Please help make noise - Ubiquiti is silently SHUTTING DOWN threads that are pointing out the features that are missing from the UDM!!!
[removed]
Posted Aug 9, 2020, 1:41 AM UTC · edited · locked
50164
I’m really not sure why anyone would choose this crap for their routing/firewall needs. A $100 PFSense box runs circles around the UDM. Even the outdated EdgeRouters blow it away in terms of features and reliability.
78
I'm the single IT Manager for a non profit of 100+ people. Unifi products are great for me to manage. I'd love to fuck around with pfSense but I have a total of 8 buildings to take care of so fuck that noise. Still though, I'm fine with some USGs and USG-Pros. I'll be switching to the UXG for 2 buildings as soon as it releases. Mostly for the site-to-site VPN capabilities. Unifi products hit a sweet spot for overworked IT folks.
Edit: I am trialing some Mist equipment that seems promising but is ridiculously expensive.
38
How is pfSense difficult to manage? NetGate provides support and even people like Lawrence Systems use pfSense for large installs.
13
I get a lot of weird requests. The non profit I work for is very physically based. I have to find ways to make things that require close contact work without that. I have projects scheduled out 2 months in advance. I also support a diner that subleases from us. It's not difficult to manage. I just don't have time.
14
If you want something easy to setup and maintain, Meraki is a much better fit. It isn't cheap (at least compared to Unifi), but between the Dashboard GUI and API automation, you build and manage big networks with very few people. I currently have 50 sites, 5 global datacenters, 12,000+ users on Meraki and I manage it with 2 people.
0†
Replying to a post about a nonprofit if your don’t care about cost is totally missing the mark
30
Actually, no. Non-profits are obviously cost conscious and I have consulted with several in the past. However, most that I have dealt with would happily pick a more expensive tool over hiring more staff every day of the week. If u/FuckOffMrLahey is looking for something that can be more easily managed and scale as the non-profit grows, especially if it's a one-man shop, then Meraki could certainly fit that bill. Don't get me wrong.... I have Unifi gear at home, including a UDM. That gear has its place, but it is getting harder to defend using Unifi gear in anything other than home/small office when they systemmatically push products out the door with missing features.
17
[deleted]
10
my non-profit just got $250,000,000 from the government back in April due to c19, and I see all this shiny new toys everywhere.
non-profit =/= no money
7
I'm interested in pfsense, do you have any particular box to recommend?
14
It really depends on your throughput requirements. Protectli offers affordable options and Netgate has officially supported devices. You can also run it on any x86 device with an Intel NIC. At home I’m running it on a Dell Optiplex 7010 that I got for free and stuck a $30 dual port Intel NIC in. It maxes out my gigabit fiber with IDS and DPI running.
21
This has been my choice as of late.
11
Dell Optiplex 9020 on eBay + $10-$20 for an Intel quad NIC.
6
I have a Protectli box and no issues at all so far. I had the UDM Pro previously and the UDM before that...kept having too many issues and the support was not very good in my experience.
5
Another option is Mikrotik.
7
I actually looked at PFSense before going with the UDMP and couldn’t find anything that rivaled it for less than $300, but I like branded/officially supported devices so I pay a premium.
4
Dell Optiplex 9020 on eBay + $10-$20 for an Intel quad NIC. It runs circles around the UDMP.
10
Yup. I’m running it on an Optiplex 7010 at home and it maxes out my gigabit fiber with IDS and DPI running. The 7010 was free and the Intel PRO/1000 was $30 on eBay.
6
For business use I would get something from Netgate with a support contract. At home, just use any old PC. I’ve been running PFSense on random Intel based PCs for years and have literally never had a problem. Aside from Cisco IOS, It’s quite possibly the most stable piece of software I’ve ever interacted with.
5
pfSense > UDM
I just switched for a USG to a pfSense box running on a Protectli unit (mostly because it fit in the same spot and I didn't have to change a bunch of wiring to make it work) - never been happier.
