Complete UniFi Buyer's Guide: Professional Network Setup

Top UniFi Products by Category (2026)

*Trade-offs: Lite 8 PoE offers 52W PoE budget (suitable for 2-3 devices), U7 Lite operates on 2.4/5 GHz bands without 6 GHz support.

Ubiquiti's ecosystem spans gateways, switches, access points, cameras, NAS devices, and more, with dozens of models across multiple product lines. This guide maps the entire UniFi ecosystem with clear, premium-tier recommendations based on office size and use case.

After deploying UniFi systems across dozens of South Florida businesses and luxury homes, we've learned what actually works in professional environments—and what shortcuts to avoid.

---

Understanding the UniFi Ecosystem

UniFi's strength lies in its unified management platform: one controller interface manages every device across your network, from gateways to cameras. Unlike traditional multi-vendor environments requiring separate management consoles, UniFi consolidates network infrastructure, security, and surveillance into a single pane of glass.

What Makes UniFi Different: Licensing and Architecture

UniFi's architecture differs fundamentally from subscription-based platforms. Core functionality—routing, switching, WiFi, and basic security—works without recurring subscriptions. Optional CyberSecure by Proofpoint adds advanced threat intelligence for $99/year, but it's not required for operation.

The UniFi Network application (cloud-hosted or self-hosted) discovers, provisions, and manages all devices from one dashboard. Add a new access point, and it appears automatically. Configure VLANs once, and they propagate across your entire infrastructure. The modular design grows seamlessly from 5 to 500+ users without replacing your foundation.

UniFi occupies the space between consumer gear (Eero, Google WiFi) and traditional enterprise solutions (Meraki, Aruba), delivering enterprise features—VLANs, IDS/IPS, centralized management—without enterprise licensing costs or consumer-grade limitations.

5-Year Cost Comparison: For a 50-person office, the total cost of ownership differs significantly between UniFi's one-time hardware model and subscription-based platforms like Cisco Meraki:

Important context: Meraki's licensing includes 24/7 enterprise support, guaranteed firmware updates, cloud-first management, and advanced security features. Organizations requiring these support contracts and cloud-native architecture may find subscription models better aligned with their operational needs.

UniFi's model works well for organizations with in-house IT expertise or access to local professional support, where the one-time hardware investment and optional subscriptions reduce long-term costs.

The Four Core Categories

Gateways: The central network controller. Handles routing, firewall, IDS/IPS, VPN, and network management. Choose based on IDS/IPS throughput (how much security inspection you can run at full speed), device capacity, and whether you need integrated WiFi or rackmount form factor.

Switches: Power and connectivity distribution. PoE (Power over Ethernet) switches eliminate separate power supplies for access points and cameras. Key decisions: port count, PoE budget (total watts available), and uplink speed (1G, 2.5G, or 10G).

Access Points: WiFi coverage. WiFi 7 with 6 GHz support is now the professional standard, offering cleaner spectrum and higher throughput. Coverage planning depends on square footage, client density, and building construction.

Cameras (UniFi Protect): Video surveillance with no cloud subscriptions. Storage lives locally on gateway hard drives or dedicated NVRs. AI-powered detection (people, vehicles, license plates) runs on-device.

UniFi Network Application Overview

The UniFi Network Application (version 10.1) provides centralized management for your entire UniFi ecosystem. This video walkthrough covers the latest interface updates and management features:

Managing Multiple Locations with UniFi Site Manager

Organizations operating multiple branch offices, retail locations, or distributed campuses can centralize management through UniFi Site Manager—a cloud portal that aggregates all sites into a single dashboard. Each location runs its own UniFi gateway and controller, while Site Manager provides organization-wide visibility, firmware management, and configuration templates. This architecture allows IT teams to monitor network health, push updates, and troubleshoot issues across dozens of locations without traveling to each site. For businesses planning multi-site expansion, UniFi Site Manager scales from 2 to 100+ locations under unified oversight.

---

What is a UniFi Gateway and Which Should You Choose?

A UniFi gateway acts as the central router, firewall, and required management controller for all connected UniFi switches and access points. A gateway is required to adopt and manage UniFi devices.

When selecting a gateway, base decisions on Intrusion Detection and Prevention System (IDS/IPS) throughput, total device capacity, and required form factor (rackmount versus desktop). Gateway IDS/IPS capacity should align with your internet connection speed to maintain performance when security features are enabled.

Understanding IDS/IPS Throughput

IDS/IPS (Intrusion Detection/Prevention System) throughput determines how much traffic your gateway can inspect at full speed. A gateway rated for 1.5 Gbps IDS/IPS may limit throughput on a 2 Gbps fiber connection when security features are enabled. Professional deployments benefit from adequate IDS/IPS headroom.

Cloud Gateway Ultra vs. Dream Router 7: Feature Comparison

The Cloud Gateway Ultra ($129) offers 1.5 Gbps IDS/IPS throughput and four gigabit Ethernet ports in a compact desktop form factor. This capacity works well for home offices and small deployments with standard internet connections.

The Dream Router 7 ($279) increases IDS/IPS capacity to 2.3 Gbps, adds a 10G SFP+ WAN port for fiber upgrades, and includes integrated WiFi 7. These additional capabilities provide more headroom for growing networks and multi-gigabit internet connections.

For businesses planning to scale or expecting fiber upgrades, the Dream Router 7's additional features may justify the $150 price difference. For smaller, stable deployments with standard internet speeds, the Cloud Gateway Ultra provides adequate gateway functionality.

