{"id":100,"date":"2026-07-14T15:40:00","date_gmt":"2026-07-14T13:40:00","guid":{"rendered":"https:\/\/www.lukaswojcik.com\/blog\/?p=100"},"modified":"2026-10-26T12:24:59","modified_gmt":"2026-10-26T11:24:59","slug":"understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices","status":"publish","type":"post","link":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\/","title":{"rendered":"Understanding the UniFi Firewall: Controlling Access Between Servers, Cameras and Smart Home Devices"},"content":{"rendered":"<p>The UniFi Zone Matrix summarizes firewall policies between network zones. A zone groups interfaces or networks; a policy controls which traffic may pass. The matrix makes relationships easier to inspect, but a green or red cell is not a substitute for checking the actual rule list.<\/p>\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"256\" src=\"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/07\/Screenshot-2026-07-03-183750-1024x256.png\" alt=\"UniFi Zone Matrix: a table of source and destination zones whose cells read Allow All, Allow Return or Block All\" class=\"wp-image-101\" srcset=\"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/07\/Screenshot-2026-07-03-183750-1024x256.png 1024w, https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/07\/Screenshot-2026-07-03-183750-300x75.png 300w, https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/07\/Screenshot-2026-07-03-183750-768x192.png 768w, https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/07\/Screenshot-2026-07-03-183750-1536x385.png 1536w, https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/07\/Screenshot-2026-07-03-183750.png 2041w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption>Existing interface screenshot showing one configuration, not a recommended rule template.<\/figcaption><\/figure>\n<h2>Source and destination<\/h2>\n<p>Rows show the source and columns the destination. Internal \u2192 Server Network therefore describes traffic leaving Internal for the server zone. The reverse cell is a separate direction. These are filtering policies, not a routing table or physical separation.<\/p>\n<ul>\n<li><strong>Allow All:<\/strong> permits traffic for the zone pair represented by that cell.<\/li>\n<li><strong>Allow Return:<\/strong> describes a setup allowing replies to permitted connections without generally allowing new connections in the reverse direction. The effective return-traffic policy must be checked.<\/li>\n<li><strong>Block All:<\/strong> blocks the covered direction. An existing higher-priority exception can change the effective result.<\/li>\n<li><strong>Policies:<\/strong> several specific allow\/block policies apply; inspecting that list is essential.<\/li>\n<\/ul>\n<h2>Example: access to a server<\/h2>\n<p>A laptop needs an HTTPS connection to a NAS. A narrow allow rule from the laptop network to the NAS address and TCP port 443 expresses this need more precisely than allowing every service on every server. Return traffic must be permitted, for example through the corresponding automatic return rule.<\/p>\n<p>A new connection initiated by the NAS toward the laptop should remain blocked unless a separate service requires that direction. This limits one attack path; a compromised server can still send harmful content through an allowed session. Host updates and application access controls remain necessary.<\/p>\n<h2>Example: cameras and IoT<\/h2>\n<p>IoT devices include networked cameras and smart-home equipment. A VLAN groups devices into a separate logical network, even when the same switches carry several networks. Assigning that network to a custom zone makes the intended firewall boundary explicit. DMZ and Hotspot have different default purposes and policies, so those names are not interchangeable presets for a camera network.<\/p>\n<p>Only the controller or recorder addresses and required ports need access. Camera-initiated events, DNS and time synchronization may need separate rules. Blocking IoT \u2192 External can stop direct internet access through that gateway, but also prevents cloud functions and updates. Traffic to the gateway itself needs separate consideration.<\/p>\n<p>Two cameras on the same local network may communicate directly without crossing the gateway firewall. Zone policies alone therefore do not provide client isolation inside that network. Separate switch or wireless isolation controls may be needed.<\/p>\n<figure class=\"lw-diagram\"><img decoding=\"async\" src=\"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/diagrams\/dia-100-review-20261024.png\" width=\"1120\" height=\"580\" loading=\"lazy\" alt=\"Matrix states, a narrow laptop-to-NAS rule and the limits of zone-based filtering.\"><figcaption>Matrix states, a narrow laptop-to-NAS rule and the limits of zone-based filtering.<\/figcaption><\/figure>\n<h2>Testing the intended boundary<\/h2>\n<p>A practical check covers four cases: a permitted connection succeeds; its reply arrives; a prohibited new reverse connection fails; and a prohibited external connection fails. Both IPv4 and IPv6 matter when enabled. Tests need actual application ports, not just ping. The effective rule order and logs help explain unexpected results.<\/p>\n<div class=\"lw-faq\">\n<h2>Questions and answers<\/h2>\n<h3>Are VPN clients automatically trusted Internal devices?