UniFi Network Application 10.5.51 Preview: SD-WAN Improvements and Security Updates

Improvements to Routing and SD-WAN

One of the most important new features in this version is support for SD-WAN underlay in Port Manager. This feature enables direct underlay connections between SD-WAN hubs, which is designed to facilitate low-latency data traffic. Although this support is already available in Port Manager, the full range of configuration options will not be integrated until a later version of Site Manager. Other connectivity improvements include support for 1500 MTU for PPPoE. In addition, the developers have refined IPsec Policy-Based Routing by removing WireGuard and OpenVPN clients from the “Local Network” selection, ensuring more precise routing configurations.

Security Migration and System Stability

The update enables migration from Suricata 6 to Suricata 8. This upgrade requires UniFi OS 5.1.20 or a newer version. Users should note that the migration process can take up to one hour. To prevent system instability on consoles that are already experiencing high resource utilization, the application skips the automatic upgrade, allowing administrators to trigger the process manually via the CyberSecure settings.

In terms of stability, the application has been optimized to run more reliably under heavy load. The trigger logic for safe mode has also been improved, and a new option for data-layer protection is now available in the SafeOps menu.

Management and User Interface Improvements

The management tools have been enhanced to provide more detailed data. The Port Manager now displays “Last Seen” information in the tooltips for anomalies, and the policy table has been expanded to include “Hits” and “Last Hits” columns to enable more accurate traffic analysis. For client management, a “Person” filter is now available on the “Clients” page for users of One-Click Wi-Fi.

The update also addresses certain hardware behaviors. The EAV Bridge now supports an infrared status indicator, provided the device is running firmware version 1.0.9 or higher. Additionally, the “Auto STP Edge” logic has been adjusted to exclude Sonos devices from automatic BPDU Guard assignments, thereby reducing potential network conflicts.

Important Bug Fixes

Several hardware-specific bugs have been fixed in this build. One important fix addresses an issue with the UX7, where disabling a LAN port previously blocked configuration deployment for other mesh access points. An issue affecting EF-Core LAG ports, in which jumbo frames were not applied correctly, has also been resolved.

Other fixes include resolving rare errors during switch integration and a fix for the AV Manager, which previously did not appear if no switches were integrated at a location. UI errors, such as the incorrect status display of Wi-Fi speed limits in the broadcast settings, have also been resolved.