Uploaded May 2025 | Updated September 2026, 2 weeks ago
Looking for the easiest and most reliable way to connect two UniFi sites with a site-to-site VPN? You're in the right place. In this video, I’ll show you how UniFi Site Magic makes it incredibly simple to create secure VPN tunnels between two UniFi consoles — and more importantly, how Zone-Based Firewall gives you complete control over what traffic is allowed across those tunnels.
Site Magic is one of UniFi's most exciting features for anyone managing multiple locations. Whether you’re connecting two branch offices, linking a remote home lab, or extending services between your business locations, Site Magic removes the complexity of traditional VPN setup. With just a few clicks, UniFi automatically detects and establishes a secure VPN tunnel between your sites — no need to mess with IPsec, routing tables, or NAT rules. It’s UniFi's version of the “easy button” for VPNs.
But with that ease comes an important question: Who and what can communicate over that tunnel? By default, Site Magic connects your networks with very few restrictions. That might be fine in some environments, but for most businesses and security-conscious users, you’ll want tighter control. That’s where UniFi’s Zone-Based Firewall comes in — a powerful new addition to the UniFi platform that lets you define granular rules based on zones, not just VLANs or interfaces.
In this video, I’ll walk you through the entire process of securing your Site Magic connection using zone-based firewall rules. I’ll show you how to create custom zones for different parts of your network — like IoT devices, servers, user workstations, and guest networks — and then apply policies that strictly control which zones can talk to each other over the VPN. Want your branch office printers to be accessible, but not the security cameras or employee laptops? You can do that. Want to block IoT traffic from reaching your main office at all? Totally possible — and easy to manage with the zone-based approach.
You’ll also learn how this new firewall model compares to older VLAN-based rule systems in UniFi. Traditional firewalls rely heavily on interface-based rules, which can become complex and hard to maintain as your network grows. With the Zone-Based Firewall, UniFi has introduced a more scalable and intuitive method for managing inter-network security. Zones allow you to group networks based on function or trust level, not just location or port — making your rules easier to understand and maintain.
This video is packed with real-world examples, best practices, and practical tips that go beyond just the basics. I’ll cover how to test your firewall rules, how to avoid locking yourself out of remote sites, how to troubleshoot common Site Magic issues, and how to plan your network architecture with security and simplicity in mind. If you're already using UniFi or considering deploying it in a multi-site environment, this video will show you how to take your setup from functional to secure.
This tutorial is ideal for IT professionals, network administrators, home lab enthusiasts, and small business owners who want to get the most out of their UniFi investment. If you’ve ever felt that UniFi’s firewall options were a bit limited or confusing in the past, the new zone-based model will be a game changer. Combined with Site Magic, it gives you the power to build secure, high-performance VPN links with centralized control — and zero complexity.
🔔 Make sure to subscribe if you want more UniFi tutorials, network design tips, and real-world walkthroughs like this. I publish new videos regularly covering UniFi, Proxmox, Home Assistant, Synology, Docker, and everything in between.
👍 Like this video if you found it helpful, and drop a comment below if you’ve tried Site Magic or Zone-Based Firewall yet — or if you're planning to. I'd love to hear how you're using these tools to improve your setup.
✅ What You’ll Learn in This Video:
How UniFi Site Magic works and why it’s the easiest VPN setup yet
Step-by-step setup for linking two UniFi consoles with Site Magic
What Zone-Based Firewall is and why it matters for site-to-site tunnels
How to create zones, apply rules, and lock down your VPN connections
Real-world security tips for multi-site UniFi environments
#ubiquiti #unifi #tech #dreammachine #vpn #firewall #security #wifi
----------------------------------------------------------------------
Music by Hotham
Stream: https://linktr.ee/hothammusic
Free Download: https://hypeddit.com/hotham/morningth...
For Business & Promotional related inquiries, contact me at avibarilan@gmail.com
Looking for the easiest and most reliable way to connect two UniFi sites with a site-to-site VPN? You're in the right place. In this video, I’ll show you how UniFi Site Magic makes it incredibly simple to create secure VPN tunnels between two UniFi consoles — and more importantly, how Zone-Based Firewall gives you complete control over what traffic is allowed across those tunnels.
Site Magic is one of UniFi's most exciting features for anyone managing multiple locations. Whether you’re connecting two branch offices, linking a remote home lab, or extending services between your business locations, Site Magic removes the complexity of traditional VPN setup. With just a few clicks, UniFi automatically detects and establishes a secure VPN tunnel between your sites — no need to mess with IPsec, routing tables, or NAT rules. It’s UniFi's version of the “easy button” for VPNs.
But with that ease comes an important question: Who and what can communicate over that tunnel? By default, Site Magic connects your networks with very few restrictions. That might be fine in some environments, but for most businesses and security-conscious users, you’ll want tighter control. That’s where UniFi’s Zone-Based Firewall comes in — a powerful new addition to the UniFi platform that lets you define granular rules based on zones, not just VLANs or interfaces.
In this video, I’ll walk you through the entire process of securing your Site Magic connection using zone-based firewall rules. I’ll show you how to create custom zones for different parts of your network — like IoT devices, servers, user workstations, and guest networks — and then apply policies that strictly control which zones can talk to each other over the VPN. Want your branch office printers to be accessible, but not the security cameras or employee laptops? You can do that. Want to block IoT traffic from reaching your main office at all? Totally possible — and easy to manage with the zone-based approach.
You’ll also learn how this new firewall model compares to older VLAN-based rule systems in UniFi. Traditional firewalls rely heavily on interface-based rules, which can become complex and hard to maintain as your network grows. With the Zone-Based Firewall, UniFi has introduced a more scalable and intuitive method for managing inter-network security. Zones allow you to group networks based on function or trust level, not just location or port — making your rules easier to understand and maintain.
This video is packed with real-world examples, best practices, and practical tips that go beyond just the basics. I’ll cover how to test your firewall rules, how to avoid locking yourself out of remote sites, how to troubleshoot common Site Magic issues, and how to plan your network architecture with security and simplicity in mind. If you're already using UniFi or considering deploying it in a multi-site environment, this video will show you how to take your setup from functional to secure.
This tutorial is ideal for IT professionals, network administrators, home lab enthusiasts, and small business owners who want to get the most out of their UniFi investment. If you’ve ever felt that UniFi’s firewall options were a bit limited or confusing in the past, the new zone-based model will be a game changer. Combined with Site Magic, it gives you the power to build secure, high-performance VPN links with centralized control — and zero complexity.
🔔 Make sure to subscribe if you want more UniFi tutorials, network design tips, and real-world walkthroughs like this. I publish new videos regularly covering UniFi, Proxmox, Home Assistant, Synology, Docker, and everything in between.
👍 Like this video if you found it helpful, and drop a comment below if you’ve tried Site Magic or Zone-Based Firewall yet — or if you're planning to. I'd love to hear how you're using these tools to improve your setup.
✅ What You’ll Learn in This Video:
How UniFi Site Magic works and why it’s the easiest VPN setup yet
Step-by-step setup for linking two UniFi consoles with Site Magic
What Zone-Based Firewall is and why it matters for site-to-site tunnels
How to create zones, apply rules, and lock down your VPN connections
Real-world security tips for multi-site UniFi environments
#ubiquiti #unifi #tech #dreammachine #vpn #firewall #security #wifi
----------------------------------------------------------------------
Music by Hotham
Stream: https://linktr.ee/hothammusic
Free Download: https://hypeddit.com/hotham/morningth...
For Business & Promotional related inquiries, contact me at avibarilan@gmail.com
