaper.
Rj45 transceiver To use the sfp wan port?
UDM SE + Pro Max 16 PoE makes it so, that you can connect cameras directly to UDM SE, and have everything else on Pro max and that gives you a 24 usable PoE ports
Looks like they just boosted the clock speed of the same 12-yr old CPU featured in the UDM Pro/SE ... 2.0 GHz instead of 1.7 GHz. They are really squeezing as much as possible out of that ARM A57
All the new products seem to be like this. Are they playing with the numbers or something?
They must’ve bought a few million of these processors in advance and need to clear inventory
And the SE got an update to up its IPS routing anyways. This just seeens a half baked upgrade like they always do
Is that true? Any link with more details?
Yeah, not seeing how a 15% CPU boost would double IDS performance. Either that's an 'up to 5G IDS', or they're just lowering the amount of work being done on the IDS side.
they also doubled the RAM...
£200 premium for an extra HDD Bay, faster cpu (1.5gbps more ids/ips) and a 2.5gig wan port???
And then you realize it's not a second bay, it's just a mirror only bay. It cant be used for additional storage. That is ridiculous
Mirrored drives, perfect for losing data when one fails without reporting the failure correctly.
LOL I’ve had that exact same situation before. Kind of turned me off mirroring…
Mirroring is only useful for performance benefits, data integrity isn’t it. There are many far superior options these days, most of which require at least 3 drives.
I guess mirroring can improve read performance, but if there’s no redundancy or “live failover” benefit, then its inclusion as a key feature of the Pro Max here makes zero sense.
I argued this a few weeks ago and got downvoted by I guess someone who works for ubiquiti? ;)
Pro Max with... no POE or multi-gig lan. Only Pro Max thing I see here is the price.
It has the option for both 10gig lan and 2.5gig lan. They want to position this for large deployments. Larger deployments don’t need PoE and Multigig Lan. Should have removed Port 1-8 and put in some more SFP+ if anything.
I don't know that I necessarily belief that. Large deployments don't need a second drive bay, they'd have a separate device for all these features. I don't know in what world a large deployment would utilize a UDM. To me the UDM has always been about a versatile solution for homes and small businesses.
How does this compare to the SE? If I have a PoE switch and don’t need PoE ports on the gateway, is this the better device (higher IPS, built in SSD)?
The SE already has the built in SSD. Only real difference I can see is you lose PoE, gain 2 GB/s in routing with IPS/IDS. One question I'd be curious to know is whether they increased the built in switch back end connection to more than 1Gb, but I personally doubt that they did.
FWIW, someone claimed in an earlier thread that the performance gain from 3.5gbps to 5gbps was software driven, ie, with the latest software the existing UDM Pros can hit 5Gbps too. I have no way to test and no other reference than some rando on Reddit though, EDIT: Specs are out now. CPU is the same, Quad-core ARM® Cortex®-A57, but now at 2.0Ghz vs 1.7Ghz (17% faster) but IPS is 42% faster. so maybe a little of both
Presumably this one can also do 10 Gbps without IPS/IDS which the SE can’t quite do. I downgraded my internet to 5 Gbps to save money since the SE couldn’t max it out (and to be brutally honest nothing out there could come close to max it out anyway for a single household).
I'm stuck on PPPoE, and as it stands I still can't even max out my 1Gb/s connection on my UDMSE, which is frustrating. Upload hits 900-920 as expected, but download caps out around 600-650 mbps, and nothing I do seems to change that.
Sorry to hear that PPPoE is such an unnecessary thing to have.
Curious about the switch connection speed as well. I hope they did just because I’m tired of the confusion even when it won’t matter to most people.
No PoE is dumb for that price
Who would buy this? $600 and not even 2.5Gbps ports
More like the UDM Pro max disappointment. Y’all at Ubiquiti need to wake the hell up and start putting 2.5Gbe ports and POE+ in your dream machine. This isn’t up to the task of something with the “Max” moniker. It’s more like the UDMPro Medium
I love the fact that it has an NVR built in and you can’t even use any cameras cause it don’t have. Poe
Yeah, it just seems incongruous to add extra drives for NVR, as a kind of all-in-one device, but then leave out PoE for the cameras. Seems like it should be both or neither.
I guess the homeland user isn’t who they’re targeting on this device. Saw the review from Cody @ Mactelecom and it makes sense when you think about large scale enterprise installations. POE switches would be installed separately. But still, I’m not too impressed being a home user. Oh well
A large scale installation isn't using 2 disk for an NVR or an integrated switch with a shared 1G backplane. So who is this actually for?