UBNT has its place - but if you are looking for full-on enterprise features you will be disappointed......especially with the Unifi line. The UDM is a consumer router made to look like it should do more, and for a lot of people it will serve its purpose, but doing anything advanced (like dynamic routing) is not going to be something I ever see them doing with this product - its target demo is a small business that just needs access to the internet and maybe some storage for a camera.
53
For every post containing information about features we want that exist on competitor products, Ubiquiti will delay progress and focus efforts on stupid stuff, like making a WiFi plant feeder or smart electric blanket.
30
Is Google dynamic dns a problem unique to the UDM? It works fine on the USG. Google isn't listed explicitly but they use the standard dyndns protocol and you just put domains.google.com for the domain with your creds and viola works fine.
Agree on the other stuff though. It's really a shame because their firewall integration with the controller makes for such a nice package. My firewall needs are minimal so the USG checks all the boxes fine but no way would it be a good choice for a business or actual enterprise setting.
22
Ditto. Working perfectly fine for me.
5
How about the 4 year old thread showing how static IPs don't connect to APs or show up in the controller. Many of the smaller threads about this have been locked. The only reason the main thread is not locked is because people are relentless about continuing to post the issue and the fact it's at 11k views. But they still don't have a fix!! Freaking Ubiquiti can't even get static IP addresses working correctly! It's absolutely beyond insane they can't fix the problem in a 4 year old thread and they don't even bother acting like they care. https://community.ui.com/questions/IP-Addresses-missing-not-displaying/c95e03cf-ac5f-469e-9a9b-1b70826217a2?page=1
16
As a newb I'd love to hear why they removed the ability to configure Lan/Wan 2 from the GUI on a usg and tell you you have to configure it via json, then tell you they won't support you when you make json changes. Absolute joke, I felt like I bought a car, they delivered it then they tell me it only turns left and if I want to turn right I need to spend my weekends googlong shit oh and they won't support me to fix it...
16
This is the kind of info that would go onto a community wiki. Like a "known issues" page.
13
All good features that definitely need to be called out... but isn't this one already there?
Allow forwarding all DNS queries from a network to a seperate host (for use with Pi-hole for instance)
In both classic and new settings views I see fields for adding DNS IP's for each Network I create. In fact on my UDMPro I have 2 separate servers running DNScrypt proxy docker containers as Primary and Secondary DNS servers for each network/VLAN I setup (except for the isolated Homelab VLAN which I don't want accessing my other networks so it just uses Cloudflare and has blocking firewall rules). I could just as easily done the same with a pi-hole to point to. I replicated the setup I had on my USG4Pro when I switched to the UDMpro and the same DNS server fields are there per network. Is it something that the UDMP has and the UDM doesn't?
10
What you described isn’t forwarding. You’ve just set the DNS Servers given to DHCP clients.
What OP is talking about is having having DNS traffic , regardless of destination, be caught and slightly forwarded to a 3rd party I.e. PiHole. So if someone changed the DNS and tried to set it to Google, it just get redirected back.
They have this feature currently, but it’s only to their own DNS filtering , you can set the destination elsewhere
14
Ah, that makes sense then.
2
Stop buying ubiquiti. Easy.
9
Um.. yea this is what they do.. At this point that forums are a pos, unless you want to post a box picture or rave on and on about how great UBNT is..
8
I changed to Untangle since the UDM line didn't seem to be actually progressing and I was tired of the performance of the USG.
Maybe I'll come back once/if they sort it out.good looking out!
7
Why untangle over pfsense?
3
Ease of setup. Liked the UI and robust reporting/dashboard. And setting up vpn tunnels is about 2 clicks, which is considerably easier than pfsense from what I was reading.
I intend to roll Untangle Home for a while the change to pfsense or opensense to see if I like them more for any reason.
