UniFi Dream Machine Pro (UDM-Pro)

one of the crosstalk solutions my name is Chris and I know a lot of you out there have been waiting for this video I've been waiting to do it as well I have in front of me the UDM Pro and this is probably one of the most highly anticipated devices from ubiquity that I've seen in a long time this just came out of early access about three days ago and I just received mine today so what is the UDM Pro let's talk about that while I get this thing out of the box so the UDM Pro is essentially an all-in-one 1u rackmount appliance that combines a unified controller and eight ports which basically has the USG and two 10 gigabit sfp+ ports it also has a hard drive slot so that you can run unify protect on this as well and it has a strong enough processor that it is supposedly capable of doing like three gigabits or so with IPS IDs turned on which has typically been the most sort of CPU intensive process in the unify sort of set of software you know for instance with the USG it's typically recommended to have IPs and IDs that's intrusion protection intrusion detection turned off in order to make get full bandwidth out of the device because it's just so hard hitting on the CPU okay so inside the box here we've got a littler box up top let's pull that out and set it aside and then let's get the dream machine Pro out of here it's actually a little bit heavier than I thought it would be now the MSRP on this device is 300 and look at these like sort of custom custom styrofoam bumpers that it has the MSRP on this device is $379 however there is a 8 terabyte hard drive option which I'm not sure if one that I received from ubiquity here has the 8 terabyte drive or not by the way ubiquity did send this device to me for free however my opinions as always are my own alright let's get this thing unwrapped here we can see the two sfp+ ports sticking out in the front here whoo beautiful wow there's a lot to talk about alright I'm gonna first see there's a little pull tab here where the hard drive goes I'm gonna sort of pull on that and it just got disconnected there we go okay so I do not have the 8 terabyte hard drive included with my UDN Pro so I will have to find a hard drive to put in here I'm pretty sure I have a spare somewhere all right so let's hold off on this for one second let's check out what came in this extra little box just to get that out of the way all right inside the extra little box we have hardware kit so there's all your screws and such a power cable rackmount ears and the UDM pro looks like some sort of little QuickStart guide or something or it has the Quick Start Guide QR code right here the QR code was also on the inside of the box as we've been seeing with the ubiquity products lately oh really nice so here is the hardware kit I'll try to get a close-up of this as well it has some rubberized feet as well as all of the screws that you need as well as some rack mounting the rack mounting stuff as well well I will save all of this but yeah it does have rubber feet so if you want to desk from out this thing or just have it on the on your desktop you can do that as well beautiful ok so I'm gonna bring the camera in a little bit closer so that we can take a closer look at the front and back of this udm Pro ok here we go so let's talk about the components right across the front so starting over here this is the 1.8 inch touchscreen it's the same touchscreen that we have on the the new switch line of products the usw switches and the pro switches pull off a little screen protector here there we go all right so hard drive Bay next here it clicks so you breasty basically push it in and then it pops open you can pull it out now this will fit both a 2.5 inch and a 3.5 inch hard drive that's pretty nice put that back in that of course is for unify protect footage then we have 8 ports of gigabit ethernet now one of the complaints that I saw online a lot of people were complaining as they do that these are not power over ethernet ports and I imagine that that is how they keep the price low again this thing is 379 without the hard drive so to keep that price low they didn't put any POA in they did have her put 2 10 gigabit SFP+ ports so over here we have one Gigabit LAN port so rj45 LAN port and then we have 2 SFP+ ports for 10 gig fiber one of them is a when sfp+ and one of them is a land sfp+ and again I don't know how that looks and unify but these are specifically separated out as when and land SFP+ alright let's take a look at the back of this thing so this is interesting this device functions with the model it's the unify smart power RPS model u.s. PRPs it's essentially a redundant power supply that somehow plugs into here now that product says coming soon so I don't know if it's early access or what I'm gonna have to look that up but it does have some level of power redundancy built in I think essentially what the RPS is is a you know basically a backup battery or backup power that can plug into a whole bunch of different devices so that rather than having an actual dual power supply on the back of this box you have a standard molex power connector over here and then you can plug this into the UPA the USP - RPS device and this can maintain the power if your power goes out over here for some reason that's how I understand it if if I'll do a little bit of research on that and if I find out that I'm wrong I will update the video there's also a light and LED in the back here for whether or not the RPS is actually functioning all right so before we got too far into the setup I did want to pop the top of this UDM Pro just to see what it looks like you can see here that I have put a hard drive into the hard drive tray this is actually the original hard drive that came with my uck gen to the cloud key gen 2 plus and so I just I had replaced that one with a 5 terabyte drive I took out the stock drive from there and put it in here because I just didn't have a three and a half inch drive but that one should work just fine hopefully here we can see the display screen is telling me that we are ready to set this thing up which we will get to in just a second but take a look at the inside of this udm pro it's pretty interesting so a couple things you notice right off the bat number one is there's a lot of space over here and I posted this to Twitter and that's the first thing that people are complaining about is like oh my gosh look how much space is you know left in this 1u chassis but then again like you know you can't really have it both ways if they didn't make this a 1u form factor people would have complained about it not being rack mountable but now that it is a 1u form factor people are complaining there's too much space in the box but you know one thing that they might do eventually notice that there's just enough space for a second hard drive tray so maybe they'll come out with another version that has dual hard drives and then they basically don't really have to readjust this design at all in order to do like you know a RAID one setup on the hard drives so maybe that's an option but there's a couple other cool things in here the one thing I was really impressed with is this custom airflow tray so they've got two fans in here they've got a fan right here right and a fan right here in front of the SFP+ ports I'm assuming that's on top of the CPU and then we have another fan back here that's sort of in front of the hard drives and I'm not sure if that's for hard drive cooling or what but it's kind of difficult to see but the the this this custom sort of krei is like molded plastic that diverts all of the air flow across the vents that are on the top of the back of the chassis so if you here's the case right so see these holes right here across the top that's where the air flow comes out is right out these holes and when it's so there's not really like big fan holes on the side of this thing they kind of made it a more streamlined and so the air collects here and then is lifted up this ramp over to here and then the air collects