With version 9.5.21, Ubiquiti is continuing the gradual development of its network platform. The update focuses on stability, transparency and security mechanisms - less on new functions and more on structural maturity. This version is particularly relevant for organizations that rely on plannable, scalable and automatable networks.
The Channel AI function is new. It analyzes the radio environment to automatically determine the best possible channel distribution for access points. This reduces the load caused by overlapping channels, especially in dense WLAN environments such as offices, schools or production areas.
The channel optimization is based on the signals from neighbouring access points and dynamically adjusts the channel selection. In addition, a visual channel map has been introduced to give administrators a quick overview of occupied frequencies. This saves time during planning and prevents interference that could otherwise only be resolved by manual tuning.
Multicast filtering and VLAN bridging extend the control options in the WLAN area. Multicast data traffic can now be specifically filtered to reduce the radio load. At the same time, multicast traffic can be forwarded between VLANs if the gateway MDNS proxy is deactivated.
This is particularly relevant for IoT environments, streaming applications and smart building scenarios. This allows companies to define more specifically which multicast services are allowed to cross VLAN boundaries - an important contribution to segmentation and network hygiene.
The Port Manager has been expanded to include the Port AI function. The system analyzes the use of individual ports over a 24-hour period and reports any anomalies.
Among other things, it detects
Cable or power problems
Network loops and broadcast storms
Conspicuous traffic patterns
Path disruptions or performance anomalies
This function offers real added value in operation: it allows proactive error detection before faults affect users or services. This contributes to operational reliability, especially in larger infrastructures with many edge switches.
With the new Default Security Posture, Ubiquiti is introducing a global security policy. Administrators can choose whether new objects such as VLANs, devices or port profiles should be allowed or blocked by default.
In "Block All" mode, new network objects are initially isolated and must be deliberately released. This is a step towards security-conscious standard configuration - particularly useful in dynamic networks in which new segments or devices are frequently added.
Several detail improvements increase the consistency and reliability of the platform:
Support for automatic IPv6 prefix delegation
Improved validation in the object-oriented network model
Revised structure in the general settings (Settings Overview)
Improved usability in local RADIUS management
Improved filters in AI-supported flow analyses
Such changes may seem inconspicuous, but they are crucial for smooth processes in complex networks. They reduce the likelihood of configuration errors and increase efficiency in day-to-day operations.
The update fixes a number of bugs that can be relevant in corporate environments:
Error with port forward overlaps
Incomplete provisioning of SLA profiles
Problems with DS-Lite and MAP-E configurations under IPv6
Missing transfer of VPN settings with changing WAN IP
Incorrect NAT assignments under IPv6
Hanging objects when deleting dependent configurations
Incorrect performance displays with deactivated wireless modules
In addition, the validation of configurations has been improved so that incorrect states can be detected and corrected more quickly.
The AI functions in the port and WLAN area support a predictive mode of operation. Problems with connections or access points are detected before they lead to failures. This reduces response times and improves service quality.
The global security orientation ensures that new network segments are not unintentionally open. For environments with frequent changes or high dynamics, this is an effective mechanism for avoiding configuration errors and security gaps.
The improved IPv6 functions and bug fixes make dual-stack operation more stable. This gives companies that already use IPv6 or are switching to it more planning security.
The extended diagnostic and validation functions make day-to-day work easier. Administrators need to invest less time in troubleshooting and manual analysis, which reduces operating costs and increases stability.
Some functions, especially Channel AI, require current firmware versions on the devices. The compatibility of the infrastructure should be checked before upgrading.
Even if the default security posture does not change existing configurations, it is advisable to check security policies afterwards to ensure consistent standards.
Functions such as VLAN bridging require certain dependencies (e.g. deactivated mDNS proxy) and should be tested carefully before activation.
Version 9.5.21 is not a major leap, but it is a solid release with a clear focus on stability, security and operational intelligence. Channel AI and Port AI bring automation and early detection to everyday operations, while the Default Security Posture creates a clean basis for secure networks.
This update is a sensible step for companies that rely on predictable operations and standardized processes. It strengthens operational reliability and creates the technical prerequisites for better integrating Ubiquiti infrastructures into modern, automated network environments.