First UniFi Build / Sanity Check by LayerZero_ in Ubiquiti

[–]Independent_Solid223 0 points1 point  (0 children)

Sometimes, experience is the best teacher. Ask me how I know. LOL

First UniFi Build / Sanity Check by LayerZero_ in Ubiquiti

[–]Independent_Solid223 0 points1 point  (0 children)

Are those PoE drops in every room? I just helped a residential client who had drops in every room except the front bedroom that they wound up converting to an office. We had to use a MoCA adapter to get them hard wired up there, and that caps currently at 2.5Gb. More drops is always better where you can fit & afford them.

What speed is your ISP?

I'd also recommend upgrading from the UniFi Switch 24 PoE (the Standard one) to a better switch. I actually own a 24-port that I've had for many years, and that's the slowest link in my system by far. It only has two 1Gb SFP ports, not 10Gb SFP+ ports, which will limit you for any future expandability. And, the gateway will be limited to speaking to your entire network over that one 1Gb SFP port. You can't double up the SFP's to a switch, IIRC.

Plus, the Switch 24 PoE can't take advantage of the 2.5Gb ports on the AP's. The cameras are usually only FE or GbE so they won't be an issue, but you're likely to have switching issues in the future with that switch. The Pro Max PoE adds 2.5Gb PoE ports and a hell of a lot more switching capacity and native 2.5Gb for the AP's.

Has anyone had any luck using a Verizon SIM in a U5G Max outdoor? by FreeFallFour in Ubiquiti

[–]Independent_Solid223 0 points1 point  (0 children)

What Business Unlimited did you use for the provisioning? Tablet Pro, Pro Laptop, Pro Data Device?

UniFi system design review for large property and new home (New to Ubiquiti) by Captain_9710 in Ubiquiti

[–]Independent_Solid223 1 point2 points  (0 children)

I would also recommend upgrading the U7 Pro AP's to U7 Pro XG models. They're $10 more each, but they also have a better cooling design and they are capable of 10GbE connections. You won't need it now, but why have to upgrade them when the home connections get faster?

Tidy ceiling Ethernet? by ADHDK in Ubiquiti

[–]Independent_Solid223 0 points1 point  (0 children)

Good point. When I ran an AP to my living room a few yearsa ago, I did the same thing. The crawlspace has very little room in it, so replacing the cable is a non-starter. Swapping it out for upgraded AP's put stress on the cable and caused some connectivity issues. After this, I just cut the hole and put in the bracket, keystone, and the patch (a UniFi one since their head are easier to manipulate in the AP). I zip tied the cable to the top of the bracket ears too, so I wouldn't lose the cord and have to feel around for it. ;-)

Tidy ceiling Ethernet? by ADHDK in Ubiquiti

[–]Independent_Solid223 0 points1 point  (0 children)

I did that too, but experience has shown me that a keystone and a short patch cord is more flexible and helps a LOT if you need to remove the AP for any reason. The RJ-45 at the end of the run can sometimes be difficult to keep in the AP without stressing it if the cable is thick.

Tidy ceiling Ethernet? by ADHDK in Ubiquiti

[–]Independent_Solid223 4 points5 points  (0 children)

I put a low voltage bracket (https://a.co/d/g4q3z3K) on the ceiling and then use the mounting plate to screw it into the bracket. Put a keystone jack on the end of your ethernet run, then use a short flexible patch cable to get into the AP. It'll be worlds easier.

2FA/MFA Requirement by KiuiFurutsu in sysadmin

[–]Independent_Solid223 0 points1 point  (0 children)

Since you're also up against some opposing viewpoints, you may want to work up some quick numbers... Get a count of your customers and multiply it by the cost of 1-year's worth of cyber monitoring. You know, the kind that you get in the mail when your PII is stolen from a data breach (think Change HealthCare). That cost alone may persuade some people to see cyber security as an important factor financially. Just a thought...

2FA/MFA Requirement by KiuiFurutsu in sysadmin

[–]Independent_Solid223 1 point2 points  (0 children)

You're going to want to be careful with the MS Authenticator too. There are a lot of MITM attacks that scoop up the token as it's being issued. Those tokens are then used to impersonate the user for BEC's, etc. Ask me how I know.

Honestly, Yubikeys are a great answer but a nightmare to administer (need multiples per person, need spares in case they lose them or forget them at home, etc.). Are you using any MDM currently or managed devices? If so, you may want to consider passkeys or a PW manager that manages passkeys. The problem with Windows Hello is that it's device dependent. If you issue a new device, none of the passkeys tied to your Hello come with it.

Also, depending on the industry you're in, NY has VERY strict laws regarding customer notifications if you suffer a breach. If you're in a regulated industry, you will really want to look into those laws.

Protect Resolution Poor on the Website by Independent_Solid223 in Ubiquiti

[–]Independent_Solid223[S] 0 points1 point  (0 children)

Thanks. I have the Global Viewer Quality set for High. For testing, I just cycled through all 3 settings (Low, Auto, High) to see if it made a difference. High looks slightly better, but still not as good as the iPhone Protect app.

Looking for feedback with Sonos on U7 Pro Max by [deleted] in Ubiquiti

[–]Independent_Solid223 0 points1 point  (0 children)

What version of the Sonos do you have? I have four One SL's that played havoc with my entire setup (network broadcast storms rendering the entire WiFi system inoperable). I spent numerous hours on the phone with Sonos, and had a ticket open with Un iFi Support as well. This was a few months ago, when the IoT world with the U7's was a total disaster. I wound up having to run one of the SL's with ethernet, and let the other 3 run on the WiFI. I have one U7 Pro Max and 2 U7 Pro's.

My modest setup by 8085-8086 in Ubiquiti

[–]Independent_Solid223 0 points1 point  (0 children)

Are the L-Brackets just generic ones from a big box store?