here lifted up this ramp here and then sort of out pushes out the back across the entire back of the chassis which is kind of neat another thing that's cool is if you look here real closely you can see that that the ramp the plastic ramp for the air flow also has holes cut into it for these like for capacitors or whatever these things are and I'm sure that just provides some extra cooling I'm not sure if it's for cooling or if they actually just needed a little bit of extra space for those things to stick up out of the a little motherboard the main board down there because they do stick up a little bit higher than the the ramp here but that's kind of a cool design they've actually got that that tiled in pretty well all right but enough about the inside of this thing let's actually go ahead and set it up okay so I'm gonna be setting this dream machine Pro up through the web GUI I was originally gonna do it on my phone and in fact I don't if you can see this but it does say on my phone new dream machine found in unify so I could set it up with the phone but it's actually easier for video purposes to do it in a browser so what I have here is the initial step when you're setting this thing up it already timed out so I'm gonna hit try again but basically I just navigated to one on 81-68 1.1 that's the default LAN IP address of the UDM pro and so I have my laptop configured in 192 dot 168 1 dot X I think I made it like 1.99 or something and then we are now going to plug in our win cable so I'm gonna say try again and it says connecting to internet testing for internet connection so let's plug this in now my internet connection is going to be a static IP address so I might have to go into advanced Internet Options in fact let me click on that and we're gonna set it to static now I need to remember my IP address okay I have that information you can also choose when or when to SFP which will be the top sfp+ port right here so we're just gonna say when and then we're gonna give it our IP address gateway subnet mask and some DNS server information in most cases or I should say most people are probably going to have a dynamically assigned LAN IP address in which case you would plug into the wind port and it would automatically detect your IP settings if you do have static though this is the process that you need to go through all right so we're gonna say apply there we go now it tested the internet connection successfully and we're gonna say next name your unified dream machine Pro UDM Pro we'll call it something more clever than that alright we'll call it Dreamweaver and there we go agree to the terms next sign into UI com alright so now we're gonna enter in our single sign-on our ubiquity single sign and information and does look like you can skip this so you have to have internet connectivity and you have to have a ubiquity single sign in it looks like to set this thing up so we're gonna say next up and it's asking me for my 2fa let's go ahead and pop that in update schedule keeping your network up-to-date provides you with the latest security performance and features so how often do we want to check for updates daily at we'll say 3 a.m. 2 a.m. alright next step 4 of 7 Auto optimize will go ahead and say yes and then send diagnostics and performance information this is not going to be in production I typically don't turn these things on anyway so we'll just say next step 5 of 7 review review your configuration for your undefined looks like you need to fix that ok and we'll just say next starting speed tests ooh that's not very fast download I certainly get more than 22 megabits per second I got a 400 megabit connection I think what I'll do is I'll eventually move this UTM over to my other desk over here closer to the the firewall the router and all that sort of stuff all right speed tests Wow no that is not great download and upload results I'm supposed to get 400 by 20 not 20 by 20 all right so let's change that we'll say 400 by 20 adjust speeds to what your ISP has promised you 400 by 20 and we'll say finish setting up network configuring your devices and network settings this may take several minutes all right there we go Dreamweaver network version 5 12.50 9 that's new all right so we've got settings or users let's take a look at users first so it's just my account is the only user in here I'm an admin and there's no groups or there's a you B&T group ok all right Network here we go alright so security and analytics and diagnostics and usage data to ubiquity let's not do that and then we just have unified right so we're immediately into unify and now I'm getting there was an error saving the analytics agreement ok let's go back to UTM Pro local portal because I want to look at settings here all right so dream machine Pro Chris Sherwood firmware we can see the CPU the CPU load CPU temperature memory storage capacity storage to is not mounted that would be my drive that I plugged in might not get that drive till I reboot because I don't think it's a hot swappable drive applications we've got yeah so it says look for it protect it says hard drive required to start this app and then we have Network which is unify protect which is protect access that's interesting we'll have to install that at some point and then voice or unify talk called beta access is interesting I don't think I know that they're doing some access control stuff in early access but I have not touched any of the access control devices yet and then if we click on advanced we can enable SSH to the device we can rename it and we can change our settings such as the automatic firmware updates you know what I'm not seeing in here is a way to gracefully shut this thing down all right well no way to shut this thing down gracefully so we're just gonna have to pull the power plug on it god I hate doing that though I'll actually pull the power plug out of my power strip down here instead ouch yeah alright I just turned it off so I'm gonna put the case back on I'm gonna move it over to the other side of my office over here and then we're gonna reconnect to it and and and login to unify see what we can see I've now moved the UDM Pro over here to the corner of my desk and I got it plugged back in that Internet problem that I was seeing where I was only getting 20 megabits down 20 megabits up is some sort of charter spectrum issue I tried through the UDM I was still getting you know maybe maximum like 80 megabits per second I took my computer out I plugged it directly into the modem and gave myself a static LAN IP address on my computer and I was still getting those slow speeds so it's just something I got a call charter about I will deal with that on Monday as long as it's up and you know kind of working I'm okay with it but I'm supposed to be getting 400 megabits and 20 megabits is not helping me to test the capabilities of this UTM but all of that aside let's take a look we are back in the interface here and I'm gonna install some of the ancillary applications that come along with the UDM so if I click on settings the first thing we see here is that my second hard drive is now recognized so it's just a one terabyte hard drive but it's good enough for our testing and just plugging it in and rebooting the UDM was enough to recognize that hard drive now we're gonna click on applications and we now have the ability to install protect since it now detects that there's a hard drive protect is allowed to be installed so we're gonna go ahead and install protect and since we're testing this thing out we're also going to install access and talk we're just gonna install everything and I will come back when that stuff has been installed now we have all of the applications installed here's unify unify protect access and talk so I really don't know anything about access or talk but let's go ahead and click on it and see what we get all right step one a for unify access set up what's your building name let's try this home office no elements found now is a good time to connect elements to your network for configuration