Room3.08Floor 3 Network and firewall
UniFi network setup and support for business
We set up, secure and look after Ubiquiti UniFi networks for GTA offices: gateways, switches and access points under an account your business owns, updated promptly and documented so anyone can support them.
- No licence feesHardware you own outright
- Gateways, switches and access points
- Critical UniFi OS flaws in 2026Updates applied promptly
- Remote management locked down
What UniFi does well, and where it falls short
Ubiquiti’s UniFi range covers the whole office network: the gateway that connects to the internet, the switches in the rack, the access points on the ceiling, and one application that manages them all. It has become common in GTA offices for a simple reason. You buy the hardware once and own it. There are no per-device licences that stop the network working when a renewal is missed, which is the main difference from Cisco Meraki.
That makes UniFi good value. It does not make it maintenance-free. A UniFi network is only as good as the person who set it up and the person who keeps it updated, and in many offices neither is around any more. We set UniFi up properly, or take over one someone else built, and look after it from then on.
Where UniFi is a strong choice
- Offices of 5 to 150 people who want business-grade Wi-Fi and switching without yearly licence costs
- Several small sites that need to be linked and seen in one place
- Clinics, studios and retail units that need tidy guest and device networks
- Owners who prefer to buy equipment outright and keep running costs low
Where we would recommend something else
- Businesses whose insurer or clients require advanced firewall inspection and detailed security logging, where a FortiGate firewall is the stronger front door
- Organizations that need next-business-day hardware replacement under a vendor contract
- Large multi-building sites with dedicated network staff and enterprise switching needs
Mixing is common and works well. Many of our clients run a FortiGate as the firewall with UniFi switches and access points behind it, which pairs strong security with low running costs.
2026 showed why UniFi updates cannot wait
UniFi’s convenience depends on its consoles and management software, and in 2026 those became a target. On May 21, 2026, Ubiquiti published Security Advisory Bulletin 064, which fixed several critical flaws in UniFi OS, three of them with the maximum severity score of 10.0. They allowed an attacker with network access to take control of affected consoles, and they were exploited in real attacks before many owners had updated. In August, Bulletin 067 disclosed another 22 vulnerabilities across the UniFi range, 21 of them rated critical.
The Canadian Centre for Cyber Security issued its own advisories for both.
None of this means UniFi is unsafe to own. It means a UniFi console is a security device and has to be treated like one. For every UniFi network we look after:
- We watch Ubiquiti’s security bulletins and apply critical fixes within days, not at the next convenient visit
- Routine updates are scheduled out of hours, after we have checked the release notes for known problems
- Consoles are never reachable from the internet except through Ubiquiti’s own authenticated remote access
- Every administrator signs in with their own account and MFA, and stale accounts are removed
Where the network is managed from
Every UniFi network has a brain: the software that holds its settings and pushes them to each device. Where that software runs, and who owns the account behind it, decides how easy the network is to support for years afterwards.
A UniFi console on site
Most small offices use a UniFi Cloud Gateway or Dream Machine, which is both the internet gateway and the management console in one box. It is the simplest arrangement and our default for single sites.
UniFi OS Server
For businesses managing several sites, or that already run their own servers, UniFi OS Server runs the same management software on a virtual machine. It replaces the older self-hosted UniFi Network Server, which Ubiquiti now treats as legacy, so any office still running the old version should plan a move.
Site Manager
Site Manager at unifi.ui.com is Ubiquiti’s cloud view across all your sites. It gives one place to see health, apply updates and link offices together with Site Magic, Ubiquiti’s site-to-site VPN.
An account the business owns
The most common problem we find is a UniFi network registered to the installer’s personal Ubiquiti account. When that person leaves, so does control of your network. We make sure the owner account belongs to your company, protected with MFA, with named administrators added beneath it.
The settings that make UniFi fit for business
UniFi works out of the box, which is part of the problem. Its defaults suit a home or a demo, not an office holding client data. This is the baseline we apply to every installation and every network we take over.
| Area | What we often find | What we set |
|---|---|---|
| Network layout | Everything on one flat network: laptops, phones, cameras, printers and guests | Separate networks for staff, phones, cameras, printers and guests, controlled by UniFi’s zone-based firewall |
| Guest Wi-Fi | Guests on the same network as the file server | An isolated guest zone with internet only and devices unable to see each other |
| Firewall rules | Old port forwards for cameras or remote desktop | No inbound ports open unless a business need is documented, and remote access through VPN |
| Administrator access | One shared login, sometimes with the default password on devices | Named accounts with MFA, unique device passwords and SSH switched off unless needed |
| Updates | Automatic updates off and devices years behind | A tested update schedule, with security fixes applied promptly |
| Backups | No copy of the configuration anywhere but the console | Automatic configuration backups kept off the device |
| Threat filtering | Intrusion prevention switched on with no thought for throughput | Filtering sized to the gateway, so security does not halve your internet speed |
Ubiquiti also offers CyberSecure, an optional subscription that adds stronger threat signatures and content filtering to UniFi gateways. We will tell you whether it adds enough for your business to justify the cost.
