Answers before you call.

A provider-supplied router performs basic routing and address translation. It is not a security appliance. A next-generation firewall inspects traffic in real time, matches it against current threat intelligence, detects and blocks intrusion attempts, and filters malicious domains before they reach any device on the network.

IDS/IPS inspects traffic entering and leaving the network against a continuously updated database of attack signatures. Suspicious activity is identified and, where policy allows, blocked automatically in real time rather than logged for later review.

Segmentation divides a network into isolated zones — typically staff, guest, payments, surveillance and IoT — with traffic between them denied by default. If one device is compromised, the exposure is contained within its zone rather than spreading across the organisation. It is standard practice for any site handling payment or customer data.

Yes. We configure encrypted WireGuard VPN access and site-to-site tunnels so staff can reach internal systems from anywhere without exposing services to the public internet through port forwarding.

No. Firewall, intrusion prevention, VPN and content filtering are included in the hardware with no per-user or annual security licensing. Ongoing support and monitoring, where required, are covered by a separate managed agreement.

By survey rather than estimate. We assess building construction, existing interference and usage density, then model access point placement, channel allocation and power levels before any hardware is specified.

On the local site. UniFi Protect records to a network video recorder installed on the premises, inside an isolated surveillance segment with no outbound internet route. Recordings remain in the jurisdiction of the site they were captured in, and recording continues if the connection drops.

No. The UniFi Protect platform carries no per-camera or per-user licensing, and remote viewing is included. Support, monitoring and maintenance, where required, are provided under a separate managed agreement priced openly.

Against the DORI criteria in IEC 62676-4, which define the pixel density required to detect, observe, recognise or identify a subject. We establish what each position needs to achieve, then select lens and sensor to meet it at that distance rather than fitting a uniform camera everywhere.

Retention is a function of camera count, resolution, frame rate, codec and drive capacity. We size storage against a stated retention requirement — commonly 30 days — rather than fitting a recorder and discovering the retention afterwards.

Yes. Cloud replication is available through UniFi where a client wants offsite redundancy. It is an option scoped with you rather than a default, and the primary recording tier remains on the premises.

Yes. The platform is modular and camera generations interoperate on the same recorder. Where expansion is anticipated we size the network, PoE budget and storage for it at the design stage.

Surveillance of areas where people have a reasonable expectation of privacy carries obligations under the Privacy Act 2020 in New Zealand and UK GDPR in Britain. We advise on camera positioning, signage and retention periods at the design stage — holding recordings locally, under your control, makes that position materially simpler to manage.