<\/h3>\n<p>No. UniFi has a VPN zone for remote-user and site-to-site VPN traffic, while external VPN-client connections have a different role. The actual interface assignment and required access need inspection before rules are added.<\/p>\n<h3>Can a single device receive an exception?<\/h3>\n<p>A policy can narrow access to a particular device or address without moving the entire network. Address-based rules require stable addresses. A DHCP reservation assigns the same address to a known device, but does not prove which device is currently using that address. Another device may try to impersonate it.<\/p>\n<h3>Does Block All prove complete isolation?<\/h3>\n<p>No. The relevant traffic must traverse the enforcing gateway and match the intended rules. Other interfaces, same-network traffic, explicit exceptions and application-level access are separate paths to assess.<\/p>\n<\/div>\n<div class=\"lw-quellen\">\n<h2>Sources<\/h2>\n<ul>\n<li><a href=\"https:\/\/help.ui.com\/hc\/en-us\/articles\/360012192813-Introduction-to-UniFi\" target=\"_blank\" rel=\"noopener noreferrer\">Introduction to UniFi<\/a><\/li>\n<li><a href=\"https:\/\/help.ui.com\/hc\/en-us\/articles\/115003173168-Zone-Based-Firewalls-in-UniFi\" target=\"_blank\" rel=\"noopener noreferrer\">UniFi \u2014 Zone-Based Firewalls<\/a><\/li>\n<\/ul>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>UniFi Zone Matrix explained: policy states, traffic directions and separate zones for servers, cameras and smart-home devices. Examples show targeted access rules and why zone filtering alone does not isolate devices within the same network.<\/p>\n","protected":false},"author":1,"featured_media":30423,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[91318,91321,91243,91707,91324],"class_list":["post-100","post","type-post","status-publish","format-standard","hentry","category-it-networks","tag-firewall","tag-network-security","tag-networking","tag-unifi","tag-vlan"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Understanding the UniFi Firewall: Controlling Access Between Servers, Cameras and Smart Home Devices | Lukas Wojcik<\/title>\n<meta name=\"description\" content=\"UniFi Zone Matrix explained: compare policy states and separate server, CCTV and IoT networks by zone and traffic direction.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Understanding the UniFi Firewall: Controlling Access Between Servers, Cameras and Smart Home Devices | Lukas Wojcik\" \/>\n<meta property=\"og:description\" content=\"UniFi Zone Matrix explained: compare policy states and separate server, CCTV and IoT networks by zone and traffic direction.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\/\" \/>\n<meta property=\"og:site_name\" content=\"Lukas Wojcik - Blog\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-14T13:40:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-26T11:24:59+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/11\/klarheit-20261111-100.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Lukas Wojcik\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Lukas Wojcik\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\\\/\"},\"author\":{\"name\":\"Lukas Wojcik\",\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/#\\\/schema\\\/person\\\/895f7604f9b6b71aad9bba33af28d0f9\"},\"headline\":\"Understanding the UniFi Firewall: Controlling Access Between Servers, Cameras and Smart Home Devices\",\"datePublished\":\"2026-07-14T13:40:00+00:00\",\"dateModified\":\"2026-10-26T11:24:59+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\\\/\"},\"wordCount\":627,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/#\\\/schema\\\/person\\\/895f7604f9b6b71aad9bba33af28d0f9\"},\"image\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/klarheit-20261111-100.png\",\"keywords\":[\"Firewall\",\"Network Security\",\"Networking\",\"UniFi\",\"VLAN\"],\"articleSection\":[\"IT &amp; Networks\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\\\/\",\"url\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\\\/\",\"name\":\"Understanding the UniFi Firewall: Controlling Access Between Servers, Cameras and Smart Home Devices | Lukas Wojcik\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/klarheit-20261111-100.png\",\"datePublished\":\"2026-07-14T13:40:00+00:00\",\"dateModified\":\"2026-10-26T11:24:59+00:00\",\"description\":\"UniFi Zone Matrix explained: compare policy states and separate server, CCTV and IoT networks by zone and traffic direction.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/klarheit-20261111-100.png\",\"contentUrl\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/klarheit-20261111-100.png\",\"width\":1200,\"height\":630,\"caption\":\"Understanding the UniFi Firewall: Controlling Access Between Servers, Cameras and Smart Home Devices\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Understanding the UniFi Firewall: Controlling Access Between Servers, Cameras and Smart Home Devices\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/\",\"name\":\"Lukas Wojcik - Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/#\\\/schema\\\/person\\\/895f7604f9b6b71aad9bba33af28d0f9\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/#\\\/schema\\\/person\\\/895f7604f9b6b71aad9bba33af28d0f9\",\"name\":\"Lukas Wojcik\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/lw-x2.jpg\",\"url\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/lw-x2.jpg\",\"contentUrl\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/lw-x2.jpg\",\"width\":424,\"height\":636,\"caption\":\"Lukas Wojcik\"},\"logo\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/lw-x2.jpg\"},\"sameAs\":[\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Understanding the UniFi Firewall: Controlling Access Between Servers, Cameras and Smart Home Devices | Lukas Wojcik","description":"UniFi Zone Matrix explained: compare policy states and separate server, CCTV and IoT networks by zone and traffic direction.