UniFi CyberSecure Explained: Proofpoint IDS/IPS + Cloudflare Content Filtering
Ubiquiti's UniFi CyberSecure turns your UniFi gateway into an enterprise-grade security appliance — adding Proofpoint-powered intrusion prevention and Cloudflare-powered content filtering, all processed locally. Here's what the CyberSecure and CyberSecure Enterprise licences add, and which one fits your network.
UniFi Network already includes solid built-in security — a stateful firewall, threat management and basic content filtering. UniFi CyberSecure is Ubiquiti's premium add-on that takes that protection to an enterprise level, using two best-in-class engines that run locally on your gateway (so your traffic never leaves your network for inspection, keeping latency low and data private).
The two engines inside CyberSecure
CyberSecure enhances UniFi Network in two areas, with continuous signature and category updates:
- Intrusion Detection & Prevention (IDS/IPS), powered by Proofpoint — deep packet inspection against a large, continuously-updated set of threat signatures (exploits, malware command-and-control, scans and known-bad traffic).
- Enhanced content & domain filtering, powered by Cloudflare — real-time, category-based filtering backed by Cloudflare's domain intelligence, so you can block malware, phishing and unwanted content categories at the gateway.
CyberSecure vs CyberSecure Enterprise
There are two licence tiers. Both add the same Proofpoint + Cloudflare capabilities — the difference is the depth of threat coverage and the class of gateway they target:
UniFi CyberSecure — tier comparison
| Feature | CyberSecure | CyberSecure Enterprise |
|---|---|---|
| Proofpoint threat signatures | 55,000+ | 95,000+ (plus extra categories) |
| Content filtering (Cloudflare) | Yes | Yes |
| Runs locally on the gateway | Yes | Yes |
| Memory Optimized Mode | Yes — for resource-constrained gateways | — |
| Best for | Home, small & mid-sized networks | Large-scale networks on high-end gateways |
| Target gateways | UDM-Pro / SE, Cloud Gateway Max-Ultra-Fiber, Dream Router 7 | Enterprise Fortress Gateway (EFG), UXG-Enterprise |
Add UniFi CyberSecure to your order
Ubiquiti UniFi CyberSecure 1 Year,Premium Security add-on For UniFi Gateway/ Cloud Gateway,Enhanced Threat Protection,Not Available For Enterprise SKU
Ubiquiti UniFi CyberSecure Enterprise 1 Year, For Enterprise Models Only, Enhanced threat protection with continuous updates.
Which UniFi gateway do you need?
CyberSecure runs on UniFi Network gateways. The standard licence suits the popular Cloud Gateway and Dream Machine range; the Enterprise licence is aimed at Ubiquiti's high-end gateways such as the Enterprise Fortress Gateway. If you're buying a new gateway to run CyberSecure, here are the ones we stock:
UniFi gateways that run CyberSecure
Ubiquiti UniFi Dream Machine Pro Enterprise Security Gateway and Network Appliance with 10G SFP+ (UDM-PRO)
Ubiquiti UDM-SE UniFi Dream Machine All-in-One Router and Security Gateway with Integrated PoE Switch
Ubiquiti Cloud Gateway Max, Compact 2.5G With 30+ UniFi device/300+ Client Support, 1.5 Gbps IPS Routing, 512GB NVMe SSD Included
Ubiquiti Cloud Gateway Ultra, Multi-WAN, (4) GbE RJ45 ports, (1) 1/2.5 GbE RJ45 ports, USB Type C, 5V DC/3A, 100â240V AC, Max 6.2W
Ubiquiti Cloud Gateway Fiber,UCG-Fiber, Desktop 10G Cloud Gateway,Integrated PoE Switch,Selectable NVR Storage,Full UniFi Application Support
UBIQUITI DREAM ROUTER 7,CLOUD GATEWAY,(1)10G SFP+, (1)2.5 GbE, 30+DEVICES, 300+USERS,1YR
Ubiquiti EFG Enterprise Fortress Gateway, 64Gbps Cloud Gateway NGFW, 500+ UniFi device / 5,000+ client, 12.5 Gbps IPS
Not sure which licence or gateway is right for your site? Ask us — we'll spec it.
Get adviceSome links in our articles may be affiliate links — if you buy through them we may earn a small commission at no extra cost to you. See our Affiliate Disclosure.
