A zone matrix is easier to read than a list of rules, because it shows what is missing as well as what is there. Name the zones, set each direction, and out comes the rule list along with the openings that quietly undo the separation.
UniFi Zone Matrix Planner
Articles that explain this
OTHER TOOLS
- UniFi / IoT VLAN Subnet & CIDR Calculator
- Multi-WAN Failover & Policy Planner
- UniFi PoE Power Budget & Load Calculator
- HSTS & Preload Readiness Checker: the four addresses that decide it
- Domain RDAP & Certificate Transparency Lookup: Registrar, Expiry, Forgotten Subdomains
- CCTV Storage & Network Bitrate Calculator
- Pi-hole / AdGuard Blocklist Converter & Overlap Analyzer
- TLS Certificate & Handshake Inspector
- HTTP Security Header Checker
- WireGuard AllowedIPs & Split-Tunnel Calculator
RELATED ARTICLES
- UniFi Zone Matrix: Policy States for Server, CCTV and IoT Networks
- How to Safely Host Public Servers on a UniFi Network
- UniFi Zone-Based Firewall: Return Traffic, the Gateway Zone and Intra-Zone Traffic
- IEEE 802.1X RADIUS Authentication on UniFi Switches
- Multi-WAN Failover with the Ubiquiti UniFi UCG-Fiber: Setup, Grounding and Configuration
- WAN Failover: What Happens to Open Connections When the Line Switches
- Tutorial: Sizing a PoE Budget Before the Switch Is Ordered
- UniFi Protect and PoE CCTV: Twisted Pair Versus Coax and VLAN Isolation of IP Cameras
- DNS-Level Ad Blocking & Security: Pi-hole and AdGuard Home in a UniFi Network
- Self-Hosted Large Language Model (LLM) with Ollama Behind an Auth Proxy