I am researching and I couldn’t find much on it, but does the IPS/IDS on unifi with CyberSecure only look at unencrypted traffic?
Unless on a EFG or UXG-Enterprise (and with the TLS decryption set up), yes it is effectively only looking at unencrypted data. There are still some signs that can be seen about certain types of bad traffic, but not much.
1 Like
I figured that was the case. I’m trying to justify paying $100 a year, but why even bother paying for all the signatures if it can’t inspect the traffic?
Well it now also includes more granular content filtering when on Network 9.3 and Unifi OS 4.3, see the network 9.3 release notes/video. Content filtering is via DNS so it can filter HTTPS connections too.
1 Like