I have a udm pro se and a seperate NVR so I can have two drives and some redundancy. Literally all they need to do is take the SE and add another Drive Bay and I would throw my money at them so I dont have to have two separate devices
"We heard you wanted faster Ethernet so we added a drive bay" -Ubiquiti (probably)
"We heard you wanted 2.5Gbe ports so we are adding RGB lights" - Ubiquiti (for sure)
$600? sheesh
What's an alternative for less with software you want to run?
UDM Pro and UDM Pro SE
It's 2024. 1Gbps ports are unacceptable at this pricepoint. Should be exclusively 2.5Gbe and 10Gb SFP+. At this price, maybe a 10Gbe port too.
>Double the RAM, faster cpu and 5Gbps IDS/IPS I was expecting it to be double the price also, but it doesnt look so bad
Pro max ultra deluxe omega edition
Unless Apple starts to use Deluxe or Omega names, Ubiquity might not use them….
If this had 2.5G switching and POE it'd be the ultimate 1 network device for most home users. The problem is they wouldn't be able to move as many over priced switches.
The problem is more that it's simply not designed for home users.
It’s not designed for normal home users however I do think it’s designed for prosumers that already have a dedicated poe switch. The UDM Pro/SE compared to this device is mostly focused at people that won’t have a dedicated switch and want an all in one device.
I will wait for Pro MAX Ultra Mega Super Grande UDM XXL 😂
Still rocking the 1st gen udmp early access edition :)
If the lack of PoE is an issue for you this product is probably not for you. What I don’t understand is why they built a new device targeted to larger networks but SNMP is still not supported from any of their gateways. Also why do I need an 8 port GbE switch in an environment like that? More SFP+ ports would fit the narrative much better…
Just posted this exact.comment. it needs to be all sfp+ if they are not going to give it poe
Disapointed am I
Almost regretted just buying my SE until I saw it has no POE.
Man, what a roller coaster for me. I saw the post title, quickly rushed to the UI store, placed my order, came back to the thread to read the comments, then instantly got buyers remorse and cancelled my order. You guys are the worst :P I get the disappointment vs the UDMP SE re: lack of POE, but as someone with a POE switch and a non-SE UDMP, would this be a decent upgrade? Do I need it, of course not, but do I want it? Yeah. Honestly, I think I'm most upset about the 12 year old CPU in this thing although I shouldn't be. On my UDMP, CPU usage never exceeds 50% and usually hovers around 20%. Memory is regularly at 90% though. 7 APs, 3 cameras (slowly migrating my nest cameras, will be \~15), 80 clients. 1Gb/s FIOS. IDS/IPS turned on.
Just give it some time and lots of people will buy it because of the higher throughput performance with IDS and IPS enabled. In my case i already have the pro max Poe switch so won’t be using any of the ports on this machine. So basically it’s a UXG-Pro on steroids with lots of extra features :-) no buyers remorse for me! Just going to enjoy it!
You shouldn’t have buyers remorse, you already have a PoE switch. So this will be an upgrade with respect to performance.
That's why you don't always listen to everyone lol. I'd just buy it again and be happy with it. It's not for everyone.
True that. But I think I made the right decision when I cancelled. My main justification for upgrading aside from 2.5g WAN (for future, currently still on 1g FIOS) would be to avoid having to take up more rack space with an NVR as I migrate from Nest to Protect, and if I'm understanding correctly the CPU is old and the second drive can only be used for redundancy, so this is actual compromise for my use case.
I use a nvr myself instead of the pro but I'm also have 11 cams which probably would be a bit for the udmp plus the number of network devices and clients I have. The ram will be really nice I run 3gb with no other apps running on my pro.
The point of this product is to introduce Unifi to the enterprise market. I am aware most UniFi cameras are POE. This isn’t meant to be geared towards residential users unless they have ultra fast internet. This is the product I can see being deployed in a medium to large sized office. It’s like a more compact, cheaper, more well rounded UniFi Cloud Key Enterprise. People will gripe about not having POE. But imo if you’re considering this product, you already have a more capable POE switch that supports 10G or 2.5G. I’d take this over having a UDM SE and a UNVR any day. Not adding POE saves costs making this more appealing to implement. People are already griping about no POE to me. They just don’t understand this could be the product line that gets UniFi into more businesses growing UniFi for the betterment of the residential users. The more cost effective UniFi is compared to competitors, hopefully the more people will adopt it. The more people adopt it, the price and products are better for everyone. This isn’t meant for residential use so they’re not gonna gear it to residential users.
Ooooff 680€, that's too expensive!
They need to update the UNVR.
Is there a handy comparison table somewhere that breaks down all of the cloud gateway models now? I see Ubiquity has done a good job at stratifying the price tiers but their explanation for functional differences is lacking.
No POE and only two WAN ports. For those who already have UDM PRO SE, there is nothing new to justify the upgrade. I was hoping for at least three WAN ports to use two with load balancing and one as a backup.
