Description
Cambium Networks introduces Network Service Edge (NSE) firewall for delivering advanced security, routing and SD-WAN policies for small and medium enterprises. Model NSE 3000 features two Gigabit WAN ports and four Gigabit LAN ports and offers reliable connectivity with WAN throughputs of up to 1 Gbps. An industry-leading IDS/IPS engine, advanced application and Geo-IP firewalls, a network security scanner, anti-malware protection, SD-WAN for cutting edge application visibility and control.
Security
• With a single click, enable intrusion detection or intrusion prevention and let the industry-leading IDS/IPS engine protect your network against threats. This engine supports community and paid premium rules.
• Create advanced firewall layer-3 and application-based rules to protect your network. Use Geo-IP filters to deny or allow traffic to/from specific countries
• Two Gigabit WAN ports and four Gigabit LAN ports and offer reliable connectivity with WAN Load balancing
• Get an audit of security vulnerabilities for devices on your network. Get notified when critical vulnerabilities are discovered and reported
SD-WAN and Traffic Engineering:
• Set up WAN links to share traffic or configure them in an active-backup fashion
• Share traffic on both WAN links and specify the traffic share
• Tracks WAN link health and automatically fails over traffic to the performing link.
• Prioritise business-critical applications and restrict bandwidth for non-critical apps
• Easily prioritise and allot reserved bandwidth for timesensitive voice applications
Remote Connectivity
• Enable remote workers to log in to your network securely from any device. The NSE supports the industry standard and widely supported L2TP-IPsec VPN
• Turn on Multi-Factor Authentication to enhance password-based authentication. Offers MFA via Google Authenticator
• Use the in-built Dynamic DNS feature to expose the VPN service via an easy to remember and fixed hostname Analytics
• Get a comprehensive overview and security analysis of all the devices on your network via our cloud management platform
• Use the intrusion prevention dashboard to gain insight on intrusion attempts. Use the insight to refine prevention policy and enhance intrusion rule sets.
• Get a network security audit of all devices on your network. Patch and remediation measures are provided to help you secure your devices
• Get deep insight into all the application traffic on your network. Use the insight to craft granular policies to prioritise and allocate sufficient bandwidth to business critical apps
Network Services
• Create separate networks for employees, guests and IoT devices with ease. Our VLAN and DHCP configuration make this setup a breeze
• Enable traffic shaping and rate-limiting policies to cap internet bandwidth for guests
• Use the on-box RADIUS server to create user accounts and setup secure network authentication for all the users and devices on your network
• NSE includes an on-box DNS server. Use it to block known malware sites, porn and gambling websites with a single click
• NSE supports Dynamic DNS updates for WAN interfaces. Create easy to remember hostnames to expose on-premise services
• NSE keeps all databases current and always updated - intrusion rules, vulnerability reports, device signatures, Geo-IP databases, malware sites database
Security
• With a single click, enable intrusion detection or intrusion prevention and let the industry-leading IDS/IPS engine protect your network against threats. This engine supports community and paid premium rules.
• Create advanced firewall layer-3 and application-based rules to protect your network. Use Geo-IP filters to deny or allow traffic to/from specific countries
• Two Gigabit WAN ports and four Gigabit LAN ports and offer reliable connectivity with WAN Load balancing
• Get an audit of security vulnerabilities for devices on your network. Get notified when critical vulnerabilities are discovered and reported
SD-WAN and Traffic Engineering:
• Set up WAN links to share traffic or configure them in an active-backup fashion
• Share traffic on both WAN links and specify the traffic share
• Tracks WAN link health and automatically fails over traffic to the performing link.