well I don't have any let's go ahead and skip set up access schedule ok 9:00 to 5:00 it looks like something like that Monday through Friday review configuration alright finish preparing unify access ok oh wow look at this so this must be events down the left-hand side here we've got total activities add users add visitors add NFC cards and so we've got dashboard users Wow locations visitors all visitors visitor log upcoming visitors elements must be the the various you know door control you know access control stuff and badge scanners whatnot policies alright so this allows you to sort of lock down probably which users can access which doors and whatnot and then events wow that's crazy so this is this is all new to me like I said I I've worked with access control systems before but certainly not unify access and so it'll be interesting to see what comes of this I don't even recall if there's any access stuff in the early access store I'm gonna have to go check that out but hopefully I will get my hands on some of this equipment at some point I can do a full review on unify access now with the UDM you have the ability to switch between applications up here in the upper right hand corner so I can click this and I can switch for instance over to unify talk let's see thanks for using and if I talked ubiquity zEnterprise VoIP solution this process will guide you through your setup agree to the terms let's do well just do the standard setup since I don't owe 500 user not whitelisted something went wrong try again okay it will pop an advanced setup nope 500 error 500 user not whitelisted alright so I'm not gonna worry about that for now there's some sort of error this also is in beta and I'm not really supposed to show beta stuff on on video anyway so we'll skip over talk for now I will revisit talk when it's a little bit more mature and hopefully out of beta at some point all right so let's pop back over to protect so protect should be what we're used to you have no cameras add cameras alright um alright so I've got a g4 pro camera here let's go ahead and pop this on oh I'm gonna need a switch aren't I yeah I'm gonna have to have a switch alright I'm gonna have to go hook up my 24 port p OE switch so that I can get this camera going so let me go do that next I'm gonna grab a 24 port POS which I'm gonna plug that in get that going in unify and then I'll be able to plug this camera in and we can take a look at protect which we shouldn't see anything new and protect but I just like to get a camera running on it anyways and then we will pick the video back up once I've got all that done alright I am back and I have done a quick and dirty test lab setup I have a 24 ports which is the US 24 to 51 I also have a nano HD access point and then I also have hooked up a g4 pro camera to protect so that is all working fine and let's take a quick look at protect here there we can see my g4 pro if I look at my live view of course right now it's just pointing at my ceiling but you can see that it is working fine now one thing that I realized I could not find information about is how many cameras does the UTM pro support and I think I know the answer to that the answer is going to be well it depends right it has a stronger process sir than the cloud key Gentoo plus which supports up to 20 cameras so my guess would be that ubiquity would specifically say it depends in terms of the number of cameras the UDM Pro supports because it depends on whether you're using unify talk and how heavily you're using it are you using unify access and how heavily are you using it are you using standard unify the unified Network app and how heavily are you using it right so those things all take away cpu from protect so if you had just unify with a few devices and protect running you could have a ton more cameras than if you had a lot of devices and unify a lot of devices in access that's running all the time people are coming in and out of your doors and you're running your whole phone system off this thing too right so that's what I mean by it depends I don't have any hard and fast data on like a specific upper number of cameras but what I would assume is that it's at least gonna be as many as they say the cloud key gen 2 plus can support which is 20 right so I would guess that 20 is probably the the maximum minimum number of cameras if that makes any sense anyways alright so I wanted to do one other thing before I really unload my thoughts on the UDM Pro I've had some time to play with this thing there's a lot to unpack here and there's some things that I think are gonna have to wait for other videos as well like for instance the whole threat management is more about unify so it's included in the UTM Pro but it's more of a unify feature rather than something specific to the UTM Pro so I'm going to talk about the threat management the IP SIDS stuff but first I want to talk about the touch screen so let's take the camera let's focus in on the touch screen so that I can show you the capabilities of this little 1.3 inch touch screen on the UTM Pro okay so here's the UTM pro touch screen we can see that we have Network protect access is greyed out since I don't have any access devices talk is grayed out since I don't have any unified talk devices and then we have settings and about so let's go through these real quick under network we can see our throughput our Wi-Fi experience a number of clients wired Wireless and guest clients then we have our unified network version 512 dot 59 swipe up to get back to the main menu let me come over here to unify protect let's look at those statistics again motion events I'm not sure how useful this is but there you can see motion events for your protect cameras we've got the number of cameras online and offline and our unified protect version swipe back up access we can't do anything with it's grayed out since we don't have any of those devices same with talk let's take a look at settings here this is settings for this display screen for the most part brightness of the display screen background color of the display screen and then we have our fan speed which we can actually adjust the fan speed right now it's set to auto and we have it at 49% with about 2800 RPMs it looks like back to brightness and then finally we have about which is going to show us our system CPU and memory utilization as well as a graph of CPU and memory utilization over time we have our Y an IP and our LAN IP temperature 38 degrees Celsius 100 agrees Fahrenheit uptime two days 22 minutes and then the border vision MAC address I'm not sure what MAC address that is since there's so many interfaces on here maybe it's the I'm guessing it's the when MAC address I don't know and then finally we have UTM Pro software version so flip back up we go back to the main screen yep so that's it for the touchscreen so there is just so much to unpack with this thing there's a lot to discuss and it's tough to I tried to organize a lot of my thoughts about the UDM Pro and I'm just gonna sort of barrel through a lot of these different topics that I'm sure will come up and have already come up as I've been discussing the UTM Pro on Twitter and whatnot so the first thing that I want to discuss are some of the differences when you get a UTM either the dream machine the standard one or the dream machine Pro that I'm viewing here one of the differences from standard unify and I'm talking about the unified network controller first of all there is no multi-site so these are designed to be single sight devices right so I have a unified controller in the cloud it's hosted on digital ocean and I've got a ton of different sites for different customers that I service in that digital ocean controller it's like a single pane of glass you know for all of my customers and I can easily switch between them you can connect the UDM Pro out to unify UI comm so that you can administer it from wherever and you can administer a ton of different you DMS from that online central interface but within unify itself with the dream