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\/","og_locale":"en_US","og_type":"article","og_title":"Understanding the UniFi Firewall: Controlling Access Between Servers, Cameras and Smart Home Devices | Lukas Wojcik","og_description":"UniFi Zone Matrix explained: compare policy states and separate server, CCTV and IoT networks by zone and traffic direction.","og_url":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\/","og_site_name":"Lukas Wojcik - Blog","article_published_time":"2026-07-14T13:40:00+00:00","article_modified_time":"2026-10-26T11:24:59+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/11\/klarheit-20261111-100.png","type":"image\/png"}],"author":"Lukas Wojcik","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Lukas Wojcik","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\/#article","isPartOf":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\/"},"author":{"name":"Lukas Wojcik","@id":"https:\/\/www.lukaswojcik.com\/blog\/#\/schema\/person\/895f7604f9b6b71aad9bba33af28d0f9"},"headline":"Understanding the UniFi Firewall: Controlling Access Between Servers, Cameras and Smart Home Devices","datePublished":"2026-07-14T13:40:00+00:00","dateModified":"2026-10-26T11:24:59+00:00","mainEntityOfPage":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\/"},"wordCount":627,"commentCount":0,"publisher":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/#\/schema\/person\/895f7604f9b6b71aad9bba33af28d0f9"},"image":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\/#primaryimage"},"thumbnailUrl":"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/11\/klarheit-20261111-100.png","keywords":["Firewall","Network Security","Networking","UniFi","VLAN"],"articleSection":["IT &amp; Networks"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\/","url":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\/","name":"Understanding the UniFi Firewall: Controlling Access Between Servers, Cameras and Smart Home Devices | Lukas Wojcik","isPartOf":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\/#primaryimage"},"image":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\/#primaryimage"},"thumbnailUrl":"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/11\/klarheit-20261111-100.png","datePublished":"2026-07-14T13:40:00+00:00","dateModified":"2026-10-26T11:24:59+00:00","description":"UniFi Zone Matrix explained: compare policy states and separate server, CCTV and IoT networks by zone and traffic direction.","breadcrumb":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\/#primaryimage","url":"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/11\/klarheit-20261111-100.png","contentUrl":"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/11\/klarheit-20261111-100.png","width":1200,"height":630,"caption":"Understanding the UniFi Firewall: Controlling Access Between Servers, Cameras and Smart Home Devices"},{"@type":"BreadcrumbList","@id":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/understanding-the-unifi-firewall-controlling-access-between-servers-cameras-and-smart-home-devices\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.lukaswojcik.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Understanding the UniFi Firewall: Controlling Access Between Servers, Cameras and Smart Home Devices"}]},{"@type":"WebSite","@id":"https:\/\/www.lukaswojcik.com\/blog\/#website","url":"https:\/\/www.lukaswojcik.com\/blog\/","name":"Lukas Wojcik - Blog","description":"","publisher":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/#\/schema\/person\/895f7604f9b6b71aad9bba33af28d0f9"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.lukaswojcik.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/www.lukaswojcik.com\/blog\/#\/schema\/person\/895f7604f9b6b71aad9bba33af28d0f9","name":"Lukas Wojcik","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/07\/lw-x2.jpg","url":"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/07\/lw-x2.jpg","contentUrl":"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/07\/lw-x2.jpg","width":424,"height":636,"caption":"Lukas Wojcik"},"logo":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/07\/lw-x2.jpg"},"sameAs":["https:\/\/www.lukaswojcik.com\/blog"]}]}},"_links":{"self":[{"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/posts\/100","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/comments?post=100"}],"version-history":[{"count":12,"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/posts\/100\/revisions"}],"predecessor-version":[{"id":26872,"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/posts\/100\/revisions\/26872"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/media\/30423"}],"wp:attachment":[{"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/media?parent=100"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/categories?post=100"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/tags?post=100"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}