Gateway Recommendations by Office Size

Small Office (1-10 People): Dream Router 7 ($279) or Express 7 ($199)

The Dream Router 7 combines gateway, WiFi 7 access point, and PoE switch in a compact desktop form factor. Its 10G SFP+ WAN port future-proofs for multi-gigabit fiber upgrades, while 2.3 Gbps IDS/IPS throughput handles security inspection without performance penalties.

Key specs:

• 2.3 Gbps IDS/IPS throughput
• 10G SFP+ WAN + 2.5 GbE WAN (dual-WAN capable)
• 3× 2.5 GbE LAN ports (one with PoE)
• Integrated WiFi 7 tri-band (up to 5.7 Gbps)
• 64GB microSD for UniFi Protect (supports 5 HD or 2 2K cameras)
• Manages 30+ UniFi devices, 300+ clients

Alternative: Express 7 ($199): More affordable all-in-one with WiFi 7 and 2.5 GbE ports. Offers 1.5 Gbps IDS/IPS throughput without 10G SFP+ WAN. Works well for home offices or very small businesses with gigabit internet.

Alternative: Dream Router 5G Max ($499, releasing March 2026): Combines Dream Router 7 capabilities with integrated 5G cellular modem (up to 3.4 Gbps downlink). Supports dual SIM/eSIM for carrier flexibility and automatic failover. Best for pop-up offices, remote locations without wired internet, or businesses requiring cellular backup connectivity.

Best for: Small offices, branch locations, high-end homes where rack mounting isn't required. The integrated WiFi 7 radio covers 1,750 sq ft, eliminating the need for separate access points in smaller spaces.

Read our complete Dream Router 7 review for real-world deployment insights.

Medium Business (10-50 People): Dream Machine Pro ($379), Cloud Gateway Max ($279), or Cloud Gateway Fiber ($279)

For businesses outgrowing the Dream Router 7, three paths emerge:

Dream Machine Pro ($379): 1U rackmount gateway with 3.5 Gbps IDS/IPS, 8-port gigabit switch, 10G SFP+ ports, and a 3.5" HDD bay for UniFi Protect storage. A reliable choice for professional installations.

Cloud Gateway Max ($279): Compact desktop gateway with 2.3 Gbps IDS/IPS, four 2.5 GbE LAN ports, and USB-C power. Supports UniFi Protect via onboard NVMe SSD storage. Choose this when rack space isn't available but you need more capacity than the Dream Router 7.

Cloud Gateway Fiber ($279): Similar to Cloud Gateway Max but optimized for fiber connections with 10G SFP+ WAN. Supports UniFi Protect via onboard NVMe SSD storage. Best for organizations with multi-gigabit fiber internet requiring desktop form factor.

Key decision: Rackmount infrastructure? Choose Dream Machine Pro. Desktop deployment with standard internet? Choose Cloud Gateway Max. Desktop with multi-gig fiber? Choose Cloud Gateway Fiber.

Large Business (50+ People): Dream Machine Pro Max ($599)

The Dream Machine Pro Max is our standard recommendation for serious business deployments. Its 5 Gbps IDS/IPS throughput, dual RAID-protected HDD bays, and High Availability support deliver enterprise-grade reliability.

Key specs:

• 5 Gbps IDS/IPS throughput
• Supports 200+ UniFi devices, 2,000+ clients
• Dual 3.5" HDD bays with RAID 1 protection
• 10G SFP+ port + 2.5 GbE WAN
• 8× GbE LAN ports
• Built-in 128GB SSD for OS and applications
• High Availability (HA) failover support

Why RAID matters: Hardware failures happen. RAID 1 mirroring protects your UniFi Protect recordings and network configuration. When a drive fails, your cameras keep recording without interruption.

See our UDM Pro Max review for detailed performance analysis and deployment scenarios.

Enterprise (100+ People): Enterprise Fortress Gateway ($1,999)

For organizations requiring maximum throughput and 25G connectivity, the Enterprise Fortress Gateway delivers 12.5 Gbps IDS/IPS routing with support for 500+ UniFi devices.

Key specs:

• 12.5 Gbps IDS/IPS throughput
• 2× 25G SFP28 ports + 2× 10G SFP+ ports
• Redundant hot-swappable power supplies
• Shadow Mode High Availability
• NeXT AI Inspection (SSL/TLS decryption for encrypted traffic analysis)
• 90-day professional support included

NeXT AI Inspection: The Enterprise Fortress Gateway includes NeXT AI Inspection, which decrypts and analyzes SSL/TLS traffic in real-time without additional licensing costs. This feature enables visibility into encrypted traffic, content filtering, and advanced threat detection within HTTPS sessions—capabilities typically reserved for dedicated security appliances. Organizations requiring deep packet inspection for compliance or security monitoring benefit from this integrated functionality.

Best for: Campus networks, multi-building deployments, organizations with 10G/25G backbone infrastructure, and enterprises requiring SSL/TLS traffic inspection.

Gateway Comparison Table

For a complete comparison of all UniFi gateways including technical specifications and upgrade thresholds, see our UniFi Gateway Comparison Guide.

---

What UniFi Switch Do I Need for WiFi 7?

UniFi switches distribute network connectivity and PoE (Power over Ethernet) power to access points, cameras, and VoIP phones through a single cable. For WiFi 7 deployments, switch selection depends on three factors: total PoE wattage budget, uplink speed (1G, 2.5G, or 10G), and port count.

Professional WiFi 7 access points require switches with adequate PoE budget and multi-gigabit uplinks to prevent bottlenecks.

