Briefing
Ubiquiti UniFi and Cisco Meraki are popular in small offices because they are managed from a single dashboard. That convenience also makes it easy to assume everything is current when it is not. Firewalls and other edge devices are frequent targets, and vulnerabilities in network equipment regularly appear on the CISA Known Exploited Vulnerabilities list.
A good routine does not mean updating the moment a release appears. It means knowing which firmware each device runs, reading release notes, updating in a maintenance window and keeping a way back if something breaks.
Admin access deserves the same care. Shared logins created by an installer years ago, still with full rights, are common. Named accounts with MFA, owned by the business, make every change traceable.
What to do
- Record the firmware version of every gateway, switch and access point.
- Review release notes monthly and schedule updates in an agreed maintenance window.
- Back up or export the configuration before every change.
- Replace shared admin logins with named accounts protected by MFA, owned by the business.
- Track license expiry dates for Meraki devices so nothing stops working unexpectedly.
How to verify
- Open the dashboard and check how many devices show an available update.
- List every admin on the account and remove anyone who no longer needs access.
- Confirm the organization or site is registered to your business, not to an installer.
Sources
- NSA, Network Infrastructure Security Guide
- CISA Known Exploited Vulnerabilities Catalog
- Ubiquiti Help Center
- Cisco Meraki Documentation
Want help putting this in place? Contact Computer Plus or compare our plans.