Unifi Security Gateway Questions

[irBosOtter]

Can one block torrents and adult material with this device? Looking for a cheapish entry level firewall that can block torrents, porn and vpn connections, will be used for a guest wifi network.
Just want to see if we can use something cheaper than a Fortigate 30E seeing it's for guests only.

 

[grump_grouch]

You should be able to : https://help.ubnt.com/hc/en-us/arti...i-USG-Firewall-Introduction-to-Firewall-Rules

 

[Sinbad]

Yes it can do dpi blocking

 

[lkswan747]

Can one block torrents and adult material with this device? Looking for a cheapish entry level firewall that can block torrents, porn and vpn connections, will be used for a guest wifi network.
Just want to see if we can use something cheaper than a Fortigate 30E seeing it's for guests only.

The Unifi Gateway USG3P should be ideal. I am running a guest network at home for any visitors and restrict their usage via firewall rules.

 

[Diabolix]

Can one block torrents and adult material with this device? Looking for a cheapish entry level firewall that can block torrents, porn and vpn connections, will be used for a guest wifi network.
Just want to see if we can use something cheaper than a Fortigate 30E seeing it's for guests only.

At the moment you can't.

They removed that functionality as it didn't work correctly.

See below link and comment from ubnt from 2018:

https://community.ubnt.com/t5/UniFi-Routing-Switching/How-to-block-porn-sites-with-DPI/td-p/2215906

Look at Pi-hole: https://pi-hole.net/

 

[MDKza]

You could use OpenDNS and block DNS to all other servers.

 

[waynehooper]

Does anyone know if the USG is able to limit bandwidth (WAN) for WIRED clients? Seems you have to link the Wired client to a user group (that has upload/download settings defined).

However the UBNT forums are not clear if this applies to wireless clients only. Can anyone with a USG test this and tell me if it works for Wired clients

 

[MDKza]

You have to save a client and then assign it to a user group:

https://help.ubnt.com/hc/en-us/articles/204911354-UniFi-How-to-Set-Traffic-Bandwidth-Limits

 

[waynehooper]

You have to save a client and then assign it to a user group:

https://help.ubnt.com/hc/en-us/articles/204911354-UniFi-How-to-Set-Traffic-Bandwidth-Limits

The article states that the method only applies to wireless networks.

 

[MDKza]

Ok so I went and tested it and you are right.
Applying that profile did zip unless I was on my wireless.
I found a setting on my switch though that will limit the egress speed of the port I was connected to.
Strangely enough it was only the egress that can be limited. (client download)

 

[waynehooper]

Ok so I went and tested it and you are right.
Applying that profile did zip unless I was on my wireless.
I found a setting on my switch though that will limit the egress speed of the port I was connected to.
Strangely enough it was only the egress that can be limited. (client download)

Is a real pity. I was hoping to be able to use the USG with my AP's and have one interface. Will have to stick with my Asus (Merlin) router for now.

I cannot believe that UBNT have not sorted out these features, as from the forums this has been a request for at least 3-4 years. The USG hardware is really old (500ghz), and I think this is the limitation that is preventing new features. It's time they updated it..