UniFi Network Switches Overview

This video provides a comprehensive overview of UniFi network switches, covering PoE capabilities, port configurations, and deployment scenarios:

Why 2.5G and 10G Matter for WiFi 7

WiFi 7 access points can deliver aggregate throughput exceeding 2.5 Gbps when multiple clients connect simultaneously. A traditional gigabit switch creates an immediate bottleneck, wasting your WiFi 7 investment. Professional deployments require 2.5G or 10G uplinks to access points.

The PoE Budget Problem: Each WiFi 7 access point draws 15-25W depending on the model. While spec sheets list maximum draw, real-world sustained power consumption runs 10-15% lower. For UPS sizing and PoE budget calculations, use these field-tested sustained wattages:

• U7 Pro: 18-20W sustained (22W max spec)
• U7 Pro XG: 19-21W sustained (22W max spec)
• U7 Pro XGS: 25-27W sustained (29W max spec)
• U7 Pro Max: 23-25W sustained (26W max spec)

Six U7 Pro XGS access points at 25W sustained = 150W total. A switch rated for 120W PoE budget would not provide sufficient power for all devices. Always calculate total PoE requirements using sustained wattage, not maximum specifications.

Understanding Lite vs. Pro Switch Differences

UniFi's Lite switch line (Lite 8 PoE at $109, Lite 16 PoE at $199) provides basic PoE switching at accessible price points. These switches work well for small deployments with limited PoE requirements.

The Pro switch line adds capabilities that benefit larger deployments:

• Higher PoE budgets (120W+ vs. 45-52W) support more access points and cameras
• 2.5G and 10G uplinks prevent bottlenecks with WiFi 7 access points
• Etherlighting visual port management simplifies troubleshooting

For deployments with multiple WiFi 7 access points or extensive camera coverage, Pro-tier switches provide the PoE capacity and uplink bandwidth to support these devices without constraints.

Switch Recommendations by Office Size

Small Office (1-10 People): Pro 8 PoE ($349)

The Pro 8 PoE switch delivers professional capabilities in a compact package. Its 120W PoE budget powers 2-3 WiFi 7 access points plus cameras or VoIP phones.

Key specs:

• 8 ports total: 6× GbE PoE+, 2× GbE PoE++
• 2× 10G SFP+ uplink ports
• 120W total PoE budget
• Layer 3 switching capabilities
• Fanless operation

PoE budget planning: Two U7 Pro access points (22W each) + two G6 Bullet cameras (12W each) = 68W total. Leaves 52W headroom for additional devices.

Why the 10G SFP+ ports matter: Connect to your Dream Machine Pro or future 10G infrastructure without replacing the switch. Future-proofing built in.

Medium Business (10-50 People): Pro Max 24 PoE ($799)

The Pro Max 24 PoE introduces Etherlighting™—visual LED identification that illuminates specific ports from the UniFi mobile app. This feature alone saves hours during troubleshooting and installations.

Key specs:

• 24 ports: 8× 2.5 GbE PoE++, 8× GbE PoE+, 8× GbE PoE++
• 2× 10G SFP+ uplink ports
• 400W total PoE budget
• Etherlighting™ visual port management
• Layer 3 switching

The 2.5G advantage: Eight 2.5 GbE ports provide full-bandwidth uplinks for U7 Pro and U7 Pro XG access points. No bottlenecks, no compromises.

Real-world capacity: 400W PoE budget supports 8× U7 Pro XGS access points (25W each = 200W) plus 10× G6 Bullet cameras (12W each = 120W) with 80W headroom.

For detailed insights on Etherlighting and Pro Max features, see our Pro Max Etherlighting guide.

Large Business (50+ People): Pro Max 48 PoE ($1,299)

The Pro Max 48 PoE delivers maximum port density with a massive 720W PoE budget—enough to power extensive WiFi 7 and camera deployments from a single switch.

Key specs:

• 48 ports: 16× 2.5 GbE PoE++, 32× GbE (16 PoE+, 16 PoE++)
• 2× 10G SFP+ uplink ports
• 720W total PoE budget
• Etherlighting™ across all ports
• Layer 3 switching

Enterprise-scale capacity: 720W supports 20× U7 Pro XGS access points (500W) plus 15× G6 cameras (180W) with 40W headroom. Or mix access points, cameras, VoIP phones, and other PoE devices without budget constraints.

High-Performance: Pro XG 24 PoE ($1,799)

For organizations requiring full 10G connectivity to every port, the Pro XG 24 PoE provides maximum available bandwidth to prevent network congestion. Every access point gets 10G uplink capacity.

Key specs:

• 24× 10 GbE ports (all PoE+++)
• Up to 90W per port PoE capability
• 2× 25G SFP28 uplink ports
• Layer 3 switching

Best for: Video production studios, architecture firms, organizations with NAS-heavy workflows, or deployments using E7 Enterprise access points that benefit from 10G uplinks.

Important note: Requires Cat6A cabling to achieve 10G speeds over full 100-meter distances. Budget for cabling upgrades if your infrastructure uses Cat5e or Cat6.

Switch Comparison Table

Thermal Management for Network Closets

Pro Max switches generate significant heat under full PoE load. In our South Florida deployments, we've measured the following thermal characteristics in typical network closets:

Pro Max 24 PoE (400W load): Exhaust air reaches 45-50°C (113-122°F) in enclosed racks without ventilation. Ambient closet temperature should not exceed 30°C (86°F) for reliable operation.

Pro Max 48 PoE (720W load): Requires minimum 6 inches clearance above and below for proper airflow. In cramped, unventilated closets, consider adding a rack-mount fan panel or upgrading to forced ventilation.

Field recommendation: For network closets without HVAC, install temperature monitoring and set alerts at 35°C (95°F) ambient. Switches will throttle PoE output or shut down ports to protect components if internal temperatures exceed safe thresholds.

