EXPLAINER · UNIFI · AUDITDraft
What a residential UniFi audit actually covers
A read-only walkthrough of the 13 sections we look at on a home UniFi network — and what each section can quietly be wrong about.
In progress
// ARTICLES · WRITTEN BY THE ENGINEERS
Field-tested writing on UniFi networks, written for the people who own them.
Short, factual, citation-backed pieces on the questions we get asked most often — what a network audit covers, how to think about admin access, what the unfamiliar MAC addresses on your controller actually are, and how to bring a residential UniFi network in line with current vendor guidance.
EXPLAINER · UNIFI · WI-FI PRIVACYPublished
The mystery MACs on your UniFi network
Apple's Private Wi-Fi Address feature generates a software-defined MAC for each network. Here's how to recognize it, why your controller still knows what the device is, and what to do about it.
Read article
INSTRUCTIONAL · CRESTRONPublished
Retire your Crestron port-forwards
Crestron's own current remote-access guidance is cloud relay plus VPN — not router port mapping. Field installations haven't all caught up.
Read article
PERSPECTIVE · ADMIN ACCESSDraft
Should your AV integrator be the Owner of your network?
A common pattern in professionally installed homes — and a decision the homeowner usually didn't realize was a decision.
In progress
COMPARISON · AV CONTROLDraft
Crestron, Control4, Savant, Lutron: remote access compared
Each AV control vendor handles remote access differently in 2026 — cloud relay, partner cloud, port mapping, or some combination. A side-by-side reference.
In progress
ANALYTICAL · UNIFI · AUDITDraft
Five most common findings in a residential UniFi audit
WPA2-only Wi-Fi, flat LAN, open port-forwards, shared admin accounts, no VPN — ranked by severity, with the recommendation for each.
In progress
INSTRUCTIONAL · WI-FI · WPA3Draft
WPA2 vs WPA3 transition mode — when to switch and what breaks
Transition mode is the right answer for most home networks today. The reasons are specific, and so are the gotchas.
In progress
HOW-TO · VLAN · UNIFIDraft
VLAN segmentation for a home network
Trusted devices, IoT, home automation, intercoms, guest. Four VLANs is the usual answer; the firewall rules between them are where most homes get it wrong.
In progress
HOW-TO · VPN · UNIFIDraft
How to set up WireGuard in your UniFi controller
WireGuard is the modern, performant choice for remote-access VPN on UDM-family gateways. A clean setup, end to end.
In progress
HOW-TO · UNIFI · ADMIN ACCESSDraft
How to give a consultant read-only access to your UniFi console
The exact dropdowns to set, what each permission does, and how to revoke the access cleanly when the engagement ends.
In progress
INSTRUCTIONAL · UNIFI · ADMIN ACCESSDraft
Reading your UniFi admin list — who has access, what role, why it matters
A short walkthrough of the Control Plane Admins screen: roles, last-activity, MFA posture, and the questions to ask about each entry.
In progress
// GET IN TOUCH
A specific question we haven't written about yet?
If your UniFi network has a question that this list doesn't answer, send it to us. The good ones become the next article.