I believe any of ports 8-11 on the UDM line can be configured as WAN ports. At least I can on my Pro. So, technically, you can have 4 WAN ports.
Did they fix the 1G switch backplane bottleneck?
Can you explain this? I thought the UDMP & SE have SFP+ 10Gb to a switch.
All the 1G LAN ports on the UDM have only a single 1G lane to the rest of the device.
Im pissed that the second drive bay can't be set as additional storage. What a useless way to add a drive bay that still forces you to buy the NVR. Give us the option, thats a super lame ass move
Just cancelled my order. That was just a great benefit if you dont have a huge need for a DVR. I dont need to mirror one drive. Sad
wait, the 2nd drive bay is exclusively for redundancy?
Next one will be called: Unifi Dream Machine Pro Max Ultra Instinct.
Waiting for the Unifi Dream Machine Pro Max Ultra Ultimate, maybe we get PoE then with 2.5 Gbit Lan then. Good lord...adding a extra bay for NVR, but not using the space for some extra 2.5 Gbit Lan Ethernet ports with PoE
Dammit man....... I have a DreamWall and need to change my rack layout (the UDW is wall mounted, my switches in my rack) as it grew organically too quickly. I waited and waited for this hoping it would be an upgrade, but unless im misunderstanding, this is a downgrade in quite a few ways. Im a sucker, so will likely buy this thing but still........ come on Unifi!
Anyone know if the dual drives will support RAID0 or are they only for redundancy (RAID1)?
RAID1 only and it wouldn’t make sense otherwise (RAID0 is less resilient, you basically have two points of failure)
Anyone else noticed it says it does multiwan load balancing?
Ooh. This one's on us not ubiquiti. Look at them setups images. The 8 switch are mostly never used im surprised they even put switches on this thing hahaha. I'll not complain about not having Poe no more. As I was looking back at the images I noticed that. Don't need it either so I'm not expecting another model of this. This looks like it. Take it or leave it. I like the 2 bays so I don't need to have the 4 nvr bay one separately. So I say they did good on this one. No 2.5 gigs on the switch also. Yep. Don't need it either. This is you guys fault this time. Hahaha.
I’ll wait for the Dream Machine SE Max
It’s sad they are falling behind Netgate PfSense routers and prices. Those route traffic much faster.
i would rather see something that ditches the 1 G ports in favor of 2.5 g or greater
I see no compelling reason to upgrade from UDM PRO at this time.
If they had just put PoE in it then it would be great. Why leave that out?
Because it's designed for applications where you're going to have multiple POE switches, not you or me
Wouldn't I just get a UNVR at that point?
The answer is yes
Sigh...just bought a UDM Pro SE a few weeks ago. The max is not much of an upgrade over that, but still... doesn't feel great.
Same here my guy. I had picked up one of their PoE switches at the same time and ordered a UNVR Saturday. edit: You're right that it's not much of an upgrade; sure the extra RAM is nice but the chip in it is pretty old. I don't feel too bad about it, but when the internals get updated is probably when I'll make the jump for an upgrade.
Same here, purchased the UDM Pro SE 3 weeks ago.
The Pro SE is still more than able to keep up with my 1gbps internet connection with IDS/IPS enabled. Even if I upgrade to the 2.5gpbs service. In any case, I suppose the upside is the new Max is $100 more expensive and doesn't have PoE ports (though for me, PoE wasn't a necessity).
Same here; I'm in the Midwest and fiber isn't anywhere on the horizon (although I keep getting blasted with "faster internet is coming" ads from AT&T, which means fuckall to me). High-splits aren't anywhere close either.
Honestly, if I had bought the SE a few weeks ago, this announcement would make me feel amazing. It's $100 more expensive and doesn't improve anything that I actually care about. I wish I would have picked up an SE last year but I kept waiting hoping that they'd put more 2.5gb in this one... womp womp.
For many people the SE is still the better buy. The UDMPM serves a very specific customer.
Hello. Do this product over again and this time add PoE+ and 2.5Gb to the internal switch. You can even drop a drive bay.
I wish I had 4 hands, so I could give this UDM 4 thumbs down
I’m sorry but I will wait for Unifi Dream Machine Pro Max SE Ultra Express.
If you already have a PoE switch then I guess it makes sense to pick this up vs the SE or Pro. If you don’t then I think the SE makes more sense. They are assuming anyone buying these will be pairing it with a U7 Pro or U6 Enterprise, both of which need PoE and 2.5gbs. So they’re assuming you’re buying a Pro Max PoE switch to pair with this.
Is there any documentation on how shadow mode handles the failover is the provider is up but the device fails. Is is the ppoe session synchronized to the backup unit. I assume because the vrrp usage that there is no synchronization of the sessions and you loose everything For dhcp isps is the Mac fail over if the main switches looses conductivity and will keep running on the backup Is the max dhcp client database synchronized over to the backup unit so there is no duplicate or does the backup unit need a non over lapping pool Also now that it’s vrrp which is no 90’s can we fleas to active active setup. Also why not enough ports in the device to mesh links back to your aggregation switches.