Cabling Considerations

Cat6A is required for 10G deployments. Cat5e and Cat6 cables limit 10G speeds to 55 meters and 55 meters respectively—insufficient distance for most office installations. When deploying Pro XG switches or planning 10G infrastructure, budget for Cat6A cabling throughout.

For detailed guidance on fiber optic cables, SFP modules, and multi-gigabit cabling, see our UniFi Fiber Cable & SFP Selection Guide.

---

Which UniFi WiFi 7 Access Point Should I Buy?

WiFi 7 access points with 6 GHz support deliver interference-free performance in dense environments. The 6 GHz band offers 1,200 MHz of clean, uncongested spectrum that 2.4 GHz and 5 GHz cannot match.

For professional deployments, select access points based on required coverage area (typically 1,500 sq ft per unit), client density, and whether your switching infrastructure supports 10G uplinks.

UniFi U7 Pro XG WiFi 7 Access Point Overview

This detailed walkthrough covers the U7 Pro XG's 10G capabilities, WiFi 7 performance, and deployment considerations:

Why 6 GHz Matters

The 6 GHz band offers 1,200 MHz of additional spectrum—more than 2.4 GHz and 5 GHz combined. More importantly, it's currently free from legacy devices, microwave ovens, Bluetooth interference, and neighboring networks. This uncongested spectrum provides consistent performance in dense environments where 2.4 GHz and 5 GHz bands experience significant interference.

U7 Lite vs. U7 Pro feature comparison: The U7 Lite ($99) operates on 2.4 GHz and 5 GHz bands, providing dual-band WiFi 7 coverage. The U7 Pro ($189) adds the 6 GHz band for tri-band operation, offering access to cleaner spectrum with less interference.

For environments with many competing WiFi networks or high client density, the 6 GHz band provides performance benefits. For smaller deployments with fewer interference sources, dual-band operation may be sufficient.

Coverage Planning Fundamentals

Square footage: One U7 Pro covers approximately 1,500 sq ft in typical office environments. A 3,000 sq ft office needs 2-3 access points. A 10,000 sq ft space requires 6-8 units.

Client density: High-density areas (conference rooms, open offices, training rooms) benefit from additional access points even when coverage is adequate. More access points = fewer clients per AP = better per-client performance.

Building construction: Concrete walls, metal studs, and elevator shafts attenuate WiFi signals. Older buildings with plaster-and-lath construction require more access points than modern drywall construction.

Access Point Recommendations by Office Size

Small Office (1-10 People): U7 Pro ($189)

The U7 Pro is our baseline recommendation for professional WiFi 7 deployments. Its tri-band operation with 6 GHz support, 2.5 GbE uplink, and 300+ client capacity deliver reliable performance for standard office environments.

Key specs:

• 6 spatial streams (2×2:2 tri-band)
• Full WiFi 7 with 6 GHz support
• 140 m² (1,500 sq ft) coverage
• 300+ connected devices
• 2.5 GbE uplink (PoE+, 22W max)
• Up to 5.8 Gbps on 6 GHz
• Real-world power draw: 18-20W sustained (vs 22W maximum)

Deployment strategy: Two U7 Pro access points cover most small offices (2,000-3,000 sq ft) with excellent overlap for seamless roaming. Place one near the main work area, the second near conference rooms or high-traffic zones.

For a detailed comparison explaining why the U7 Pro is worth the premium over U7 Lite, see our U7 Lite vs U7 Pro comparison.

Medium Business (10-50 People): U7 Pro XG ($199)

The U7 Pro XG adds 10G uplink capability and enhanced thermal management in a fanless design. The $10 premium over U7 Pro makes sense when your switching infrastructure supports 10G.

Key specs:

• 6 spatial streams (2×2:2 tri-band)
• 10 GbE RJ45 uplink (supports 1/2.5/5/10 Gbps)
• 140 m² (1,500 sq ft) coverage
• 300+ connected devices
• PoE+ power (22W max)
• 30% thinner profile with improved cooling
• Real-world power draw: 19-21W sustained (vs 22W maximum)

When to choose U7 Pro XG over U7 Pro:

• You have 10G switching infrastructure (Pro XG switches)
• Multiple high-bandwidth clients connect simultaneously
• Future-proofing for 10G backbone upgrades
• Fanless operation matters (quieter in professional environments)

Read our U7 Pro XG review for real-world performance testing and deployment scenarios.

Large Business (50+ People): U7 Pro XGS ($299) or U7 Pro Max ($279)

For high-density environments with 50+ concurrent users, two models deliver enhanced capabilities:

U7 Pro XGS ($299): Upgrades to 4×4 MIMO on the 5 GHz band (8 spatial streams total) and adds a dedicated spectral scanning radio that monitors the RF environment without interrupting client traffic. This hardware upgrade delivers higher aggregate throughput when multiple clients connect simultaneously, while real-time interference detection proves invaluable in challenging wireless environments.

Key specs:

• 8 spatial streams (2×2 on 2.4/6 GHz, 4×4 on 5 GHz)
• 10 GbE uplink
• Dedicated spectral scanning radio
• 160 m² (1,750 sq ft) coverage
• 500+ connected devices
• PoE++ power (29W max)
• Real-world power draw: 25-27W sustained (vs 29W maximum)

U7 Pro Max ($279): Enhanced 4×4 MIMO on 5 GHz improves aggregate throughput when multiple clients connect simultaneously.

