Ubiquiti's new "Ultra" line of products

CGU unfortunately came out a bit late. FIL needed a new gateway for site to site VPN between his camp and home, so I bought the UXG-lite, assuming that whatever the “Ultra” was that it would be a tier or two up in price range. He didn’t need multi-WAN support and already had NVR + CKG2+.

Patience is a virtue. Because this device is neat. They’ll give you, for $129 a combined gateway/controller. Not a bad deal at all. I do think that if it had wifi and cost up to about $180 it would still be pretty decent and go a long way in capturing the home enthusiast “prosumer.”


I still don’t think it’s compelling enough for me to upgrade what I have in place currently at the office (USG+CKG2+ running Protect, Talk, Network with a 48-port PoE switch, 3 Flex, 3 Flex mini, and 2 APs (and 20 phones). I don’t use IPS, but for my office use, I’m still below the advertised speed limit for the old USG. I think I understand the newer products to be better at load balancing, but I care far more failover is available than that my 20-50mbps of bandwidth (actual use, connections are 150 + 200mbps) gets split evenly. If my USG failed tomorrow, I would take ten minutes to decide if the $129 CGU would drop in (and migrate the Network application to it while leaving Talk, Protect on the cloud key) vs buy UDMP which is, of course, 3x the price. But I’ll be saving roughly a UDMP per month once my phone numbers finish porting to Talk (I haven’t forgotten to update the thread).



When something eventually gives way, I will probably go the route of the UDMP because they’ll allow for LTE failover, and FirstNet offers a sim for $40/m that would work in their backup device, and there’s the ability to run two UDMP in parallel. Both of these things are overkill for my application, but downtime is so annoying when it cost so little to prevent.


That said, I have a spare OG USG now, too, so it’s entirely possible that future me is too lazy to ever actually upgrade without experiencing the downtime he could have easily prevented.





Of note:
My Protect setup is a single wireless g3 cam only recording detections. The HDD in my cloud key failed. It writes about 20gb a day. I put a WD Blue ssd (1tb) in its place. Should last about 20 years if the estimated tolerance and current volume of use hold.

I currently have a USG, a couple of switches (including a flex), and 3 APs. I currently run the controller on a computer in the house. If I were to get the new gateway, can I restore a back to it from my current computer based controller? Any idea what that migration path looks like?

I was able to import my backup from a uck2+ to udmp, so my unverified assumption would think its possible for you

quote:

---

Only thing that looks worth a damn of these is the Switch Ultra. That could be really nice for security appliances that need power

---

If you are aware that PoE-powered PoE switches exist you can really find a lot of uses for them.

I am not sure if these use the same code, but there was an advisory about Ubiquiti edge routers.

quote:

---

The Federal Bureau of Investigation (FBI), National Security Agency (NSA), US Cyber Command, and international partners are releasing this joint Cybersecurity Advisory (CSA) to warn of Russian state-sponsored cyber actors’ use of compromised Ubiquiti EdgeRouters (EdgeRouters) to facilitate malicious cyber operations worldwide.

---

I believe the "vulnerability" of the EdgeRouter was people leaving the default admin credentials or other weak passwords on devices exposed to the internet.