machines you only get one site so you can't add multiple sites with the unify in the dream machine there also doesn't appear to be a way to have a local unified login you have to use your ubiquity single sign-on login that being said I don't know if you can even log in to the UDM or the UDM Pro if you don't have your internet connection working so for me for instance I have two-factor authentication enabled and I should actually try this is disconnect the UDM from the when and try to log in and see if I can even log in in fact you know what I'm gonna try that right now alright so you can see here that I have disconnected from my when I am completely down and request timed out to the Internet let's logout and then let's try to log back in so I was able to log back in that actually did work so that's a good thing it did think for a while but then I was able to log in and the other interesting thing and I don't know if this is because I already had a session authenticated it did not ask me for my two-factor authentication code when I did that so let me plug the internet back in I'm gonna log back out and log back in again and then see if it asks for 2fa again okay I have internet access once again let's close the down and sign out and sign back in this time it asked for two of a so that's actually pretty cool I like that it was able to do that it knew that I was offline it's thought about it for a while and then it let me log in with my ubiquity single sign-on without two-factor authentication even though I was because I was not connected to the Internet now that of course becomes a security problem right because now that we know that or if if a bad actor knew that if they had the login to your unify controller but they did not have your two-factor authentication access you are sort of second line of defense if they had physical access to the device they could unplug your network connection and then login but it seems to me that that's a cool function that you're able to login locally without 2fa but also possibly a security risk but then again a lot of people don't have to factor authentication enabled for unify anyways so again keep your passwords secure no matter what another difference between this dream machine Pro and a standard unify controller or even just the standard u.s. G or u.s. G Pro is that you cannot connect these to a hosted unified controller so let's say you wanted all of the stuff that comes in the UDM Pro but you didn't want to use the onboard unifying the troller you want to have this thing connect out to a hosted controller you can't do that now again that may be a disadvantage to some people but I think it just really it really just comes down to you gotta know what you're buying right so if the having the ability to connect out to a hosted controller is important to you then the dream machine is not for you but if that's something that you're like so what who cares if you can't connect to a hosted controller it has unify on it why would you need to then it's totally fine now if I were installing a dream machine if I were purposely purchasing a dream machine for my own home or my small business I would use the onboard unified controller anyways I don't see a need since it has you five built-in I don't see a need to connect it out to a hosted controller but I do want to be complete in the information that I am relaying to my youtube audience okay so this is the same across all of the sort of unify line of firewalls I double-checked the dream machine cannot have multiple LAN IP addresses on them on the on a single interface right so if you have a block of say five IP addresses five static IP addresses you could only use one with the dream machine Pro or the dream machine or any USG for that matter I believe the USG and USG Pro if you're daring you can go in and modify the config dot JSON file to add multiple IP addresses to the interface I'm pretty sure you can do that I never mess with JSON so and I always forget what you can and can't do with JSON files by the way don't mess with JSON files if there's something you need to do in JSON that you can't do in unify you probably don't want the USG but that brings up an interesting point if you are able to modify the JSON file to add multiple LAN IP addresses to the LAN interface of a USG or USG Pro you cannot do that with the dream machines because one difference that the dream machine has different from the u.s. cheese is that there is no more config dot JSON file there is no JSON file editing in either the dream machine or the dream machine Pro and this has been confirmed by ubiquity so here we can see an article posted three months ago UTM Pro confirm no config gateway JSON allowed slash possible someone says yes you're correct the UDM and UTM pro are not running edge OS and thus the config gateway JSON doesn't apply let's talk about noise level so I am used to having a one of the newer version sort of fanless switches this is the u.s. w24 it's there's no it's whisper quiet there's no fan in this switch whatsoever prior to that I had the u.s. 24 250 watt which had noisy fans but I replaced those fan with Noctua fans and then it was whisper-quiet also the UDM pro is not whisper-quiet ok I notice I can hear it all day long and I took a measurement and it's running between about 46 to 48 DB just when it's idling right so in the fans as we saw when I was going through the touch screen the fans are running at about 50 percent there are two fans inside the box could you potentially replace those fans with quieter fans such as the Noctua fan replacement I did on the US 24 250 what probably I have not tried that I'm not going to try that and if you're in a quiet office environment like I am I'm in my home office and I have it sitting right next to me I hear them all day but if you're gonna put this udm Pro in you know a network closet or if it's in a network rack in a data center something like that yo net you're never gonna notice right 48 46 to 48 DB is much quieter than most like fan powered switches and servers out there if you put this next to any like 1u server like a dell server or something this is going to be significantly quieter than that Dell server so while it does have some fan noise it's really not that big a deal unless you're used to having no noise whatsoever like if you have this on your nightstand next to your bed where you're sleeping you're gonna notice it right but if it's sitting next to a bunch of other servers it's not gonna make any difference to you let's talk for a moment about hard drive compatibility the hard drive that I put into the UDM Pro was I believe it's a Toshiba 2.5 inch one terabyte drive that came with my cloud key gen 2 plus that one works perfectly fine the UDM Pro recognized it it mounted perfectly fine it plugs in perfectly fine however not all hard drives will work in the UDM pro now ubiquity has a hard drive compatibility article and you can see the recommended hard drives here in the 8 terabyte flavor right you can go up to this 14 terabyte see gates but I'm only going to talk about eight terabyte because that's the one that you can additionally buy from ubiquity they have the Seagate Skyhawk eight terabyte 7200 rpm drive and they have the Western Digital purple 8 terabyte 7200 rpm drive so the Western Digital purple has a 5400 rpm and a 7200 rpm now this is actually pretty interesting earlier at the beginning of this video I said that you can buy the dream machine without a hard drive or you can buy the dream machine with the hard drive pre-installed from ubiquity and ubiquity doesn't tell you what kind of hard drive they install if we look at the pricing page here this has been updated now because they must have gotten more in stock they didn't have a price on this earlier now it says hard drive eight terabyte it's $190 option to add a 7200 RPM 8 terabyte surveillance class drive the only surveillance class drives that I'm aware of on this hardware compatibility list specific surveillance drives are this Western Digital 8 terabyte 7200 