SIEM, Netflow, and Security Updates: UniFi Just Got WAY More Powerful!

Discover the powerful new SIEM and Netflow features in UniFi Network 8.5.6. This update offers updated dashboards, enhanced security, and deeper network insights. Learn how to leverage these tools for your network and improve overall performance.

How to Send Unifi Logs to a Syslog Server

Release Notes

Security Bulletin

Connect With Us
---------------------------------------------------

Lawrence Systems Shirts and Swag
---------------------------------------------------

AFFILIATES & REFERRAL LINKS
---------------------------------------------------
Amazon Affiliate Store

UniFi Affiliate Link

All Of Our Affiliates help us out and can get you discounts!

Gear we use on Kit

Use OfferCode LTSERVICES to get 10% off your order at

Digital Ocean Offer Code

HostiFi UniFi Cloud Hosting Service

Protect your privacy with a VPN from Private Internet Access

Patreon

Chapters
00:00 UniFi Network Application 8.5.6
01:31 Security Advisory
02:30 New Dashboard Widgets
02:43 UniFi Netflow
03:08 SIEM Activity Logging
05:02 UniFi Gateway Packet Capture

[ITSolutionsNetwork]

I love the addition of packet capture! It means no more having to rely on the CLI for capturing packets. This feature is essential, especially when troubleshooting devices with limited troubleshooting capabilities, like UniFi products.

[udirt]

The dashboard upgrades were damn necessary, it was getting useless for monitoring larger networks. Glad it's going in the right direction again.
Adding Netflow is a great addon for networks where you already have that established. There's a lot you can do, I.e. we enrich our traffic logs with ioc markers even months after the metadata was recorded. Plus, ubiquiti is simply not there yet to guarantee all their security promises, so taking care of the flow export is a fair move to help customers.

On the old gws you apparently also could enable netflow, down in vyos. I just dunno for old and new if it includes good app appmon data. Looking forward to your impression

[RaidOwl]

My dumbass saw 'thomas' in the logs and thought "why is Tom using a random name for this?"

[DPCTechnology]

I'm gonna reach out to my Blumira MSP Specialist and see if i can get a demo account for my home lab to test the SIEM integration... You may know her... LOL!

[MitchOfCanada]

Really want a way to set a vlan for. The VpN/teleport/wire guard and subnet. Currently. Just manually doing firewall limiting/redirections.

[wilsonlspacheco]

Thanks for the video!
But.. this video is on Bottom of you Ubiquiti UniFi Playlist.. it is normal? :\

[Jimmyhuybrechts]

The only issue here is that you need unifi OS 4.1 or later for sflow and welll 4.1 does not exist anywhere 😇 yes probably somewhere in their dev pool.

[zapman]

the only problem with access is that there is no access for people not on the network who need access they have to be a part of the UniFi network the whole app that requires VPN and Wi-Fi is the worst thing they ever made. they also need a remote intercom viewer that doesn't need to be directly connected to the UniFi network, think multiple people with different internets being able to get calls from one intercom.