The UniFi agent Docker container (portnox-unifi-agent)

In this topic, you will learn what the portnox-unifi-agent Docker container does, its requirements, how to deploy it, and how its update behavior works.

Overview

The portnox-unifi-agent Docker container connects a Ubiquiti UniFi controller to the Portnox Cloud guest network captive portal, using UniFi’s external portal server feature. It is available in the public Docker repository as portnox/portnox-unifi-agent. It has no virtual machine equivalent.

Requirements

  • The container can run on Linux, or on Windows or macOS via Docker Desktop. If running in a VM environment, we recommend Linux for the best results, since Windows and macOS would require double virtualization.

  • The container needs network access to your UniFi controller on the same local network.

  • You need a UniFi account with Site Admin privileges. A dedicated service account is recommended over using your own administrator credentials.

  • Follow the firewall rules in the following topic: How to set up the firewall for Portnox Docker containers to connect to Portnox Cloud.

Deployment

For step-by-step instructions on configuring your UniFi controller and this container together, see the following topic: Guest access – Ubiquiti UniFi.

Updates

  • If you use a Docker container running on a local Docker host, it does not update automatically, unless you also use the autoupdate container. The autoupdate container updates all Portnox Docker containers when new versions are available. Updating requires recreating the Docker container, so there may be a short service interruption.

  • If you deploy the Docker container in a cloud environment, you cannot use the autoupdate container, because it requires direct access to the local Docker engine, which these managed cloud services do not expose. You must update containers deployed this way manually by redeploying them with the latest image.