Key specs:

• 8 spatial streams (4×4 on 5 GHz)
• Dedicated spectral scanning radio
• 160 m² (1,750 sq ft) coverage
• 500+ connected devices
• 2.5 GbE uplink

Choose U7 Pro XGS when: You have 10G infrastructure and need maximum performance in challenging RF environments (dense urban areas, multi-tenant buildings, high-interference zones).

Choose U7 Pro Max when: You need spectral scanning and high-density support but don't require 10G uplinks.

Enterprise (100+ People): E7 Enterprise ($499)

The E7 Enterprise delivers maximum WiFi 7 performance with 10 spatial streams and 10 GbE uplink capability. Designed for stadiums, convention centers, and large campus deployments.

Key specs:

• 10 spatial streams
• 10 GbE uplink
• Metal enclosure for durability
• Maximum client density support

Best for: Organizations requiring the absolute highest performance and client density. Pair with Pro XG switches and Enterprise Fortress Gateway for complete 10G infrastructure.

Special Use Cases

Conference Rooms: U7 Pro Wall ($199) The U7 Pro Wall mounts flush to walls with integrated Ethernet ports for connecting displays, VoIP phones, or laptops. Ideal for conference rooms and training spaces.

Outdoor Coverage: U7 Outdoor ($279) The U7 Outdoor features IP67 weather protection for patios, loading docks, and outdoor work areas. AFC (Automated Frequency Coordination) support for 6 GHz outdoor operation.

Hotel-Style Deployments: U7 In-Wall ($149) The U7 In-Wall fits standard electrical boxes with integrated Ethernet ports. Common in hotels, dormitories, and multi-unit residential buildings.

Access Point Comparison Table

For comprehensive guidance on selecting the right WiFi 7 access point based on office size and uplink infrastructure, see our Best WiFi 7 Access Points for Small Business guide.

---

Cameras & UniFi Protect: Security Without Subscriptions

UniFi Protect delivers professional video surveillance with zero cloud subscriptions. Storage lives locally on gateway hard drives or dedicated NVRs, and AI-powered detection (people, vehicles, license plates, faces) runs on-device. Pay once for hardware, own it forever.

Why UniFi Protect Makes Sense

No recurring fees: Traditional cloud camera systems charge $3-10 per camera per month. Six cameras = $216-720 annually. UniFi Protect has no monthly fees—ever.

Local storage: Recordings stay on your network, not in someone else's cloud. RAID protection (on Dream Machine Pro Max or UNVR Pro) ensures recordings survive drive failures.

AI on-device: The G6 camera lineup includes on-device AI processing for smart detection. No cloud processing required, no additional fees.

Camera Recommendations

G6 Bullet (~$199): 4K outdoor camera with long-range IR night vision. Commonly used for perimeter coverage, parking lots, and building exteriors.

G6 Turret (~$199): 4K indoor/outdoor camera with wide-angle coverage. Ideal for entrances, hallways, and open office monitoring.

G6 Dome (~$179): Vandal-resistant design for high-risk areas. Same 4K sensor as G6 Bullet in a tamper-proof housing.

G6 Instant (~$179): WiFi-powered 4K camera for quick deployments. No PoE wiring required—ideal for temporary coverage or retrofit installations.

G6 Pro Bullet ($479): Premium 4K camera with 2.36× optical zoom and enhanced low-light performance. Best for critical coverage areas requiring maximum detail.

Storage Planning

Recording retention depends on camera count, resolution, and motion activity:

• 6 cameras at 4K with moderate motion: ~500 GB per week
• 12 cameras at 4K: ~1 TB per week
• 30 days retention for 6 cameras: ~2 TB required

Storage options:

• Dream Machine Pro Max: Dual 3.5" HDD bays, RAID 1 recommended (2× 4TB drives = 4TB usable)
• UNVR: Standalone NVR with 4× 3.5" HDD bays
• UNVR Pro: 7× 3.5" HDD bays with RAID support for maximum retention

For detailed storage calculations and retention planning, see our UniFi Protect Storage Planning Guide.

Complete Protect Resources

Getting started: Our UniFi Protect CCTV Guide walks through complete system design, camera placement, and configuration.

G6 Instant deployment: The G6 Instant review compares WiFi vs PoE cameras and explains when wireless cameras make sense.

Budget-friendly security: Build a complete UniFi Protect system under $2,000 with professional-grade AI detection.

---

Professional Setup Under $1,500: Small Office Foundation

This configuration delivers professional-grade networking for 1-10 person offices or high-end homes. Every component represents the professional tier—prioritizing reliability and expansion capacity over extreme budget constraints.

Complete Equipment List

What You Get

10G-ready gateway: The Dream Router 7's 10G SFP+ WAN port future-proofs for multi-gigabit fiber upgrades. When your ISP offers 2 Gbps or 5 Gbps service, your gateway is ready. The 2.3 Gbps IDS/IPS throughput ensures security features don't bottleneck performance.

True WiFi 7 with 6 GHz: Two U7 Pro access points deliver tri-band WiFi 7 with 6 GHz support across 2,500-3,000 sq ft. The clean 6 GHz spectrum provides interference-free performance for modern devices.

Professional PoE switching: The Pro 8 PoE switch's 120W PoE budget powers both access points (44W) plus cameras or VoIP phones with 76W headroom. The 10G SFP+ uplinks enable future expansion to 10G infrastructure.

Protect-capable: Add cameras immediately or later—the Dream Router 7's 64GB microSD supports 5 HD cameras or 2 2K cameras with 7-day retention.

