Unifi's NEW Enterprise Fortress Gateway: An MSP's Review

Introduction

This tutorial provides a comprehensive overview of the Unifi Enterprise Fortress Gateway (EFG), a powerful networking device designed for enterprise environments. We’ll explore its specifications, capabilities, software interface, management features, and the advantages it offers for managed service providers (MSPs). This guide will help you understand how to effectively utilize the EFG and its features in a business setting.

Chapter 1: Specs and Capability

Understanding the Hardware

The Unifi EFG boasts impressive hardware specifications, making it suitable for large branch or campus environments. Here are the key features:

• Routing Speed: 12.5 Gbps with Intrusion Detection System (IDS) and Intrusion Prevention System (IPS).
• Ports:
  • 2 x 25 Gbps SFP28 ports
  • 2 x 10 Gbps SFP+ ports
  • 2.5 Gbps Ethernet ports
• License-Free Inspection: Real-time inspection of encrypted packets.
• High Availability: Supports shadow mode with automatic failover for redundancy.
• Power Redundancy: Dual hot-swappable power supplies.
• Network Management: Integrates with full Unifi network management for streamlined operations.

Practical Tips

• Consider using the EFG in environments with high device density or critical operations requiring robust security.
• For redundancy, implement high availability configurations with multiple EFG units.

Chapter 2: Software First Impressions

Navigating the Interface

The EFG runs on the familiar Unifi network interface, which is user-friendly compared to other enterprise solutions. Here’s how to get started:

1. Initial Setup:

   • Connect a LAN port from the primary EFG to the WAN port of a secondary EFG if using high availability.
   • Use the Unifi controller to add and manage devices.

2. Exploring Features:

   • Access the security settings to enable Next Day for traffic inspection.
   • Configure target networks and traffic types based on your organization’s needs.

Common Pitfalls

• Ensure proper configuration of the SSL certificate for devices to avoid blocked websites.
• Regularly monitor traffic logs to adjust security settings as needed.

Chapter 3: Management of EFG

Ongoing Management Needs

The EFG requires active management due to its extensive security features. Here’s how to maintain it effectively:

• Block Management: Edit blocked websites and manage SSL certificates for users.
• Inspection Settings: Customize which domains and traffic types are inspected or blocked.

Practical Advice

• Regularly review and update security settings to balance user access with network security.
• Train staff on the management interface to minimize user disruptions caused by security settings.

Chapter 4: Firewall Insights

Utilizing Firewall Features

The EFG provides detailed logging and insights into network activity:

• Query Logging: Monitor queries made on the network, including blocked sites.
• Firewall Rules: Easily create or modify firewall rules directly from the interface.

Action Steps

• Use the logging features to identify potential security threats and adjust firewall rules accordingly.
• Set up alerts for unusual activity for proactive management.

Chapter 5: Enhanced Threat Protection

Understanding Advanced Features

The EFG offers an optional enhanced threat protection plan for an additional fee. Here’s what to consider:

• Monthly Charge: $75 for advanced features including more signatures and dedicated support.
• Comparison with Competitors: Evaluate the cost-effectiveness of the EFG against other high-end devices like FortiGate and SonicWall.

Key Considerations

• Assess whether the additional features align with your organization's security needs before subscribing.
• Keep in mind the ability to run the EFG's core features at zero ongoing cost.

Chapter 6: The Price and the Value

Evaluating Pricing

The EFG is priced at approximately $1,999, with additional costs for power supplies and related devices. This pricing structure provides significant value for the capabilities offered.

Actionable Insights

• Compare the EFG against other enterprise solutions to gauge value-for-money based on features and performance.
• Consider the potential for long-term savings with no required subscriptions for core functionality.

Chapter 7: Future Considerations for MSPs

Embracing New Opportunities

The EFG is part of Unifi's initiative to cater to the MSP market, which includes:

• Enterprise Partner Program: Opportunities for MSPs to gain competitive advantages.
• Training and Support: Access to dedicated pre-sales support and product training.

Recommendations

• Explore participation in the Enterprise Partner Program for better procurement and support.
• Invest time in staff training to facilitate smoother deployments and management of Unifi products.

Conclusion

The Unifi Enterprise Fortress Gateway is a robust solution for enterprise networking, combining impressive hardware specifications with user-friendly software management. This guide outlined essential features, management practices, and the value propositions for businesses and MSPs alike. By leveraging the EFG's capabilities, organizations can enhance their network security and operational efficiency. For next steps, consider evaluating how the EFG fits within your current infrastructure and explore the Enterprise Partner Program for additional support.