Named devices
Apply policies directly to each child’s phone, tablet, console and television. This is easy to understand but every new or replacement device must be added.
BASTIONHOST / UNIFI HOME NETWORK GUIDE
UNIFI HOME NETWORK GUIDE
Turn UniFi network controls into a clear family routine.
A supported UniFi Gateway can apply internet schedules, DNS-level content filtering, SafeSearch and application rules to selected child devices or a dedicated network. Keep the first setup simple, test it from the child’s device and document every exception.
CHOOSE THE TARGET
Individual devices are simpler; a child network is easier to maintain at scale.
Both approaches can work. Choose based on the number of children, shared devices and how comfortable you are maintaining home-network settings.
Child network
Place child devices on a dedicated Wi-Fi network and target that network. This can simplify future changes, but shared and household devices need careful placement.
UNIFI BASELINE
Identify, filter, schedule and verify.
Current menu names can differ between UniFi Network releases. Use the official instructions alongside this family-focused sequence.
Update and protect the console
Install supported UniFi OS and Network updates, protect administrator access with multi-factor authentication and record the current working configuration before introducing family policies.
Name every child device
Use the Client Devices view to identify and rename phones, tablets, computers, consoles and televisions. Confirm each device is really the one you intend to restrict.
Create the content filter
Open Settings, CyberSecure and Content Filter. Create a clearly named policy such as “Children — everyday filter” and select the intended client devices or child network as its source.
Choose the filtering level
Basic filtering blocks known malicious, explicit and adult domains. Enhanced filtering adds more categories where supported and may require a subscription. Begin with the narrowest policy that meets the family need.
Enable SafeSearch and manage exceptions
Enable the relevant Google, Bing or YouTube Safe Search options. Add allowlist or blocklist entries only when you understand why the main policy is producing the wrong result.
Create the internet-off schedule
In current Policy Engine releases, create or select the child devices, group or network, choose the Secure internet outcome and schedule complete internet isolation for the agreed bedtime or homework period.
Add application rules only when needed
Under CyberSecure, Protection and Simple App Blocking, choose the same devices or network, select specific apps or categories and add a schedule. Avoid broad blocks that interfere with schoolwork or family communication.
Test each rule from the child side
Confirm an allowed site opens, a deliberately blocked category does not, SafeSearch is enforced and internet access stops at the scheduled time. Check that adult and essential home devices remain unaffected.
TROUBLESHOOT WITH CONTEXT
Know what is happening at the gateway—and what is not.
Filtering is domain-based
UniFi content filtering redirects DNS requests through the gateway. It can block a domain without understanding every page or message inside an allowed service.
Private DNS can interfere
Encrypted DNS, Android Private DNS, iCloud Private Relay, client VPNs and proxies can prevent some DNS-based controls from behaving as expected.
Home network only
The policies do not follow a phone onto mobile data, school Wi-Fi, another household’s connection or a separate hotspot.
Menus can move
Policy Engine paths and capabilities differ across Network versions and gateway models. Match the official page to the release you are running.
Policies can overlap
When several custom rules target the same device, rule order and scope matter. Start with one filter and one schedule before adding exceptions.
Keep on-device controls
Screen Time, Family Link and app-specific controls remain necessary for offline use, mobile connections, purchases, contacts and permissions.
Official Ubiquiti guidanceConfigure content filtering, SafeSearch and schedules ↗Create device, group and internet policies ↗Configure application filtering and schedules ↗Understand DNS privacy features, VPNs and filtering limits ↗
Last reviewed 15 August 2026. UniFi features and menu names vary by gateway, licence and Network version. Back up a working configuration and check Ubiquiti’s current instructions before applying a policy. This is practical family guidance, not emergency safeguarding advice. Find UK help and reporting services.
PARENT-WRITTEN GUIDANCE
Begin with one child group, one filter and one schedule.
Test the result from the child’s device, record deliberate exceptions and keep device-level controls in place for protection away from home.
Suggest an improvement →