Comparing Setup Configurations

Budget-focused configuration: Cloud Gateway Ultra ($129) + Lite 8 PoE ($109) + 2× U7 Lite ($99 each) = $436 Professional configuration: Dream Router 7 ($279) + Pro 8 PoE ($349) + 2× U7 Pro ($189 each) = $1,006

Additional capabilities in the professional configuration:

• 10G SFP+ WAN port for fiber upgrades
• 2.3 Gbps IDS/IPS capacity (vs. 1.5 Gbps)
• 6 GHz WiFi 7 band for cleaner spectrum
• 120W PoE budget for additional devices
• 10G SFP+ switch uplinks for backbone expansion

The budget configuration works well for home offices and small, stable deployments. The professional configuration provides more expansion capacity and supports future network growth without equipment replacement.

Key Components

Scalability Path

Phase 1 (current): Gateway + switch + 2 APs = solid foundation Phase 2: Add 2-4 cameras for security coverage Phase 3: Upgrade to Pro Max 24 PoE switch for more ports and Etherlighting Phase 4: Add more U7 Pro APs for expanded coverage Phase 5: Upgrade gateway to Dream Machine Pro Max for RAID and HA support

Need help validating this equipment list for your office layout? Our network design services include site assessment, coverage planning, and PoE budget verification to ensure your infrastructure matches your requirements before purchase.

---

Enterprise Setup Under $5,000: Complete Infrastructure

This configuration delivers enterprise-grade networking for 10-50 person offices or luxury residential properties. RAID protection, 10G-ready infrastructure, and comprehensive security coverage define the professional standard.

Complete Equipment List

What You Get

RAID-protected gateway: The Dream Machine Pro Max's dual HDD bays with RAID 1 mirroring protect your UniFi Protect recordings and network configuration. When a drive fails, your cameras continue recording without interruption. The 5 Gbps IDS/IPS throughput handles security inspection at full speed even with multi-gigabit internet connections.

Etherlighting management: The Pro Max 24 PoE switch's visual LED identification eliminates guesswork during troubleshooting. Select a device in the UniFi mobile app, and the corresponding switch port illuminates. This feature alone saves hours during installations and troubleshooting.

10G-ready WiFi 7: Four U7 Pro XG access points with 10G uplinks cover 5,000-6,000 sq ft with excellent overlap. The fanless design operates silently in professional environments, while 10G uplinks ensure WiFi 7 performance isn't bottlenecked by switch infrastructure.

Comprehensive security: Six G6 Bullet cameras provide 4K coverage for perimeter security, entrances, and high-value areas. On-device AI detection (people, vehicles) eliminates false alerts from shadows and animals.

8TB RAID storage: Two 4TB drives in RAID 1 provide 4TB usable storage—approximately 30 days of retention for 6 cameras at 4K with moderate motion. When a drive fails, replace it without losing recordings.

Why This is the Professional Standard

RAID redundancy: Hardware failures happen over time. RAID 1 mirroring ensures business continuity when drives fail, allowing you to replace the failed drive without losing recordings. Single-drive setups require restoration from backups if the drive fails.

10G backbone: U7 Pro XG access points with 10G uplinks eliminate bottlenecks. When multiple clients transfer large files or stream 4K video simultaneously, the 10G infrastructure handles aggregate throughput without congestion.

Adequate PoE budget: The Pro Max 24 PoE's 400W PoE budget powers 4× U7 Pro XG access points (88W) + 6× G6 Bullet cameras (72W) with 240W headroom for expansion. No PoE budget constraints, no compromises.

Spectral scanning capability: While this build uses U7 Pro XG, upgrading to U7 Pro XGS ($299 each, +$400 total = $3,748) adds dedicated spectral scanning for real-time interference detection in challenging RF environments.

Key Components

Scalability Path

Phase 1 (current): Complete 10G-ready infrastructure with RAID protection Phase 2: Add Pro Max 48 PoE switch for additional port capacity Phase 3: Upgrade access points to U7 Pro XGS for spectral scanning Phase 4: Add UNVR Pro for expanded camera storage (50+ cameras) Phase 5: Deploy High Availability with second Dream Machine Pro Max

Alternative Configuration: Maximum Performance

Swap U7 Pro XG for U7 Pro XGS ($299 each) to add dedicated spectral scanning:

• 4× U7 Pro XGS = $1,196 (vs $796 for U7 Pro XG)
• Total with U7 Pro XGS: $3,748

When to choose U7 Pro XGS:

• Dense urban environments with heavy WiFi interference
• Multi-tenant buildings with numerous neighboring networks
• High-stakes deployments where maximum reliability matters
• Organizations requiring real-time RF monitoring

Planning a multi-site deployment or need RAID configuration assistance? Our professional installation services handle procurement, cabling, configuration, and staff training for enterprise-scale UniFi deployments throughout South Florida.

---

Supply Chain & Procurement Timeline (February 2026)

Current availability varies significantly across UniFi's product line. Based on our procurement experience in early 2026:

In Stock (Ships within 3-5 business days):

• Dream Router 7, Cloud Gateway Max, Dream Machine Pro
• Pro 8 PoE, Pro Max 24 PoE switches
• U7 Pro, U7 Pro XG access points
• G6 Bullet, G6 Turret cameras

Limited Availability (2-4 week lead time):

• Dream Machine Pro Max (high demand, periodic restocking)
• Pro Max 48 PoE (large deployments should order 4-6 weeks ahead)
• U7 Pro XGS (popular for high-density deployments)

Extended Lead Time (6-8 weeks):

• Enterprise Fortress Gateway (enterprise-tier product, often made-to-order)
• Pro XG 24 PoE (10G switching remains supply-constrained)

Procurement recommendation: For projects requiring 10+ access points or enterprise gateways, place orders 8-10 weeks before installation date. Supply constraints ease for standard Pro-tier equipment but persist for highest-performance models.

