UniFi Firewall Defaults Are Too Open: Here’s How to Lock Them Down

https://lawrence.video/

---
Thanks to NinjaOne for sponsoring this video
https://lawrence.video/NinjaOne-Dec-2025
---

By default, UniFi networks are more permissive than many people realize.
New VLANs can talk to each other, internal networks often have broad access to the gateway, and “internal” traffic is frequently trusted unless you explicitly lock it down. In this video I go over how to change the default setting to get your network to a more secure posture.

UniFI VPN Rules
   • The Rules You Need to Secure Your UniFi VPN  

UniFi Zone Firewalls
   • UniFi Zone Firewall Rules Explained – Secu...  

Connect With Us
---------------------------------------------------
Hire Us for a project: https://lawrencesystems.com/hire-us/
Toms' Twitter 🐦   / tomlawrencetech  
Our Website https://www.lawrencesystems.com/
Our Forums https://forums.lawrencesystems.com/
Instagram   / lawrencesystems  
Facebook   / lawrencesystems  
GitHub https://github.com/lawrencesystems/
Discord   / discord  

Lawrence Systems Shirts and Swag
---------------------------------------------------
►👕 https://lawrence.video/swag/


AFFILIATES & REFERRAL LINKS
---------------------------------------------------
Amazon Affiliate Store
🛒 https://www.amazon.com/shop/lawrences...

UniFi Affiliate Link
🛒 https://lawrence.video/unifi-affiliate

All Of Our Affiliates help us out and can get you discounts!
🛒 https://lawrencesystems.com/partners-...

Gear we use on Kit
🛒 https://kit.co/lawrencesystems

Use OfferCode LTSERVICES to get 10% off your order at
🛒 https://www.techsupplydirect.com?aff=2

Digital Ocean Offer Code
🛒 https://m.do.co/c/85de8d181725

HostiFi UniFi Cloud Hosting Service
🛒 https://hostifi.net/?via=lawrencesystems

Protect your privacy with a VPN from Private Internet Access
🛒 https://www.privateinternetaccess.com...

Patreon
💰   / lawrencesystems  

Chapters
00:00 UniFI Firewall Rules
01:11 Default Security Posture
02:00 UniFi Port Security
05:02 Setting Alarm for Switches
05:30 Default Firewall Zones and Rules
12:20 UniFi Gateway Rules
15:00 Creating a Custom Zone
16:00 Locking Down Gateway Rules
19:40 Custom Allow Rules
20:52 External Access and VPN Settings
23:00 Adding More Rules if needed