rpm and the Seagate Skyhawk 8 terabyte 7200 rpm I'm not sure if the drive that ubiquity installs is one of these models or not they don't specifically say what the model is but both of these models if you look on Amazon are about two hundred and thirty-three dollars or the Seagate Skyhawk is two hundred and thirty-three dollars let's see what the purple is the purple is 223 okay so two hundred and twenty three dollars for the 7200 rpm purple drive eight terabyte purple drive and 233 dollars for the 7200 rpm Seagate drive the surveillance drive so the one that they're putting in is $190 so if you are interested in having an 8 terabytes or violent surveillance drive in the UDM Pro it's a good idea just to have Ubiquiti factory install it for you because you're actually gonna save some money versus the Western Digital or the Seagate Skyhawk so yeah a little bit of interesting information there don't know if maybe it is actually one of those drives that I mentioned and they just buy so many of them that they get them at a discount and they're just tossing them in at their cost or something like that I really don't know but if you guys know which eight terabyte hard drive what's the model of hard drive that actually comes in the UDM Pro put that down in the comments below because I want to know I'd be curious to see what drive they're actually including with this device so now let's take a look at the datasheet because I want to cover a couple of things here this is the PDF data sheet for the UDM pro and there are some features that are listed on this datasheet where some of the features are specific to the UDM pro and some of the features are just unify features right they're features that you get with any unify installation so it's interesting to sort of pick apart which of these features in the datasheet are specific to the dream machine and which are specific just to unify and so I wanted to talk about the redundancy section here so this is on the second page of the datasheet and it says the UTM Pro supports multiple redundancy options to ensure your network remains operational dual win with failover is the first one that they mentioned so supports dual internet / ISP connections with failover if the primary Whang connection drops it will automatically switch to other Wang connection I have tested this if you look here I have a whene rj45 plug plugged into the wind port the sort of when one if you will it's just called way and then when to so my LAN port is an actual LAN IP address and then this fiber cable right here is plugged into the 10 gig SFP connected over to my us W 24 switch so basically my van 2 is just pulling a LAN IP address from my actual regular network so I am simulating a duel when failover and it does actually work so let's go ahead and simulate that now so we can see here that I am pinging out to the Internet if I say what is my IP the IP address that I'm getting I'm obviously not going to show you guys my way IP address but my wine IP is showing the one that I have specifically assigned to the rj45 interface of the UDM Pro now I am going to unplug that cable now and watch the pings here all right so I disconnected my win and now we're gonna get some request times out and then I should start getting replies once again there we go so it took about ten seconds and after about ten seconds I started getting replies again so the LAN has now failed over and if i refresh what is my IP comm I am now getting the LAN IP address for my edge router because I am now the the secondary when the fiber SFP when in the UDM Pro is just going into my standard LAN network which means it's going out my standard LAN LAN IP address so that's cool it's great that it fails over but one thing that you have to keep in mind is that with unify there's automatic failover to a secondary when there is no when load balancing okay so you cannot utilize two LAN connections simultaneously which again I just want to give you guys all of the information maybe that's important to you maybe it's only important to you that you have land failover in the event that your primary internet connection goes out now what happens when I plug my primary internet connection back in all right so I've plugged my primary internet connection back in and I'm gonna wait about the same amount of time let's wait you know 10 to 15 seconds it looks like I got one request timed out and then we are back to pinging again that should have been the USG failing back to my primary now that it has detected that it's back up so let's see what is my IP address comm and sure enough I am now back on my primary when IP address so that's pretty cool so not only is it automatic failover it's also a pretty quick automatic fail back when your internet resumes looking at this data sheet again the second redundancy says LTE failover redundancy supports the unify LTE device for automatic failover to the U LTE cellular network now I don't have one of these devices to test with but this is what they're talking about the you - LTE - u.s. device and this is an LTE failover but this is not a dream machine thing this is a unified thing so if you have the unify LTE you can use that with any unify installation it's not good well I think you have to probably have the USG but regardless it's a device that detects when the Internet's down and fails over to LTE as a secondary way in connection and then you know ubiquity charges you 15 bucks a month for the first 1 gigabyte of throughput or bandwidth and then 10 dollars per gigabyte after the first gigabyte and that's done on the 80 AT&T LTE network so yeah that's a unify thing though so this is in the datasheet for the dream machine but it's not a dream machine thing it's just a unified thing then we have the power supply redundancy and failover and it says the UDM pro supports our psu failover system so this is a kind of a dream machine thing because not all devices have that unify us PRPs interface on the back in fact this is the first device that I've seen that actually does have that interface I think the other ones that do have it are the pro line of switches let me look that up so here's the datasheet for the u.s. pro 24 and yes so the u.s. pro before does work with the u.s. PRPs unified pro POS which supports an external DC input interface the proprietary u.s. PRPs interface as a redundant power feature you can use the UPS rps with their pro line of equipment including the UDM pro again not it is a UTM pro thing but it's sort of it's sort of the pro line of ubiquity year thing it's not necessarily specific to the UTM Pro though it does have that capability that sort of proprietary interface that allows it to connect to that UPS RPS or us PRPs whatever it's called which is not out yet right so that's something that they haven't even released out of early access yet scrolling down through the datasheet for the dream machine Pro we also see some some stuff about the threat management which again is not necessarily specific to the UTM Pro although there are some aspects of the threat management or sort of the threat management suite of features within unified that are specific to the UTM so for instance the DNS filtering aspect is only a dream machine thing so but let's take a look at threat management now I'm not gonna go I'm not gonna go too deep into the threat management because it's it almost warrants its own separate video right so the threat management stuff and unify is relatively new but let's go through it a little bit here so I'm an unify and if you click on this threat management sort of the shield icon here this is what I'm talking about so within threat management you have the ability to block certain countries so like for instance I have Russia blocked right I clicked on Russia it blocked Russia if I want to block you know say India I can click on India and also block India like so so that allows you to do geoip filtering very easily and block out threats from specific countries we can see here that as I've had this running the threats that have come into