---

Beyond the Basics: Expanding Your Ecosystem

Once your core network infrastructure is operational, UniFi's ecosystem offers additional capabilities that integrate seamlessly with your existing deployment.

UniFi NAS: Centralized Storage

The UNAS Pro 4 delivers 4-bay network-attached storage with dual 10G SFP+ connectivity and NVMe caching. At $499, it provides license-free file storage, backup, and collaboration without recurring fees.

Best for: Businesses needing centralized file storage, Time Machine backups, or Hyper Backup integration. The 10G SFP+ ports enable high-speed access for video editing, CAD workflows, or large file transfers.

UniFi Talk: Integrated VoIP

UniFi Talk provides business phone service without per-user licensing. Phones connect via PoE, and the system integrates directly with your UniFi network infrastructure.

Best for: Businesses replacing traditional phone systems or adding VoIP capabilities. No monthly per-seat fees—pay once for hardware, own it forever.

UniFi Access: Door & Gate Control

UniFi Access adds physical security to your network infrastructure. Manage door locks, gate controllers, and visitor access from the same UniFi interface that manages your network and cameras.

Best for: Businesses requiring access control, visitor management, or after-hours security. Integrates with UniFi Protect for video verification of access events.

---

Common Questions & Pitfalls

These common questions and mistakes appear frequently in UniFi deployments. Understanding them before purchasing saves time and avoids costly replacements.

Do I Need a UniFi Gateway?

Yes—a gateway is required. It serves as the network controller, managing all UniFi devices from a single interface. A UniFi gateway (or Cloud Key) is necessary to adopt and manage access points, switches, and cameras.

Common mistake: Buying UniFi access points without a gateway, then discovering they require a controller for configuration.

Self-hosting note: Advanced users can self-host the UniFi Network Controller on a VM or Docker container, though this loses the integrated routing, security, and UniFi Protect camera support that hardware gateways provide.

Can I Mix WiFi 6 and WiFi 7 Access Points?

Yes, the UniFi controller manages mixed deployments seamlessly. Place WiFi 7 access points in high-traffic areas (conference rooms, open offices) while keeping WiFi 6 units for coverage extension. The controller handles client steering automatically.

Upgrade strategy: Replace access points incrementally rather than all at once. Start with high-density areas, then expand WiFi 7 coverage as budget allows.

What Internet Speed Do I Need?

UniFi gateways support internet connections from 100 Mbps to 10 Gbps. The gateway's IDS/IPS throughput should match or exceed your internet speed:

• 1 Gbps internet: Dream Router 7 (2.3 Gbps IDS/IPS) or higher
• 2 Gbps internet: Dream Machine Pro (3.5 Gbps IDS/IPS) or higher
• 5 Gbps internet: Dream Machine Pro Max (5 Gbps IDS/IPS) or higher

Important: IDS/IPS throughput differs from routing throughput. Always check IDS/IPS specs when security features matter.

PoE Planning Mistakes

PoE budget planning: Calculate total PoE requirements before selecting a switch. Six U7 Pro access points at 22W each = 132W minimum. A switch rated for 120W PoE budget would not provide sufficient power for all devices.

Wrong PoE standard: PoE+ (802.3at) delivers 25.5W per port. PoE++ (802.3bt) delivers 60W per port. Most UniFi access points require PoE+ minimum. Check device specifications before purchasing switches.

PoE headroom planning: Plan for 20-30% PoE headroom beyond calculated requirements. Devices draw maximum power during boot, and future expansion requires available budget.

Power Protection & UPS Sizing

Professional network deployments require uninterruptible power supply (UPS) protection to maintain connectivity during power outages and protect equipment from voltage fluctuations.

UPS sizing for common setups:

• Small office (Dream Router 7 + Pro 8 PoE + 2× U7 Pro): Total load ~150W. A 600VA/360W UPS provides 15-20 minutes runtime—sufficient for graceful shutdown or brief outages.
• Medium office (Dream Machine Pro Max + Pro Max 24 PoE + 4× APs): Total load ~400W. A 1500VA/900W UPS provides 20-30 minutes runtime for critical equipment.
• Enterprise (multiple switches at 720W PoE load): Consider rack-mount UPS solutions (2200VA+) or Ubiquiti's RPS (Redundant Power System) for mission-critical deployments.

Calculation method: Add gateway power consumption + switch PoE load + overhead (20%). Match or exceed this wattage when selecting UPS capacity. Battery runtime decreases as load increases—size appropriately for your required uptime.

Alternative: Ubiquiti RPS and Mission Critical gear provide redundant power for switches in environments where even brief outages are unacceptable. These solutions cost more than consumer UPS units but offer hot-swappable redundancy.

When to Hire Professional Installation

Consider professional installation when:

• Running new Cat6A cabling through walls or ceilings
• Deploying 10+ access points requiring coverage optimization
• Implementing VLANs for network segmentation
• Integrating with existing infrastructure (firewalls, servers, phone systems)
• Requiring High Availability or RAID configuration

Our UniFi installation services include site assessment, equipment procurement, professional cabling, configuration, and staff training.

For common installation challenges and solutions, see our UniFi Installation Challenges guide.

---

Decision Framework: Where to Start

Building a UniFi network follows a logical sequence. Start with the foundation, then expand based on requirements.

