Ubiquiti Access Point

Version : UAP/USW Firmware 3.7.x and above

Ubiquiti UniFi Access Point provides high-performance Wi-Fi. It is a scalable enterprise access point solution designed to be easily deployed and managed. Ubiquiti Access Points are well managed through Ubiquiti UniFi Controller, which is a wireless network management software solution.

Netsurion's Open XDR platform helps to monitor events from UniFi Access Point via syslog. Netsurion's Open XDR platform flex reports, alerts, and dashboards will help you to analyze the activity logs such as, MAC association, MAC disassociation, connection failed from unknown MAC, etc.

After UniFi Controller is configured to deliver Ubiquiti access points events to Netsurion Manager; alerts, dashboards, and reports can be configured into Netsurion.

Some of the Data Source Integrations available in Netsurion are listed below.


Type Name Description
Security Ubiquiti AP - Failed MAC Associations This alert is triggered when Netsurion receives an event from Ubiquiti flagged as “Probe blocked”.


Type Name Description
Operations Ubiquiti AP - Failed MAC Associations This report is a summary of failed MAC associations to any access points which is generally flagged as “Probe blocked”. It contains key field such as log datetime, destination MAC address, failure reason, etc.
Operations Ubiquiti AP - MAC Associations Activities MAC association activities include events in which destination MAC addresses are flagged as “associated” or “disassociated”. This includes key information, such as log datetime, destination MAC address, source access points MAC address, access point version number, and association status.


The configuration details are consistent with Netsurion version 9.X and later, and UAP/USW Firmware 3.7.x and above.

Download Integration Guide and How-to Guide for more information and to configuration instructions.