• Prioritise business-critical applications and restrict bandwidth for non-critical apps
• Easily prioritise and allot reserved bandwidth for timesensitive voice applications
Remote Connectivity
• Enable remote workers to log in to your network securely from any device. The NSE supports the industry standard and widely supported L2TP-IPsec VPN
• Turn on Multi-Factor Authentication to enhance password-based authentication. Offers MFA via Google Authenticator
• Use the in-built Dynamic DNS feature to expose the VPN service via an easy to remember and fixed hostname Analytics
• Get a comprehensive overview and security analysis of all the devices on your network via our cloud management platform
• Use the intrusion prevention dashboard to gain insight on intrusion attempts. Use the insight to refine prevention policy and enhance intrusion rule sets.
• Get a network security audit of all devices on your network. Patch and remediation measures are provided to help you secure your devices
• Get deep insight into all the application traffic on your network. Use the insight to craft granular policies to prioritise and allocate sufficient bandwidth to business critical apps
Network Services
• Create separate networks for employees, guests and IoT devices with ease. Our VLAN and DHCP configuration make this setup a breeze
• Enable traffic shaping and rate-limiting policies to cap internet bandwidth for guests
• Use the on-box RADIUS server to create user accounts and setup secure network authentication for all the users and devices on your network
• NSE includes an on-box DNS server. Use it to block known malware sites, porn and gambling websites with a single click
• NSE supports Dynamic DNS updates for WAN interfaces. Create easy to remember hostnames to expose on-premise services
• NSE keeps all databases current and always updated - intrusion rules, vulnerability reports, device signatures, Geo-IP databases, malware sites database
Features
- Note the NSE Hardware requires a cnMaestro Subscription to function (NSE-SUB-3000-3)
- Cloud managed with cnMaestro™
- Unified Threat Management
- SD-WAN Edge
- Network services - RADIUS, DHCP, DNS
- Remote connectivity - VPN with MFA
| Details | |
|---|---|
| Manufacturer's Code | NSE 3000 |
| Recommended use case | Sites and branches with up to 300 devices |
| Routed throughput | 945 Mbps - Layer 3 forwarding throughput |
| Stateful throughput | 917 Mbps - Advanced firewall throughput (NAT+AVC) |
| Advanced security throughput | 911 Mbps - Throughput with NAT + AVC + IDS + ACL |
| VPN client throughput | 300 Mbps |
| WAN Ports | 2 x 1 Gbps RJ45/SFP |
| LAN Ports | 4 x 1 Gbps RJ45 |
| Mounting | Table top and Wall mount options |
| Dimensions | 175.16 mm x 232.72 mm x 43 mm |
| Weight | 0.65 kg |
| Max Power consumption | 22.8W |
| Power Supply | 40W DC |
| LEDs | Cloud connection and System indicators |
| Operating temperature | 0ºC–40ºC |
| Operating humidity | 10%–90% |
| Details | |
|---|---|
| cnMaestro | Subscription Required (Sold Separately, NSE-SUB-3000-3) |
| Power Supply | 12V 3.33A Power Adapter Included |
Specifications
| Details | |
|---|---|
| Manufacturer's Code | NSE 3000 |
| Recommended use case | Sites and branches with up to 300 devices |
| Routed throughput | 945 Mbps - Layer 3 forwarding throughput |
| Stateful throughput | 917 Mbps - Advanced firewall throughput (NAT+AVC) |
| Advanced security throughput | 911 Mbps - Throughput with NAT + AVC + IDS + ACL |
| VPN client throughput | 300 Mbps |
| WAN Ports | 2 x 1 Gbps RJ45/SFP |
| LAN Ports | 4 x 1 Gbps RJ45 |
| Mounting | Table top and Wall mount options |
| Dimensions | 175.16 mm x 232.72 mm x 43 mm |
| Weight | 0.65 kg |
| Max Power consumption | 22.8W |
| Power Supply | 40W DC |
| LEDs | Cloud connection and System indicators |
| Operating temperature | 0ºC–40ºC |
| Operating humidity | 10%–90% |
Expected Delivery Times
North Island - 2-6 Working Days
South Island - 3-10 Working Days
