Harden Unifi Dream Pro Network

I’ve just installed a residential UniFi Dream Machine Pro with Protect and I want the whole environment tightened up before it goes live.

Here’s what I need:

• Build a solid firewall policy from scratch—block known-bad IP ranges, close unnecessary ports, and create custom rules that fit my lifestyle
• Activate and fine-tune UniFi’s Threat Management (IDS/IPS) so intrusion attempts are detected and stopped automatically.
• Set up live and historic monitoring for web and email traffic, with clear dashboards and alerting inside the UniFi controller.
• Check VLAN design and switch settings to be sure lateral movement is limited.
• A short hand-off session so I understand how to review logs, update rules, and keep everything current.

Acceptance criteria: the controller shows no open ports beyond what we agree on, IDS/IPS is running without false positives, and I can pull a clean report on web/email usage anytime.

Let me know your approach to the firewall rule set and IDS tuning, plus how much remote time you’ll need to wrap this up.