Common UniFi problems and what is usually behind them
| What you see | What is usually behind it |
|---|---|
| Devices show as disconnected or will not adopt after a change | The management software moved, or devices on another network cannot find it. They need to be pointed at the new address |
| Internet speed dropped after security features were turned on | The gateway is too small to inspect traffic at your connection speed |
| Wi-Fi drops as people move between rooms | Access points set to full power with automatic channels, so laptops cling to a distant one |
| The VPN between offices keeps dropping | The internet provider’s modem is also acting as a router in front of the gateway |
| Phones or access points reboot at random | The switch has run out of Power over Ethernet budget |
| Nobody can log in to manage the network | The owner account belongs to a former employee or installer |
Taking over a UniFi network someone else built
Most of the UniFi networks we support were installed by someone else. Before changing anything, we make sure control of the network sits with your business. That means transferring ownership of the Ubiquiti account, or rebuilding the site under a company account if the old owner cannot be reached.
From there we take a backup, list every device with its model, firmware and age, and write down how the network is laid out: which networks exist, what each switch port feeds and what the firewall allows. Devices that Ubiquiti no longer updates are flagged for replacement. Only then do we bring firmware up to date and apply the baseline above, in planned windows, so nothing changes under people while they work.
For Wi-Fi coverage and new access points, see our business Wi-Fi installation page. If you are weighing UniFi against a licensed platform, our Cisco Meraki page explains that alternative, and our business VPN page covers remote access.
UniFi work we quote
UniFi equipment and labour are quoted as separate lines, and ongoing management can sit inside our networks and firewalls service.
- UniFi network takeover and security reviewFixed quote
- New UniFi gateway, switches and access points installedFixed quote
- Staff, guest, phone and camera networks separatedFixed quote
- Self-hosted controller moved to UniFi OS ServerFixed quote
- Offices linked with Site Magic VPNFixed quote
- FortiGate firewall added in front of UniFiFixed quote
Questions people ask
Does UniFi have licence fees?
No. You buy UniFi hardware once and own it, and the management software is free. The network keeps working whether or not you pay anything further. Ubiquiti sells an optional CyberSecure subscription for stronger threat filtering on its gateways, which some businesses choose to add.
Is UniFi secure enough for a business?
It can be, when it is set up properly and kept updated. In 2026 Ubiquiti fixed several critical flaws in UniFi OS, some of which were exploited before owners had updated. A UniFi network with separate networks, named administrators with MFA, no open management ports and prompt updates is a sound business network. One left on defaults is not.
Should we choose UniFi or Meraki?
UniFi costs less to run because there are no licences, and suits most offices of up to about 150 people. Meraki costs more every year but adds vendor support, advanced security features and a very polished dashboard for multi-site businesses. We support both and will recommend the one that fits your budget and needs.
Can we use a FortiGate firewall with UniFi switches and access points?
Yes, and many of our clients do. The FortiGate handles internet security, VPN and threat inspection, while UniFi switches and access points handle the wired and wireless network behind it. You get stronger security at the edge without paying licences on every switch and access point.
Our UniFi network is on the installer's personal account. What should we do?
Ask the installer to transfer ownership to an account your company controls. If they will not or cannot, we can rebuild the site under a new company-owned account, which usually means re-adopting the devices in a planned window. Leaving control of your network with someone outside the business is a real risk.
Do we need a Cloud Key or Dream Machine?
You need something to run the management software. For most single offices, a UniFi Cloud Gateway or Dream Machine does that and acts as the internet gateway too. Businesses with several sites or their own servers can use UniFi OS Server instead. Older Cloud Keys and the legacy self-hosted Network Server should be reviewed for replacement.
Can UniFi connect several offices together?
Yes. Ubiquiti's Site Magic links UniFi gateways at different sites with encrypted connections, set up from Site Manager. Each office needs its own UniFi gateway and an address range that does not overlap with the others.
What happens if a UniFi device fails?
Because the settings live in the management software, a replacement switch or access point picks up the same configuration once it is adopted. Warranty replacements go through Ubiquiti's returns process, which takes time, so we suggest keeping a spare access point and, for larger sites, a spare switch.
Tell us what’s going on
Pick how urgent it is and leave a way to reach you. The help desk replies by phone or email. If work has stopped, call 647-812-3775 instead.
Something broken, or something to plan?
For anything urgent, call. A technician answers the emergency line 24/7. For everything else, open a ticket and tell us what is going on.