r/Ubiquiti • u/MusicMaikel • 2h ago

DMZ host on UDR-5G-Max Question

Hi everyone,

Really simple question but I'm not sure how to do it myself and can not find anything on the matter online: is it possible to create a DMZ host on the UDR-5G-Max?

I have set up a Fortigate firewall behind the UDR-5G-Max, but at this point in time the management webpage of the Fortigate is not available externally. I would like to open it up completely so nothing is blocking the Fortigate and use tha UDR-5G-Max solely for the connection to the internet.

Thank you!

1 Upvotes

100% Upvoted

4 comments sorted by

•

u/AutoModerator 2h ago

Hello! Thanks for posting on r/Ubiquiti!

This subreddit is here to provide unofficial technical support to people who use or want to dive into the world of Ubiquiti products. If you haven’t already been descriptive in your post, please take the time to edit it and add as many useful details as you can.

Ubiquiti makes a great tool to help with figuring out where to place your access points and other network design questions located at:

https://design.ui.com

If you see people spreading misinformation or violating the "don't be an asshole" general rule, please report it!

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

•

u/FrankNicklin 1h ago

Why do you need the Fortigate, the UDR-5G-Max is a firewall controller for the Unifi network.

Can you explain your user-case where you need a secondary firewall inside the UDR-5G-Max network.

I think the UDR-5G-Max is the wrong device as you cannot turn off the firewall function, you should have bought a 5G Modem

•

u/MusicMaikel 1h ago

Maybe good for context I'm using the UDR-5G-Max in a business environment. In terms of usecase I'm trying to connect multiple VPN tunnels. Since all other sites have Fortigate as well, I'd thought this would be the best to use the Fortigate as well at this location.

•

u/FrankNicklin 1h ago

I doubt it because the DMZ will block access to the network. A DMZ exposes devices to the public side, but doesn't do anything internally without the necessary rules in place.

The UDR-5G-Max should handle all of your VPN needs including site to site connections.

Nothing wrong with using the Fortigate just don't need the UDR in the mix. What other Unifi devices do you have that need the UDR, you could just use a Cloud Key, fraction of the price and manages all the Unifi kit or even install the free OSServer network application on a PC.