Ubiquiti USG-PRO-4 UniFi Security Enterprise Gateway Router with Gigabit Ethernet

Product Information

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties which we think you may find interesting if you tell us that you wish this to happen.

Both of these products have MIPS processors, with the Vyatta-based EdgeOS underneath. You can create custom json config files for them, which give them some flexibility that the UDM and UXG lines don't have. These can be adopted to an external UniFi Network controller, but offer limited performance and old hardware. The DNAT rule # ranges are from 1-4999, and the Source/Masquerade rule numbers are from 5000-9999. If you wanted to add a port forward (DNAT) in the config.gateway.json for WAN2 in a multiWAN (load-balance) setup, this is what the config.gateway.json would look like with only this particular NAT rule:

Find the appropriate section with the custom changes in the config output, for our example above it would be the following: we replaced five legacy passive switches in our network with six 8 POE-60W actively managed switches, and RJ45 ports support 10/100/1000 Ethernet connections. A WAN port is active only if the corresponding SFP port is empty. By default, the WAN1 port is set to DHCP Client. NOTE: When editing this customjson file, it is not necessary to include everything. You must only include the complete "path" to the items you have edited, anything outside of the path can be omitted.

as described below, even the USG Pro 4 is unable to make full use of a symmetrical gigabit Internet connection with both IPS and DPI enabled (even before enabling QOS). Downgrades to dual-core ARM CPU, vs the quad-core on the UDM. Lower IDS/IPS throughput as a result. Because hardware acceleration is disabled, Ubiquiti says that enabling IPS will affect the USG’s maximum throughput:Enabling DPI or QOS may further impact throughput. In our experience, with DPI enabled on the USG, we saw only 60-70Mbps symmetrical throughput even though we have a gigabit Internet WAN connection. And, as noted above, we couldn’t run an accurate speed test from the USG. Before customizing firewall or NAT rules, take note of the rule numbers used in the UniFi Network Firewall.Default firewall rules start at either 3001 or 6001, and NAT rules will also start at 6001 (which don't overlap with firewall rules). The custom rules created in the config.gateway.jsonfile cannot have duplicate rule numbers with the existing rules in the USG, or there will be a provisioning loop. It is recommended to put custom rules before the existing ruleset, as the lower number will win between two matching rules.

Hardware offloading lets you use dedicated hardware to accelerate some tasks. You can turn it on or off depending on what you are trying to do. This applies to the USG/USG-Pro, and also EdgeRouters. Note: Although the cabling can be located outdoors, the UniFi Gateway itself should be housed inside a protective enclosure. All of the Dream Machines and UniFi OS Consoles are based on modern ARM processors and Ubiquiti's new UniFi OS software platform. You can’t create custom JSON config files for them, but a limited set of manual configuration changes and Linux commands can be run via SSH, if you know what you’re doing. None of these can be adopted to an external UniFi Network controller besides the UXG-Pro. Basically a UDM-Pro, plus PoE out on the 8-port switch, 128 GB of internal storage, and an upgraded 2.5 Gbps RJ45 WAN port.When making changes via the config.gateway.json file, it is best to enter only the customizations that cannot be performed via the Network application. If the formatting is incorrect, a provisioning loop will be triggered on the USG, and a reboot will take place once the USG comes out of the provisioning loop. At this point the config.gateway.json file could be corrected or removed to correct this. Optional: The config can also be exported if preferred. The following example exports the output to the config.txt: the best way to fix this issue is by swapping the two OEM fans for Noctua NF-A4x20 PWM Premium-Quality Quiet 40mm fans, as shown in this video, here. These 2nd generation models have quieter cooling fans, a small touchscreen on the left side, and support for UniFi AR, which lets you see virtually see what devices are connected

User Tip: An easy way to test the validity of the json file is: python -m json.tool config.gateway.json Deleting Changes or Reverting to Previous State A comprehensive overview of your Network Health is readily available in the new dashboard. Monitor your network’s vitals and make on-the-fly adjustments as needed. Use the configurable reporting and analytics to monitor large user groups and expedite troubleshooting. Advanced search and sorting capabilities make network management more efficient. For outdoor applications, shielded Category 5 (or above) cabling should be used for all wired Ethernet connections and should be grounded through the AC ground of the power supply. Gigabit routing is no issue, but firewall and encryption speeds are limited, with slightly higher limits than the USG.So, many people have asked what is the benefit of using a UXG-Pro, we’ll be covering that in a separate ‘vs’ article, but in this one we are comparing the brand new UXG-Pro and the previous USG-Pro-4. as noted by many other consumers, there is the persistent, loud, high-pitch fan noise. Even though our switching gear is in a closed data closet, I can hear the USG Pro 4’s fan noise upstairs in my study. UniFi OS Console - Can run all UniFi applications (Network, Protect, Talk, Connect, Access, and UID) One potential problem with the UXG-Pro is the current state of the UDM-Pro and UniFi OS. Some features on the UDM-Pro are not working, incomplete, buggy, or just missing. Development for the Dream Machines has been steady, but after 9 months, the UXG is still on on beta firmware version 0.5.0.