UniFi Network 10.5 Adds Change Safeguards and Time Machine Visibility

What Ubiquiti announced

Ubiquiti has released UniFi Network 10.5, an application update aimed squarely at day-to-day operations rather than headline features. The release focuses on making configuration changes safer, giving administrators a client-centric troubleshooting view, and broadening the options for SD-WAN underlays across gateways and consoles, access points and switches.

The most immediately useful change for anyone who administers a site remotely is Test & Confirm. Configuration changes are not made permanent until UniFi access points and switches confirm them, and if connectivity drops mid-deployment the previous settings are automatically rolled back.

Ubiquiti also stresses that the new capabilities, including UniFi Building Bridges trunk extension across campuses, arrive without licence costs.

Safer changes and steadier Layer 2

Alongside the rollback safety net, 10.5 brings two Layer 2 refinements designed to stop small physical faults turning into topology events.

• Link Debounce filters short-lived and intermittent port flaps before they propagate.
• Auto STP Edge detects access ports automatically and suppresses needless topology change notifications.
• Edge clients skip the traditional listening and learning states, speeding up STP convergence.
• Greater stability is claimed across larger and more complex topologies.

WAN, firewall and campus connectivity

On the infrastructure side, the release adds firewall rule hit statistics so administrators can see which rules are actually being matched, and 1500 MTU support for PPPoE connections. That second item matters more here than in most markets, given how many Australian services still terminate over PPPoE.

AreaWhat 10.5 addsChange controlTest & Confirm with automatic rollbackLayer 2Link Debounce, Auto STP EdgeWANPPPoE 1500 MTU, firewall rule hit statsSD-WAN underlayDirect fibre, MPLS or wireless backbonesObservabilityTime Machine client timelineMulti-siteSAML at Fabric Admin and account level

Time Machine and Site Manager

Time Machine reframes troubleshooting around the client rather than the device. Administrators can replay a client’s historical connectivity events, review roaming behaviour across multiple APs, and see application usage and traffic flows on one timeline.

In Site Manager Early Access, SAML authentication now extends to the Fabric Admin level and to account-level login for MSP-managed environments, with centralised policies including 2FA.

BUZY’s take

For prosumers running a single home or small office site, this is a solid but unglamorous update. Test & Confirm is the standout: anyone who has locked themselves out of a remote console by fat-fingering a VLAN or firewall change will appreciate an automatic rollback. PPPoE at 1500 MTU is a genuine, if quiet, win on plenty of Australian connections.

For integrators, Time Machine is the feature worth learning properly. Most support calls we hear about are described as “the Wi-Fi dropped out”, and a per-client timeline that shows roaming decisions across multiple access points turns that into something you can diagnose without a site visit. Link Debounce and Auto STP Edge will mostly show up as fewer unexplained blips on sites with marginal cabling or long runs, which is exactly where those problems live.

SMB IT teams and MSPs get the most from the Site Manager side. Account-level SAML with centralised 2FA is the sort of change that makes multi-customer administration auditable rather than ad hoc, and the flexible SD-WAN underlay options, including fibre and MPLS, make UniFi easier to justify where an existing carrier service is already in place.

Our honest read: this is an operations release, not a reinvention. There is no new hardware to specify and nothing here that changes how you design a network. But the combination of safer change deployment, better firewall visibility and client-first troubleshooting is the kind of incremental work that reduces callouts over a year, and it applies to kit already installed. As always, stage the update on a low-risk site first, and check that anything running on Early Access features is something you are comfortable supporting.

Read the full announcement at blog.ui.com.