UniFi Network 11: What's New, What Breaks, and the Hardware That Matters

UniFi Network 11 is Ubiquiti's biggest controller release in a while, and it is a two-sided update. On one side are genuinely useful new features — Wi-Fi as a backup WAN, live traffic visibility, Matter device awareness. On the other are breaking changes that force a decision for anyone still running older gear: legacy USG gateways and the standalone Network application are being left behind. Here is what the release adds, what it removes, and the hardware that makes the upgrade smooth.

Network 11 requires UniFi OS 6 on your console, so update that first. Everything we mention ships fast from Javelin Networks.

What's new

• WiFi Uplink (WISP mode) — a gateway can use an existing Wi-Fi network as its internet source, either as a backup WAN or as the primary connection. It works only on gateways with a built-in Wi-Fi 7 radio, so the device list is short: the UniFi Dream Router 7, UDR-5G-Max, Express 7, and UCG-Industrial.
• Live Flows — a real-time view of active traffic (all, threats, or blocked), with the ability to terminate a flow, a history tab, and a world-map view. Available on non-Wi-Fi gateways such as the UCG-Fiber and UDM-Pro-Max.
• Matter / Thread awareness — if your UniFi network hosts a Matter controller, the map shows smart-home device status (battery, signal, firmware) and when connectivity issues started.
• Zone-Based Firewall — all sites are automatically migrated to the newer zone-based model, plus SD-WAN routing policies with health thresholds for loss, latency, and jitter.
• External Network Lists — import domain or IP block lists from outside sources.

What breaks — read this before you upgrade

This is the part that catches people out. Network 11 ends support for two things:

• Legacy USG gateways. Network 10.6 is the last version that supports the USG. If you are still running a USG-3P, it will not move to Network 11 — it needs replacing with a current gateway.
• The standalone Network application. Network Application Server support is removed; the controller now has to run on UniFi OS (a UniFi OS gateway or a Cloud Key). If you self-host the Network app on your own server, that path ends here.

Two more things to expect on upgrade: the application database moves to PostgreSQL, and your existing statistics history is cleared and starts fresh. Back up your controller first, and don't upgrade the night before you need a month of historical graphs.

Which device for the job

The Wi-Fi 7 side of the upgrade

For a lot of sites, the real payoff of moving to Network 11 is pairing it with Wi-Fi 7 access points. The UniFi U7 line spans every space: the U7 Lite for budget rooms, the U7 Pro as the mainstream workhorse, the U7 Pro Max for high-density areas, and the U7 Outdoor for coverage beyond the walls. On a UCG-Fiber or UDM-Pro-Max, a few U7 APs give you a full Wi-Fi 7 network managed from the same Network 11 controller.

A clean upgrade checklist

• Back up the controller before you touch anything.
• Update UniFi OS to version 6 on the console first — Network 11 won't install without it.
• Expect the stats history to reset and the database to move to PostgreSQL. This is normal; plan around it.
• Replace any USG gateways — they stop at Network 10.6. A UDR7, UCG-Fiber, or UDM-Pro-Max is the usual landing spot.
• If you self-host the Network app, move the controller onto UniFi OS (a gateway or a Cloud Key) before 10.6 support ends.
• Review the Zone-Based Firewall after the automatic migration to confirm your rules carried over the way you expect.

Frequently asked questions

Why don't I see Network 11 even though I enabled Early Access?

The most common cause is the underlying UniFi OS version — Network 11 requires UniFi OS 6 on the console, so update that first. Availability also rolls out by device and channel, so an Early Access enrollment doesn't always mean the update appears immediately. Confirm the OS version, then check the update channel on the gateway itself.

Which gateways support the new WiFi Uplink feature?

Only gateways with a built-in Wi-Fi 7 radio: the UniFi Dream Router 7, UDR-5G-Max, Express 7, and UCG-Industrial. A separate access point can't provide WiFi Uplink — the radio has to be in the gateway. If backup-over-Wi-Fi matters to you, the Dream Router 7 is the accessible option.

What happens to my USG when I upgrade?

The USG does not move to Network 11. Network 10.6 is its final supported version. To get Network 11 and everything in it, plan to replace the USG with a current UniFi OS gateway such as a Dream Router 7, UCG-Fiber, or UDM-Pro-Max.

I self-host the Network application. What do I do?

Network 11 removes Network Application Server support, so the controller needs to run on UniFi OS instead. Move it onto a UniFi OS gateway or a Cloud Key (such as the Cloud Key Enterprise) before Network 10.6 support ends, so you don't get stranded on an unsupported controller.

Is the Zone-Based Firewall migration mandatory?

Network 11 automatically migrates sites to the Zone-Based Firewall model. The practical step for you is to review your firewall rules after upgrading to confirm they translated the way you intended, rather than assuming the migration is invisible.

Will I lose my statistics history?

Yes — the upgrade clears existing statistics history and starts fresh, and the database moves to PostgreSQL. If you rely on historical graphs, export or screenshot what you need before upgrading.

Planning the move to Network 11? Browse UniFi gateways and access points, or tell us your current setup and we'll help you pick the right console and APs.