Ubiquiti UniFi CyberSecure

Ubiquiti UniFi CyberSecure

UniFi CyberSecure is a premium security add-on for UniFi Gateway that extends built-in network protection in two key areas:

• Intrusion Detection and Prevention (IDS/IPS)
• Advanced Content Filtering

This combination delivers enterprise-grade protection by combining real-time threat intelligence with flexible, policy-driven content access control.

Advanced Intrusion Detection and Prevention (powered by Proofpoint)

The IDS/IPS system in UniFi Network analyzes traffic for known threat patterns – so-called signatures – such as IP addresses, ports, or protocol anomalies. CyberSecure significantly extends this system:

• Signature library expanded to over 55,000 definitions
• Weekly updates with 30–50 new signatures, sourced from Proofpoint and Microsoft Active Protections Program (MAPP) databases
• Reduced false positives thanks to carefully curated signature sets
• Support for more than 50 threat categories for more targeted policy configuration

Signatures crafted by Proofpoint experts minimize false positives for a seamless experience.

Advanced Content Filtering (powered by Cloudflare)

CyberSecure extends UniFi's standard content filter with Cloudflare-powered filtering covering more than 100 categories. It enables precisely targeted filtering policies based on compliance requirements, user groups, or VLANs. It is especially valuable for professional environments that require more than simple blanket filtering. Ideal for networks that need:

• Granular web access control
• Compliance with organizational or regulatory policies (e.g., CIPA)
  
• Scalable content filtering beyond network-wide presets
  

Supported Models and Signature Capacity

The number of available signatures depends on the UniFi Gateway model. Some devices support Memory Optimized Mode, which limits the total number of signatures to preserve system resources.

Memory Optimized Mode

Intrusion prevention consumes memory proportionally to the number of enabled signatures. If your gateway simultaneously runs features such as BGP routing, ad blocking, or content filtering, Memory Optimized Mode helps maintain performance by loading a selected high-impact signature set.

Warning! The service cannot be returned after purchase.

IDS/IPS Signatures by Model Compatible Models

			Standard Mode		Memory Optimized Mode
	Product Name	SKU	Signatures	Categories	Signatures	Categories
	Enterprise Fortress Gateway	EFG	95,000+	53	—	—
	Gateway Enterprise	UXG-Enterprise	95,000+	53	—	—
	Dream Machine Pro Max	UDM-Pro-Max	55,000+	53	30,000+	36
	Dream Machine Special Edition	UDM-SE	55,000+	53	30,000+	36
	Dream Machine Pro	UDM-Pro	55,000+	53	30,000+	36
	Dream Wall	UDW	55,000+	53	30,000+	36
	Cloud Gateway Max	UCG-Max	55,000+	53	30,000+	36
	Cloud Gateway Ultra	UCG-Ultra	55,000+	53	30,000+	36
	Cloud Gateway Fiber	UCG-Fiber	55,000+	53	30,000+	36
	Gateway Max	UXG-Max	55,000+	53	30,000+	36
	Gateway Pro	UXG-Pro	55,000+	53	30,000+	36
	Gateway Fiber	UXG-Fiber	55,000+	53	30,000+	36
	Cloud Gateway Industrial	UCG-Industrial	55,000+	53	30,000+	36
	Dream Machine	UDM	20,000+	13	—	—
	Dream Router	UDR	20,000+	13	—	—
	Dream Router 7	UDR7	20,000+	13	—	—
	UniFi Express 7	UX7	20,000+	13	—	—
	UniFi Express	UX	—	—	—	—
	Gateway Lite	UXG-Lite	—	—	—	—

FAQ

Difference between CyberSecure and CyberSecure Enterprise

• CyberSecure: Covers more than 55,000 threat signatures, ideal for mid-sized deployments. Includes a memory optimization mode for gateways with limited resources.
• CyberSecure Enterprise: Offers more than 95,000 signatures and additional threat categories, designed for large-scale networks running on high-end gateways such as the Enterprise Fortress Gateway (EFG) and UXG Enterprise.

Requirements

• UniFi Cloud Gateway: version 4.1.8 or later
• UniFi Gateway: version 4.1.3 or later
• UniFi Network: version 9.3 or later (for content filtering) with UniFi OS Server – UniFi Network Server is not supported
• Remote Access enabled – recommended to keep active for subscription information updates and to enable transfers

Activation After purchase you will receive an activation code, which is redeemed in Site Manager at unifi.ui.com by clicking the shield icon next to the desired location. Owner permissions for that location are required for activation.

Each activation code is valid for one location for one year. After activation, allow up to 15 minutes for all threat signatures and filtering features to fully load. Subscription Transfer A subscription can be transferred via the account owner's Account Portal under Subscriptions. Simply click the active subscription and change the Site/Host in the side panel.

For example, a location moving from UCG Ultra to UCG Fiber can transfer the CyberSecure subscription; however, moving to an EFG would require a new CyberSecure Enterprise subscription.

Each subscription can be transferred a maximum of twice within 30 days. If you need an additional transfer within this period, contact Ubiquiti support. Shadow Mode If you are running two gateways in Shadow Mode (high availability), only a single subscription is required for both devices.