Step 1: Choose Your Gateway

Gateway selection: Choose based on office size, IDS/IPS requirements, and whether you need rackmount form factor:

• 1-10 people: Dream Router 7 ($279)
• 10-50 people: Dream Machine Pro ($379) or Cloud Gateway Max ($279)
• 50+ people: Dream Machine Pro Max ($599)

Step 2: Add a Switch

Match PoE budget to your access point count. Calculate total PoE requirements (access points + cameras + phones), then add 20-30% headroom:

• 2-3 access points: Pro 8 PoE ($349) with 120W budget
• 4-8 access points: Pro Max 24 PoE ($799) with 400W budget
• 8+ access points: Pro Max 48 PoE ($1,299) with 720W budget

Step 3: Deploy Access Points

Plan for one access point per 1,500 sq ft in typical office environments. Choose based on uplink infrastructure and client density:

• Standard offices: U7 Pro ($189) with 2.5 GbE uplinks
• 10G infrastructure: U7 Pro XG ($199) with 10G uplinks
• High-density: U7 Pro XGS ($299) with spectral scanning

Step 4: Add Cameras (Optional)

Calculate storage requirements based on camera count and retention needs. Six cameras at 4K require ~2TB for 30-day retention:

• Small deployments: Use gateway storage (Dream Router 7 microSD, Dream Machine Pro Max HDD)
• Large deployments: Add dedicated UNVR or UNVR Pro

Step 5: Expand as Needed

The modular design scales seamlessly:

• Add more access points for coverage expansion
• Deploy additional switches for port capacity
• Integrate NAS for centralized storage
• Add Talk for VoIP capabilities

Choose This Setup If...

Dream Router 7 + Pro 8 PoE + 2× U7 Pro ($1,006):

• Small office (1-10 people) or high-end home
• 2,000-3,000 sq ft coverage required
• Future-proofing for 10G and 6 GHz WiFi matters
• Budget allows professional-grade equipment

Dream Machine Pro Max + Pro Max 24 PoE + 4× U7 Pro XG ($3,588):

• Medium business (10-50 people) or luxury residential
• 5,000-6,000 sq ft coverage required
• RAID protection and HA support needed
• 10G infrastructure desired
• Comprehensive security with cameras

---

Summary: Equipment Selection Considerations

Organizations planning for growth benefit from starting with equipment that provides expansion capacity. Higher-tier products offer features like 6 GHz WiFi 7, 10G readiness, and adequate IDS/IPS throughput that support evolving network requirements.

Key capability differences:

6 GHz WiFi 7 provides cleaner spectrum with less interference compared to dual-band access points operating only on 2.4 GHz and 5 GHz. As more devices support 6 GHz (iPhone 15 and later, MacBook Pro 2023+), this spectrum becomes increasingly useful.

IDS/IPS throughput capacity affects network performance when security features are enabled. A gateway rated for 1.5 Gbps IDS/IPS may limit throughput on a 2 Gbps fiber connection when threat detection is active. Higher-capacity gateways provide more headroom.

10G networking capabilities support multi-gigabit fiber upgrades and local network performance. When ISPs offer 2 Gbps or 5 Gbps service, 10G-capable equipment accommodates these speeds without replacement.

Licensing model differs from traditional enterprise solutions. UniFi's core functionality—routing, switching, WiFi, and basic security—operates without recurring subscriptions. Optional CyberSecure adds advanced threat intelligence for $99/year.

Next Steps

Ready to build your UniFi network? Start with our complete setup examples, or contact our team for professional installation tailored to your specific requirements. We provide site assessment, equipment procurement, professional cabling, configuration, and staff training throughout South Florida.

Need help planning? Our UniFi Network Services include comprehensive network design, ensuring your infrastructure scales with your business.

---

Related Resources

Gateway Deep Dives

• UniFi Gateway Comparison Guide 2026 — Complete comparison of all UniFi gateways with upgrade thresholds and technical specifications.
• Dream Router 7 Review — Real-world deployment insights from a branch office installation.
• Dream Machine Pro Max Review — In-depth analysis of the flagship rackmount gateway.

Access Point Selection

• U7 Lite vs U7 Pro Comparison — Detailed comparison explaining why the U7 Pro is worth the premium.
• U7 Pro XG WiFi 7 Review — Performance testing and deployment scenarios for the 10G access point.
• Best WiFi 7 Access Points for Small Business — Comprehensive AP selection guide by office size and uplink infrastructure.

Network Design & Implementation

• UniFi Business Network Guide 2026 — Technical deep-dive on features, security, and NIST framework alignment.
• UniFi Office Network Blueprint — Step-by-step implementation guide with VLAN configuration and installation steps.
• UniFi Network Design Guide — Professional network architecture planning for modern office infrastructure.
• UniFi Installation Challenges & Solutions — Common problems and solutions from real-world deployments.

Security & Cameras

• UniFi Protect CCTV Guide — Complete system design, camera placement, and configuration.
• UniFi Protect Storage Planning Guide — Calculate retention and storage requirements for camera deployments.
• Complete UniFi Protect System Under $2,000 — Budget-friendly professional security with AI detection.

Switching & Infrastructure

• Pro Max Etherlighting Guide — Master the visual port management features of Pro Max switches.
• UniFi Fiber Cable & SFP Selection Guide — Detailed guidance on cables, SFP modules, and multi-gigabit cabling.
• Power over Ethernet Guide — PoE planning, budget calculations, and standards explained.

Ecosystem Expansion

• UniFi NAS Buyer's Guide 2026 — Complete comparison of UNAS 2, Pro 4, Pro, and Pro 8 models.
• UniFi Talk VoIP — Integrated business phone system without per-user licensing.

Professional Services

• UniFi Network Services — Professional installation, configuration, and support throughout South Florida.
• Network Cabling Services — Cat6A installation for 10G-ready infrastructure.