UniFi Network 11: WiFi WAN, Matter and Live Traffic Flows, Explained

Ubiquiti released UniFi Network 11 on October 12, and it is the biggest change to the network side of UniFi in a year. The headline is a re-engineered telemetry engine that Ubiquiti says scales more than 30% better, but the features our clients will actually feel are smaller and more practical: a phone hotspot can now be a backup internet line, Matter devices show up in the same topology as everything else, and the threat alerts finally explain themselves in plain English. Here is what changed, what it means for a Utah home or business on UniFi, and how we are rolling it out.

Re-engineered for scale

Under the hood, Network 11 replaces the telemetry engine that feeds the dashboard. Ubiquiti quotes 30% better scalability, which on a large estate or a multi-building commercial site means the controller stays responsive as the client count climbs. The visible result is two new views. Live Traffic Flows lists what each connected device is sending and receiving in real time, and keeps history. Time Machine Topology lets you scrub the network map backward to see what changed and when. When a client calls because the TV in the bunk room started buffering on Saturday night, we can now look at Saturday night instead of guessing.

WiFi WAN: your phone as the backup line

This is the feature we expect to use most. On supported gateways, WiFi WAN lets the gateway join any available WiFi network and treat it as a WAN connection, either primary or backup. The example Ubiquiti leads with is a phone hotspot. For a Heber or Midway cabin that only sees a tech once a season, that means the house can ride through a fiber or cable outage on a cellular hotspot without anyone touching the rack. It also pairs well with Starlink failover for sites where we have already installed a dish.

Gateways also gain expanded VLAN capacity, simpler routing policies and Network Lists that can pull from an external URL, so a firewall rule or VPN resource list can update itself. That last one is a quiet favorite for the managed networks we support.

Threat alerts that explain themselves

UniFi’s CyberSecure Enhanced subscription pulls daily threat signatures from Proofpoint. Until now a detection showed you a signature name and left the interpretation to you. In Network 11 each detection comes with an AI-assisted explanation of what was detected, the likely scope and risk, and a short list of recommended actions. For a business owner reading an alert on a phone, that is the difference between ignoring it and calling us.

SD-WAN policies for multi-site businesses

If you run more than one location on UniFi, Network 11 adds SD-WAN policies with two jobs: custom failover rules so a site rolls to its backup link the way you want, and application-based routing so a particular kind of traffic takes a particular path. Policies apply across sites from one place. This is aimed at the clinic with three offices or the contractor with a yard and a headquarters, the same clients who end up on our commercial side.

Matter devices, now in the same picture

UniFi is not becoming a Matter controller. It is becoming Matter aware: it works alongside the controller you already have, whether that is Apple Home, Google or a Josh.ai system, and once you enter a device’s Matter pairing code UniFi shows its battery, firmware, signal strength and how it connects to the Matter network. For a home with a few dozen Matter and Thread devices, the network map finally shows all of them.

One topology for IP and Thread

That awareness feeds a unified topology. For the first time, IP devices and Thread devices sit on the same map, and you can set custom alerts for critical ones in either camp. A Thread border router going quiet used to be invisible to the network side. Now it can page us.

Custom device icons

Small, but it will make every client list we hand over look better: if UniFi misidentifies a device, point the mobile app’s camera at it and the photo becomes the icon, or upload one from the browser. The 3D printer, the pool controller and the garage opener stop being three generic “unknown” tiles.

What’s new, and who it’s for

How we are rolling it out

1. Managed clients first. We update the controller, confirm the gateway model supports WiFi WAN, and note the devices that landed on the new topology.
2. Backup WAN where it earns its keep. Cabins and single-line offices get a hotspot or Starlink configured as a backup WAN, then a scheduled test so we know the failover works before winter.
3. Matter pairing codes. For homes on Josh.ai or another controller, we add the Matter devices to UniFi so the whole house is visible in one place.
4. Alerts that reach a person. Custom alerts go on the border router, the main switch and anything life-safety touches, routed to us and to you.
5. Self-managed systems: update when your console offers 11, then look at Settings → Internet for WiFi WAN and at the topology for anything it now sees that it did not before.

Frequently asked

Does WiFi WAN work on my gateway? Ubiquiti says “supported models.” We confirm per gateway before promising it. Newer Cloud Gateways and Dream Machines are the likely candidates.

Will my phone’s hotspot really carry the house? As a backup for a few hours, yes: cameras, alarm reporting and email keep working. It is not a replacement for a real second line on a busy site, which is where Starlink failover fits.

Do I need CyberSecure Enhanced for the new threat explanations? Yes. The AI explanations ride on the Proofpoint signatures that come with that subscription.

Does Matter awareness replace my Josh or Apple Home setup? No. UniFi watches the devices; your controller still controls them.

Is there a cost? Network 11 is a free update for UniFi consoles. Features tied to subscriptions, like CyberSecure Enhanced, stay subscription features.

Should I update today? If we manage your network, we will handle it. If you run your own and it is working, give it a week and update on a weekday morning, not the night of a party.

Book a network review →

Shield Low Voltage designs, installs and manages UniFi networks for homes and businesses across the Wasatch Front and Back. Feature details from Ubiquiti’s Network 11 announcement; images and video courtesy of Ubiquiti.