Cambium Networks NSE3000 Network Service Edge

Cambium Networks introduces Network Service Edge (NSE) firewall for delivering advanced security, routing and SD-WAN policies for small and medium enterprises. Model NSE 3000 features two Gigabit WAN ports and four Gigabit LAN ports and offers reliable connectivity with WAN throughputs of up to 1 Gbps. An industry-leading IDS/IPS engine, advanced application and Geo-IP firewalls, a network security scanner, anti-malware protection, SD-WAN for cutting edge application visibility and control.

Security

- With a single click, enable intrusion detection or intrusion prevention and let the industry-leading IDS/IPS engine protect your network against threats. This engine supports community and paid premium rules.
- Create advanced firewall layer-3 and application-based rules to protect your network. Use Geo-IP filters to deny or allow traffic to/from specific countries
- Two Gigabit WAN ports and four Gigabit LAN ports and offer reliable connectivity with WAN Load balancing
- Get an audit of security vulnerabilities for devices on your network. Get notified when critical vulnerabilities are discovered and reported

SD-WAN and Traffic Engineering:

- Set up WAN links to share traffic or configure them in an active-backup fashion
- Share traffic on both WAN links and specify the traffic share
- Tracks WAN link health and automatically fails over traffic to the performing link.
- Prioritise business-critical applications and restrict bandwidth for non-critical apps
- Easily prioritise and allot reserved bandwidth for timesensitive voice applications

Remote Connectivity

- Enable remote workers to log in to your network securely from any device. The NSE supports the industry standard and widely supported L2TP-IPsec VPN
- Turn on Multi-Factor Authentication to enhance password-based authentication. Offers MFA via Google Authenticator
- Use the in-built Dynamic DNS feature to expose the VPN service via an easy to remember and fixed hostname Analytics
- Get a comprehensive overview and security analysis of all the devices on your network via our cloud management platform
- Use the intrusion prevention dashboard to gain insight on intrusion attempts. Use the insight to refine prevention policy and enhance intrusion rule sets.
- Get a network security audit of all devices on your network. Patch and remediation measures are provided to help you secure your devices
- Get deep insight into all the application traffic on your network. Use the insight to craft granular policies to prioritise and allocate sufficient bandwidth to business critical apps

Network Services

- Create separate networks for employees, guests and IoT devices with ease. Our VLAN and DHCP configuration make this setup a breeze
- Enable traffic shaping and rate-limiting policies to cap internet bandwidth for guests
- Use the on-box RADIUS server to create user accounts and setup secure network authentication for all the users and devices on your network
- NSE includes an on-box DNS server. Use it to block known malware sites, porn and gambling websites with a single click
- NSE supports Dynamic DNS updates for WAN interfaces. Create easy to remember hostnames to expose on-premise services
- NSE keeps all databases current and always updated - intrusion rules, vulnerability reports, device signatures, Geo-IP databases, malware sites database

Features

- Free cloud management in cnMaestro Essentials with Security feature set
- Subscription based cloud management in cnMaestro X with Security Plus feature set (NSE-SUB-3000-1, NSE-SUB-3000-3 or NSE-SUB-3000-5)
- Unified Threat Management
- SD-WAN Edge
- Network services: RADIUS, DHCP, DNS
- Remote connectivity: VPN with MFA