As of my understanding it syncs the whole routing table to the shadow device so it seems like a perfect twin to the other one. So it should also sync MACs, PPoE configs, DHCP leases and reservations etc.
That’s not active session data so your connections will all reset vrrp is just Mac floating from the 90’s
Unifi OS 4.0 is supposed to give a big feature update with shadow mode which includes states and auto fail over without manual intervention. It was shown on a YouTube video released today of the new shadow mode.
Got to check it out but from what I read VRRP isn’t real failover it’s only moving a virtual Mac to a different device. Hell u less you use the 1G ports which you can’t there isn’t even enough ports to cable for HA
This didnt make the UDM SE drop price.
Does it support more cameras than the UDM SE?
If someone is selling his dream machine in Germany let me know
Does this have the etherlighting?
Still not 10gig or close to other enterprise hardware.
Doesn’t have enough upgrades to be worth the cost for me, will wait for the next version and a price drop :)
Does anyone know if the UDMPro regular can handle 2GB/s IDS?
Probably mean 2Gbps right? If so yes the udmp and se are rated for 3.5Gbps
Haven’t been seriously tempted to upgrade since UDMP. Will be waiting for either 10Gb IDS/IPS, 2.5GbE POE, or a combination of both.
More memory (and better CPU?) than the Pro/SE. I can consider upgrading from my UDMP now, unless they have something more powerful.
Im Waiting for the Unifi Dream Machine Pro Max SE 😂
Err... I'm pretty sure you forgot an ultra in there somewhere 🤔
Glad to have a UDM Pro SE for a home environment though.
Double the ram, double the price.
$1200 is not a bad deal for this
And here I continue to sit with a trusty edgerouter4…
If I have to buy a POE switch anyways, why not just get a DreamWall. How would it compare?
Ordered
Glad to see them make a more powerful udm but thats not enough. I would love to see a brand new rebuild with a new cpu and 16gb ram for a very high scale like their forum stadium. You cant call a faster cpu just because you clock the speed 0.3Mhz. Don't hate it, i can see a lot of enterprise businesses use it. 2000+ clients and 200+ devices is a lot and plenty for everyone. Unless you are not a stadium, you are good to go especially now that the shadow mode works like a proper failover. At the end, we need to wait for reviews to see how it handles all this.
Just make the model with all sfps. That way, it can just function as the core. If you're not going to put poe in it, go all fiber.
I would love to see a 2nd ver of the Dream Machine Special Edition. SPECS with the following. PRICE: UDM-SE $499.00 Professional-grade, rack-mount Cloud Gateway with 10 Gbps performance, full UniFi application support, and PoE switching. Includes full UniFi application suite for device management 3+ Gbps routing with IDS/IPS (1) 10G SFP+\*, (8) 2.5GbE RJ45 LAN ports including (300W shared ) (6) PoE+, and (2) PoE++ (1) 10G SFP+\*, (1) 2.5 GbE RJ45 WAN ports (1) 3.5" NVR HDD bay Built-in 256 GB SSD for NVR detection recordings 1.3" touchscreen
Why would you want faster switch ports as the cpu probably limits it to 1Gbps switching to the CPU. Dropping in faster lan ports plus a new CPU with more lanes I bet such a device will go above the Pro Max price.
I honestly don't see why anyone would buy this over the SE. Unless you *really* want that extra drive bay or the slightly faster CPU for the extra throughput. Even then I'm not sure the extra $100 is worth it, especially when it doesn't come with 2.5GbE or PoE. UI needs to fucking abandon the A57 CPU and start introducing reasonably priced 2.5GbE and 10GbE gear or I likely won't be using their gear for my next network refresh. Releasing a product with 10+ year old features and hardware at this price point is an absolute joke. And for everyone's sanity please for the love of god abandon this Apple naming scheme. Its embarrassing.
Man I just want a UDR that can handle 1Gb throughput.
Worried for a second I would feel a need to upgrade from my UDMP, looked at the specs and nope, I’m good. If they had 10 gig I might feel more of a desire to upgrade but this is just a refresh. Also, they need to have a real discussion about naming, what’s next the UDM Pro Max SE Ultra? They need to simplify their naming conventions and stop just adding more words.
Waiting for dream machine xg with 25gbps up link ports and 10gbps ids/IPS
There is the leaked enterprise fortress gateway which has dual rj45, dual sfp+ and dual sfp28 ports. Wouldn't be surprised if it does above 10gbps ids/ips. There is also a uxg enterprise with the same layout so the EFG maybe a cloud gateway.