my device are 52 total threats they're medium threats and by the way I have IPS cranked at the maximum level okay I wanted to do some testing on the intrusion prevention and so I have it cranked all the way up I will show you that in just a second but we can see here that I have the top threats by geography so Finland is hitting me really hard right now for some reason thanks a lot Finland followed by Denmark I thought I had friends in Denmark I don't know why you're trying to hack me and then the Czech Republic and then the top threats we have our spam house compromised and Cir me in this same threat management interface we can see our traffic log so this is the different attacks where they are coming in from and where they are trying to hit endpoint scans are threats that are coming from within the land so basically like your client endpoints if anyone within the land is doing anything fishy it should show up in the endpoint scans and then we've got the honeypot which I don't really understand ubiquitous implementation of this honeypot again the threat management stuff really deserves its own video and I think if I do a separate video on just threat management I will dig a lot more into these features but let's take a look at the threat management settings in unify so we go settings internet security and then here we have threat management and you can see here that I have the threat management capped at level 5 maximum threat detection settings the reason that I did that is because I wanted to test throughput ubiquity says that the throughput it doesn't actually have a specific throughput for the dream machine Pro but they do have throughput for IDs and IPS on the USG it supposedly caps you down to 85 megabits per second if you have intrusion prevention turn on in the USG 250 megabits per second for intrusion prevention on the USG Pro and then 1 gigabit per second for intrusion detection on the u.s. gxg enabling smart Q's or dpi on top of IPS will also incur a further throughput penalty so if you have smart Q's on if you have dpi on if you have intrusion prevention on your just really like limiting the amount of total bandwidth for USG devices however unified dream machine throughput is 850 megabits per second that's the dream machine okay this one the r2 dream - right this is again I would expect that the dream machine Pro which has a better CPU then this guy has a higher throughput than 850 megabits per second when intrusion prevention dpi smart queues etc are turned on but just to prove a point I have intrusion pert intrusion prevention set at the maximum level I also have dpi on so dpi there we go dpi is turned on and I don't remember I don't think I have smart Q's turned on but I also am I just I don't have a lot of devices basically just my computer and a couple of pieces of network equipment are the only thing on this network at the moment so I don't read I don't think I have smart Q's on but let's take go back to threat management here and I just want to run a speed test to show you guys that I'm at least getting full throughput on my four hundred by twenty charter spectrum cable connection with dpi and threat management turned on and enabled alright so here goes the speed test and there we go so we can see that I was able to get 454 by 22 with all of that stuff enabled so it doesn't seem that there's a bottleneck for the intrusion prevention with this device at least not for the speed of internet that I have if you have a gigabit or greater connection and you have AUD empro send me your speed test results because I want to see if there is some sort of upper limit you know 850 megabits or higher for a threat management and everything just maxed out on the UDM Pro I don't think there should be but also it might depend on for instance if you've got 30 cameras hooked up to it and 10 VoIP phones and a full access control system that's all going to be hammering on the CPU so the amount of bandwidth that is sort of hampered by the threat management might vary on the UDM Pro based on what you have or what else you're utilizing in the UDM Pro again I'd love to hear about your experiences with that put that down in the comments below so we also have geoip filtering I have that enabled that's where you get the map and you can click and you can block out certain countries DNS filters apply DNS filters to your network and block malicious phishing adult sites on malicious phishing and adult sites on your network so DNS filtering again this is an alpha feature it says alpha so I don't want to talk about it too much but you can add filters and you have security block malicious domains block just adult and pornographic stuff or set your network up as a quote-unquote family network which says blocks VPNs explicit pornographic and malicious domains search engines and YouTube are both set to safe mode ok so I think that this DNS filtering it's an alpha it has a long way to go there needs to be a lot more customization of the DNS filter before I think it's really super usable but I'm glad to see that they're starting to implement this kind of stuff I think that's great for sort of an overall or all-inclusive solution with the dream machine and dream machine Pro deep packet inspection we already talked about I have that turned on network scanners so here we have Auto scans endpoints connected to your network to identify potential security threats and vulnerabilities and then we have apply honeypot to any of your networks to detect malware malware worms and other types of malicious traffic trying to scan your network for vulnerabilities honeypot alerts can also be found on the threat management dashboard so I don't have either these turned on let me go ahead and pop both those on and we're gonna apply those changes finally if we click on advanced we can say restrict access to malicious IP addresses which prevents clients with IP addresses known to be malicious from accessing your networks and then we can also turn on restrict access to tor or to the Tor network you can also now whitelist specific IP addresses if you want a whitelist you know if that you wanted to come through filters clean without being sort of you know caught up in the IPS and malware filtering all that sort of stuff again though that's all for a separate video the threat management is cool like I said I'm glad to see that it's coming a long way but yeah I'm still right now gonna be using my piehole DNS as my sort of threat management with with my own network but that's also because I run an edge router and not the not the dream machine though I was thinking about it and tell me what you guys would think about this cuz I do like this dream machine Pro a lot I was thinking of maybe doing a separate video where I talk about how I migrated from my edge router and cloud key Network completely over to the dream machine and just see like what that process is and then run on the dream machine as my own production network with my IOT devices and my you know cell phones and tablets that we have in my household and just see the experience of owning and running a dream machine for a certain period of time including threat management and intrusion prevention and all of that that's a video that you guys would be interested in let me know down in the comments below so let's summarize right let's let's let's have a real talk about the UDM Pro and I guess my thoughts on this device overall and I'm a little bit torn on the device because I actually do really like the device a lot that being said though I'm not exactly sure who would best benefit from this right in terms of a home user this thing is great but it's also kind of overkill for a home user you don't necessarily need the unify access stuff you don't necessarily need the unified talk stuff unless you're just like me a big ubiquity enthusiast that like kind of just gets all the new ubiquity stuff and likes to try it out and play with it you don't really need like a voice over IP phone system and access control for your doors at home right so unless