UbiquitiDream Machine Special Edition UDM-SE Router

Truly a great product!Generally speaking, this is in a weird category of products. Most people looking for something more business-oriented will want separate parts for their router, poe switch, wifi and camera controller, and ips/ids. Most home users will never care to even have half of these features, much less understand how to configure and use any of them. So this is a product that hits a unique sweet spot for small business users that need all the features, but don't want a whole rack of equipment to maintain, or (like me) home users with a more complicated home network but don't want to cobble together a home lab full of used Cisco equipment.Overall, very easy to set up, very easy to manage, and the few things that were not obvious were just a few Google searches away. I have ids/ips configured, secure dns is working, lots of vlans, isolated guest traffic, and I've started playing with the different app and site to site VPN options... It's awesome just how much this can do! I don't have cameras or door control stuff yet, but that is another feature I'm looking forward to.Some very minor complaints:The led panel has brightness controls, but the switch ports themselves are basically flashlights. Get the black tape ready, because from the outside it looked like there was some weird blinking rave party in my basement at night!The internet filtering options are awful! If you turn it on, your internet is safe for any toddler to use, but everything from porn to gambling to YouTube is restricted. No way to adjust it, no way to granularly apply it to certain networks, and there is a noticeable performance hit. Just being able to use normal YouTube would be enough for me to just grumble and deal with it, but I was hoping to be able to subscribe to a block list, or select specific categories... Nope, it's on or off with the only selection being if you also want to block VPN traffic. For the moment I'm just relying on a filtered dns provider which has a better balance of blocking the worst of the internet without being a nanny, but I really hope they make this better.Another minor complaint is how it deals with vlans and tagging, and I've set up a few different brands of switches... But the way theirs works is just weird. And how they explain it prompts more questions than it answers.Also with vlans, in a work environment the native Vlan0 would be a black hole dead end, and all legit traffic would be routed elsewhere. Off by default, and on if programed to be on. But all management and internet traffic is effectively hard coded to be routed through vlan0, so by default anything that gets plugged into an unprogrammed port will "just work". And I get that being the default for home users, but not having control over that is irksome. Similarly, there is some ipv6 voodoo happening, where even when v6 is "off", it isn't really off. I think it is just turning off v6 dhcp? But their documentation doesn't explain what that on or off is actually doing, and there was absolutely v6 traffic routing internally alongside the assigned v4 traffic. You will still need to turn off v6 at the device level to have it off as v6 is going to circumvent all of your v4 rules that you set up thinking you are routing and managing traffic.More ports would always be nice... But uniform ports, or more clear labels would really be helpful. Some are poe, some are poe+, some are 1gig, others are 2.5gig capable, and the sfp slots are 10gig capable, but one of those is intended to replace the internet line in and not meant for internal use (it can be assigned for internal instead of internet, but it is separated in a way that you aren't going to get 10gig across 2 internal devices that way). There is no visual indication of what port has what capacity, so I just printed a cheat sheet to go with it. It goes well with the black tape over the Ethernet port lights... So sad when beautiful minimalist design needs to be ruined by practicality... But it sits in a rack, so I don't actually have to see it.No mac address filtering or security. Yeah, more devices natively spoof Mac addresses now, so this isn't as helpful as it once was, but it seems like such a basic feature, that I was supprised and disappointed it doesn't exist. And years of requests for the feature have been ignored, so I'm not expecting that to come with time like other features and fixes might.Obviously I'm very persnickity, but those are my only real complaints, and none of those are deal breakers! Overall an amazing product, with a good balance of price and capabilities! It can almost do it all, and it's very fast, and the price is way less than other products that attempt to play in the same space, but do everything worse. Easy recommendation for anyone who needs something more than a typical soho all-in-one wireless router, but don't want a full degree in networking to get a home lab running smoothly.

Setup was relatively easy. However, the first firmware update said it'd take 5 minutes and kept saying updating, on the web interface and my phone, long after that time. I rebooted at the dream machine's control panel to get past that hangup. This seems like a common issue others have experienced and something that should be addressed by Ubiquiti; which is the only negative at the moment.After that I could dig into the web interface and it was smooth sailing. Adopted the U6-lite APs, setup the wifi network, and sat back analyzing what devices connected where and if there was good coverage; which there is. The dream machine does a great job of conveying information and the topology of your network. I set the firmware to check/update every day at 4 AM and confirmed that everything is now up-to-date the following morning when I woke up.Very impressed with the stability, performance, features, and the user interface.

has improved my internet quality of life significantly, my neighbor can no longer steal my internet and claim that she wasn't doing it. i have evidence and now she can't use my internet I have had less problems with speed and responsiveness. I'm sure we have all had that neighbor I can be neighborly but when i don't know what you get down to online I'm not going to be the one taking the heat, it gives me all the info so i can make a good call and remove them from my service. sucky part of living with someone less tech savvy she would always use the WPS button i hate that button its caused me so much headache's over the years. As my son gets older i can insure he won't be doing anything online that is unscrupulous, that being said kids will be kids so long as its not wrong or illegal I'm cool with it.

This replaced an EOD Fotigate device.I now have extreme performance increases with this device, the UAP, and the 10gb NAS connection.The cost for the device is exceptional in comparison to staying with a purchase price plus recurring fees for subscriptions.This device is designed for the Novice as well as the Advanced network minded people. From a simplistic plug and play design, to far more extreme controls allowing even deeper securities imposed.The device watches all network traffic, manages DNS, VLAN, IPS, GeoBlocking and much much more.The unit is a rack mount unit, so do not expect it to sit on a desk, unless it's what your physical limitation is. Quiet, cool, and controlling lighting helps diminish a potential "unsightly" device sitting in an open area.I've worked with Cisco, Fortinet, Netgear, Linksys, Sonicwall, Palo Alto, Juniper, and others (not pfsense yet), and this box is clearly a contender for all security purposes from a small business to a home environment.The TCO and ROI are absolutely incredible values.

What I very much like about this product is its price point, not too cheap not too expensive, especially for the amount of advanced features it has.You don’t need any IT background to navigate through this, so it’s very simple to work and it’s not difficult to pirate. I know some small businesses cannot afford an IT department, this is almost a replacement. It does not have the most advanced features for technical, bit to bit, atom to atom policies. It’s very broad in everything. This is what I like to call the Apple brand for networking, simple and easy.UI interface is very basic and easy to navigate, there are a lot of support forms for setting up VLAN, Ports, and many more.It is POE+, I was able to connect my POE access point with this, but I did opt in for a managed switch through UDM. I do appreciate a storage drive in this. It’s very useful for security cameras or just backup data in general.