Technology explained for CFOs

Site networking and protection

UniFi gateways and firewalls

Does this lower-cost network option meet our operating needs?

Reviewed October 9, 2026 · Published by SecureStepPartner

What it is and what it does

UniFi, from Ubiquiti, includes gateways, switches, and wireless equipment. The gateway can control traffic between networks. Supported models offer intrusion detection, which alerts on suspicious traffic, and intrusion prevention, which can block it. A UniFi Wi-Fi access point by itself is not a firewall. Ubiquiti: intrusion detection and prevention.

What that means for your business

A warehouse may need separate networks for staff, guests, cameras, and operational devices. The value comes from rules that actually limit communication between them and a provider who maintains those rules.

Is this a baseline system?

A supported, managed network boundary is baseline for a connected site. UniFi can be considered against the site’s requirements. Decide using capacity, available features, support arrangements, and recovery needs, rather than the purchase price alone.

Will insurance ask about it?

Do not equate the brand with acceptance or rejection. Have IT document the actual firewall, enabled protections, update process, access controls, and monitoring. The broker should resolve any insurer requirement the proposed configuration cannot meet.

See the insurance sources and how to interpret the levels.

Minimum operating position

Supported gateway, appropriate firewall rules, protected management access, regular updates, configuration backups, and a named support owner.

When the business needs stronger protection

Enable and test supported prevention features; verify capacity with inspection on; separate critical traffic; arrange monitoring, spares, and a recovery process.

Evidence to request from IT

  • Exact gateway model and enabled protection features.
  • A test showing blocked traffic across restricted networks.
  • Update records and a realistic hardware replacement plan.

What belongs in the budget

Include installation, monitoring, support hours, spare hardware, and any optional services. Compare the cost of an outage with the available response and replacement service.

A documented incident

Equifax, 2017: the boundary must limit access

The FTC’s Equifax case identified inadequate database segmentation among the security failures that increased the reach of attackers. FTC: Equifax security failures and settlement, 2019.

What this case shows: This illustrates the control outcome to test. It is not evidence that UniFi was involved or that one gateway brand guarantees containment.

Sources and scope

The baseline and stronger-protection positions are editorial planning guidance. Confirm your company’s required controls and insurance answers with the accountable IT owner and broker.