UniFi CyberSecure Enhanced by Proofpoint and Cloudflare

UniFi CyberSecure is a premium security service that enhances UniFi Network’s built-in protection in two critical areas:

• Intrusion Detection and Prevention (IDS/IPS), powered by Proofpoint.
• Enhanced Content Filtering, powered by Cloudflare.

These capabilities provide enterprise-grade protection by combining real-time threat intelligence with flexible, policy-based control over content access.

For a full overview of UniFi's Network and Cyber Security capabilities, see here.

For a full overview of UniFi’s Traffic and Policy Management capabilities, see here.

How to Subscribe?

You can activate CyberSecure on a UniFi gateway directly from Site Manager by clicking the shield icon for the desired site. After subscribing, allow up to 15 minutes for all threat signatures and filtering features to fully activate.

Note: CyberSecure features are automatically determined by the hardware model in use. Some advanced capabilities may not be available in all regions. Support for additional regions is coming soon.

Enhanced Intrusion Detection and Prevention

UniFi Network’s IDS/IPS system scans traffic for known threat patterns—called signatures—such as IP addresses, ports, or protocol anomalies.

CyberSecure upgrades this system with:

• A signature library expanded to over 95,000 definitions.
• Weekly updates with 30–50+ new signatures, sourced from Proofpoint and the Microsoft Active Protections Program (MAPP).
• Reduced false positives through curated signature sets.
• Support for 50+ threat categories, allowing more targeted policy control.

For a full breakdown of threat categories and configuration steps, see the Intrusion Detection and Prevention (IDS/IPS) article.

Memory Optimized Mode

Intrusion Prevention consumes memory in proportion to the number of signatures enabled. If your gateway is also running features like BGP routing, ad blocking, or content filtering, Memory Optimized Mode helps maintain performance by loading a curated subset of high-impact signatures.

Enhanced Content Filtering

CyberSecure enhances UniFi’s standard content filter by unlocking Cloudflare-powered filtering with over 100 granular categories, giving you precise control over what users and devices can access. This makes it possible to build tailored filtering policies based on compliance needs, user groups, or VLANs. It's especially valuable for professional environments that require more than simple, one-size-fits-all filtering.

This is ideal for networks that require:

• Fine-grained control over web access
• Compliance with organizational or regulatory policies (e.g., CIPA)
• Scalable content filtering beyond network-wide presets

For more information see Content and Domain Filtering in UniFi.

Transferring a CyberSecure Subscription

Subscriptions can now be transferred via the owner's Account Portal for eligible devices under Subscriptions. This means that CyberSecure and CyberSecure Enterprise subscriptions can be transferred to other consoles the owner's account owns; just simply click on an active subscription and change the Site/Host in the sidebar. For example, a site upgrading from a UCG Ultra to a UCG Fiber can transfer CyberSecure, but upgrading to EFG would necessitate a new CyberSecure Enterprise subscription.

Each subscription can only be transferred up to two times within a 30-day period. If you require an additional transfer in this window, please contact support.