you're just a big ubiquity enthusiast I don't think this is really meant for the home market so does that mean that it's meant for the Sebby and I say it's I I guess it's closer to the SMB but my problem with recommending the dream machine Pro for the SMB is the lack of redundancy now ubiquity in the datasheet talks about redundancy they talk about dual win failover that's great they talk about the ability to failover to that LTE device that's great they talk about the USP RPS you know DC power backup redundancy sort of the dual power supply backup redundancy this thing that's great but what about the device itself alright so imagine that you're putting all of your eggs into this basket right the UDM Pro basket you've got unify running on it you've got your access control you might have your voice over IP phone system running on it you've got unified protect you know surveillance for your entire small office or medium office right what happens when the UDM Pro fails right so say five years down the road where you know you get to that sort of mean time to failure for any piece of hardware in a data center what happens when the UDM Pro fails you're you're putting a lot of eggs in the dream machine basket there right and so I don't know if I would be comfortable with the dream machine Pro even if you had the USP RPS to backup your power even if it had a second hard drive which it doesn't to backup your surveillance stuff what if the mainboard goes out what if you're a land port the Ethernet port on for the LAN or the sfp+ port goes out you're kind of dead in the water right for a lot for a big chunk of your business and so I'm not sure if I would even necessarily recommend it for a small business unless perhaps you bought to dream machine pros if you had a second one that was a spare sitting on a shelf or if for instance you're an MSP and you're putting dream machine pros in all of your clients businesses but you happen to have a handful of them at your store or in your warehouse ready to go in case these fails right so that's sort of the the the only thing that I don't really like about it is the unease of putting all of your eggs in one basket and running all of this really important mission-critical stuff on a single 1u appliance not that it can't be done or that it isn't done by companies all over the place but usually it's done separately right usually you might have an access control system and you only have one of those and it's a single point of failure but if your access control goes down your video cameras are still online you know your your wireless access points are still functioning which of course they would still be functioning if this went down but you get what I'm saying this is the core of your network I just I feel like it would be more I would personally be more comfortable having dedicated different appliances that if any one of them goes out it's less impactful on your business than if this one device goes out so I don't know you guys let me know what you think down below the two biggest complaints that I have received so far about the UDM Pro online as I've been talking about it on Twitter are first and foremost I took pictures of the inside and I think I talked about this earlier in the video I've been filming this video over like four days so I don't remember exactly what I've talked about and what I haven't but the fact that the chassis is very very empty right so inside the chassis there's a lot of open space and I I maintain that you know ubiquity or any hardware manufacturer just can't win right you've got people that are gonna complain that there's a lot of open space in a 1u chassis and then if you made it a non rack mountable form factor in order to save space within the device itself you're gonna have people that complain that it's not a rack mountable 1u appliance right so that doesn't really bother me too much so the people that are naysayers and saying hey there's too much space inside the device let you know haters gonna hate right let those people say what they want the other complaint that I have received online is this device should have power over ethernet for the eight port switch which I agree again it's a trade off right I agree that it would have been cool to have power over Ethernet even if it was only for like four of the ports or something but think of it from ubiquitous point of view right they're making this device if they put power over ethernet into this device it would cost more and it would probably need additional cooling which maybe means more fans or bigger fans which maybe means more noise right so their choice is let's make this thing more expensive for the people that need power over ethernet when not necessarily everyone needs power over ethernet and the trade-off is we might not sell as many of them but we're gonna sell them for a higher price versus let's not put power over ethernet in and bring it down to a more cost-effective price point and for the people that need power over Ethernet they're now gonna buy our switches right because you're going into the whole ubiquity unify infrastructure you're probably gonna buy a unify POS switch to go with your dream machine Pro right so in my opinion looking at it from ubiquitous point of view I feel they made the right decision by keeping the device more cost-effective because a more people are going to buy it at that price point and be people that need P o e will still buy a p OE switch from you anyways right so I don't mind that decision so much however there is one trade-off that I would have really liked to see in this device that I think would have justified a higher price point and it might even justify a separate device like a UDM pro pro right and that would be a second hard drive okay I would love to have seen a raid one set of hard drives for unify protect in this device and it would have been worth to me probably an extra hundred bucks like if this had two hard drive capability I would have paid 479 bucks for this thing instead of 379 bucks because then I would feel better about the footage that I'm getting from video surveillance being on a raid one set of hard drives I really think that again I understand the ability wanting to keep the thing cost effective but it would be really cool and not too difficult ubiquity if you're listening I think to have another version of the UDM Pro with a second hard drive ok so just my two cents let me know what you guys think about that down below overall though I really like the UDM Pro I'm excited about it I I like ubiquity coming out with these exciting products and I'm happy to be playing with it I've been immersed in this you DM Pro for like three or four days now and man I mean it to the point where I'm thinking of switching my entire network over to it just to have the experience of hey I am a dream machine Pro user I'm a dream machine Pro Network and so I think I'm gonna try that I'll probably make some more videos on that I also want to perhaps do videos on that threat management that I talked about but I want to hear from you guys what do you think about the dream machine Pro and I don't want to hear complaints I don't want to hear naysayers I want to hear constructive criticism of the device if you have that or if you think the device is frickin awesome let me know that down in the comments below also let me know what you guys thought in this video if you made it this far into the video it's probably gonna end up being like a 40-minute video or something thank you for sticking with me and thank you for sticking with the review of the dream machine Pro if you enjoyed this video and you would like to see more videos like this make sure you hit that thumbs up button click subscribe hit the bell icon all of that sort of stuff that US youtubers are supposed to say to you guys and thank you so much for watching all the way through comments always welcome put them down below and yeah that's about it for the dream machine Pro I hope you guys enjoyed this video and we'll see you in the next one you