Same as other people, got an old SFF Optiplex i5/8GB RAM (overkill yes, but it's so cheap there wasn't any reason not to) and added a quad port NIC for cheap from eBay. Cheap and I can run my whole home NordVPN at near symmetrical gigabit speeds without breaking a sweat.
I still have wifi and switches rolling UNIFI gear without issue so far. We'll see how it goes!
Edit: Forgot to day that I do think Ubiquiti does solid wifi and managed switches (for "basic deployments") , they look awesome, and I really have enjoyed using it at home for the past few years. Works just fine for SOHO.
I think UI is just behind the curve these days with the Unifi Controller. It needs to be a lot more, or at least have the (paid) OPTION of having a lot more to come up alongside the other enterprise networking products for security, reporting, and processing capability outside of the XG line, but I admit they have to keep product lines, well, in their respective lines.
They definitely fit a niche and they're a great learning experience and I would heartily recommend them to my friends and family, and I'll continue to use the products I can strategically in business.
The reality is there isn't one good product offering from a single manufacturer (and then there's the issue of putting all your eggs in one basket...)that does all the things we need them to with all the threats that keep showing up.
11
Same here. Unifi switches and APs with Untangle firewall.
Has a USG whose feature set was very frustrating (from the GUI at least). Then I tested pfsense, Opnsense, Untangle and Sophos for a few days each.
Untangle does everything I need, everything is well integrated, it does have decent commercial databases for IPS.
And, similar experience to u/Jawless, the dashboard is far better than pfsense (and Unifi lol). I have a whole family with kids of various ages, friends... and with the Untangle dashboard, you can see all at once what everybody is doing.
Reporting is very good too, well integrated between the various pieces and then also have a nice integration of SSL filtering (kids again).
I have various models of Qotom and Yanling fanless Core i5 and love them. They hang quietly on my wall like the rest of my network equipment and it's all good.
7
I almost got UDM but to save money got ER-X on which I can enable features that USG lacks. Hwnat NAT offloading still doesn’t work with Traffic Analysis/DPI and IPsec offloading doesn’t work correctly with L2TP tunnels and ipv6 IPSEC tunnels on most recent 2.0.8-hotfix and this is known issue for years. I am not affected by these limitations but wish they just refreshed lower end EdgeRouter series (Lite, X) or lowered price on ER4, 12.
7
Why don’t you make noise with your wallet? Don’t give money to a company that does shit like this.
7
Seems to me that de udm was a half baked product that is in no way better than the usg.
I was aiming to get one, but usg will be
7
Like some others here, I also switched to pfSense about 1.5 months ago and I couldn't be happier. No issues with it whatsoever so far. It has all the features I was missing in UniFi. Also slowly working on switching my APs and switches over to Aruba.
6
You know what would be really great? If I could install linux/pfsense on the ubiquiti switch/router. That would be checkmate for Cisco.
5
Copy it over to a new Reddit post. It will get a good ranking for google searches.
3
[removed]
3†
Yep. The downvotes pour in from the weekend warrior homelabbers that pick up their shiny new “enterprise” toys to impress someone and don’t know that UI is the furthest thing from it.
UI has been fucking over customers for years and flat out lying about their device capabilities for the same amount of time. Honestly, if someone half fucking competent could come out with capable hardware that has a similar dashboard, which didn’t bend you over a barrel with licensing fees, they’d eat UI’s lunch. Unfortunately, they’ll continue to fuck their customers over because they don’t have any competition.
8
[removed]
1
[removed]
1
[removed]
1
Post has been removed due to blatant spreading of false information.
Do not repost this or you will be banned.
-13
Can somebody tell me if the UXG has these features, and if we're only missing it from the UDM/Pro?
3
[removed]
Unfortunately we need a better way to make this sort of thing known. This Reddit post will sink to the bottom in two days and everyone will forget about it. A tech news outlet or something should pick stories like this up, especially the ones that positively review Ubiquiti gear (looking at you, Ars.)