Another great video ! Thank you !! Can you do a video on Multicast Filtering ? specifically new Fast Leave option and Forward unknown multicast traffic, Unifi doesn't really say much about it :/
Hi, the country blocking isn't always accurate. Also their IPS features don't work well as the IP doesn't seem to actually be blocked. If you launch suricata it will show on your server that a lot of supposedly blocked IP are still going in and trying to exploit/explore your server. Idk exactly why
I don't think it's possible that if the GeoIP database says an IP address is from a country, and you choose to block that country, but the gateway does not block it. Technically it's impossible...
@hz777 yeh I agree, that's why it's either the DB isn't listing that IP the right country, or there is an underlying issue with their latest update. Also for the IPS it really seems to not be blocking IP. They are detected but not blocked even if they say so.
Are you sure IPS can block the IP address? I know it can drop the connections but I don't see an option to block the IP in the settings. There is a separate setting to "Block Known Malicious IPs", but it's not about IPS.
Whenever I think about Unifi network, I wonder how it works, I see that you have a video about it. You are great. Thank you very much.
Awesome walkthrough. Thank you so much for taking the time to make this video. 👍
Man that’s great video
Another great video ! Thank you !! Can you do a video on Multicast Filtering ? specifically new Fast Leave option and Forward unknown multicast traffic, Unifi doesn't really say much about it :/
Great suggestion! Let me see what I can do in a video.
Hi, the country blocking isn't always accurate. Also their IPS features don't work well as the IP doesn't seem to actually be blocked. If you launch suricata it will show on your server that a lot of supposedly blocked IP are still going in and trying to exploit/explore your server. Idk exactly why
I don't think it's possible that if the GeoIP database says an IP address is from a country, and you choose to block that country, but the gateway does not block it. Technically it's impossible...
@hz777 yeh I agree, that's why it's either the DB isn't listing that IP the right country, or there is an underlying issue with their latest update. Also for the IPS it really seems to not be blocking IP. They are detected but not blocked even if they say so.
Are you sure IPS can block the IP address? I know it can drop the connections but I don't see an option to block the IP in the settings. There is a separate setting to "Block Known Malicious IPs", but it's not about IPS.