Channel: Crosstalk Solutions

Views: 510,299

Rating: 4.8984032 out of 5

Keywords: unifi, unifi dream machine, unifi dream machine pro, unifi dream machine review, unifi dream machine pro review, unifi dream machine speed, unifi dream machine speed test, unifi dream machine pro poe, unifi dream machine pro setup, unifi dream machine pro specs, unifi dream machine pro price, ubiquiti unifi dream machine pro, crosstalk, crosstalk solutions, udm pro unifi, udm-pro price, udm-pro ubiquiti, udm-pro review

Id: AgJGuyDyP_M

Length: 63min 33sec (3813 seconds)

Published: Tue Feb 04 2020

Reddit Comments

[u/-Onac-]

It is an interesting product. I wish they would have focused on an updated USG first though. I guess I will just use this until a new USG does come out and switch back to the Cloud Key Plus to manage it.

I just hope these things have some kind of resale value when that day comes. I am definitely keeping the box for this one.

​

EDIT: Just to answer why I would jump to this knowing that it isn't perfect and already planning to upgrade later.... I want something better than the USG for my 1GB connection and the 3.5 drive slot is a huge bonus for me. The rest is... MEH

[u/DonutHand]

Not being able to configure before having an internet connection is a pain in the ass.

Lost a bunch of time today waiting around for ISP to show up not being able to pre configure internal network settings.

Ended up installing a USG, then making a backup and finally restoring the backup to the UDM-PRO once the ISP finished their install.

Lots of garbage in this device, but it is fast.

[u/bikerForEver]

Nice! I was waiting for this review for long time :-)

[u/coda_]

Looks like it doesn't support more than one WAN connection... or maybe I'm missing something. I hope I'm wrong.

EDIT: looks like I am wrong, thanks for correcting me folks!

[u/vcdx71]

Well that confirmed it’s on my no buy list.. really wanted it but no config.gateway.json is a deal breaker 😐

[u/Evari]

Do you really have to have a UI account to set this up? There must be some way to skip that, right?

[u/masmith22]

I am going to wait for the next update to the Dream Machine Pro, because of so many reported issues. The Unifi cloud key Gen2, switches and APs are working like a champ. I did order the new Gen2 Pro 48 POE switch.

[u/[deleted]]

I already host a controller containing multiple sites, and want to leverage the performance of this new device to replace some USG's. Is this a good drop-in replacement? Looks like it does all the same things, but I'm concerned about it not working with my controller.

[u/jpeazyATX]

I deployed one of these and have had nothing but bugs and fingers crossed that nothing severely breaks that I can't find a workaround for. IE, I switched a printer from wireless to wired (or vice versa, can't remember) and even when I rebooted the ARP table kept the old IP of a the printer's hostname, which brother uses for its CC4 scanning app. The only way around this was to create a static hosts file entry on each workstation that needed to scan. Also, during the initial setup I had to reset my Internet connection several times and unplug and replug in multiple times until it would finally get past the first stage of the setup. So far, very disappointed. It has potential but it is buggy AF! Initial test environment it seemed fine. I also had to factory reset, once I did, I got it to work but closed the cabinet door slowly and said to myself "okay, just don't do anything else or mess with any settings and hopefully this'll get us through until some stable firmware!" This product should have a big BETA sticker on it when you purchase it!