The Network Service Edge (NSE) delivers advanced security, network and WAN services for small and medium enterprise networks. These services are integrated into Cambium’s ONE Network solution that enables organizations to deploy and manage security policy across the wireless and wired network, all fully managed and controlled as part of a single framework.
NSE 3000 Quick Look
- Cloud-managed with cnMaestro™
- Unified threat management
- SD-WAN Edge
- Network services: RADIUS, DHCP, DNS
- Remote connectivity: VPN with MFA
Overview
Cambium Networks introduces Network Service Edge (NSE) for delivering advanced security, routing, and SD-WAN policies for small and medium enterprises.
Model NSE3000 features two Gigabit WAN ports and four Gigabit LAN ports and offers reliable connectivity with WAN throughputs of up to 1 Gbps. NSE 3000 has an industry-leading IDS/IPS engine with advanced application and Geo-IP firewalls, a network security scanner, anti-malware protection, and SDWAN for cutting edge application visibility and control. NSE 3000 supports high availability in active-standby mode, ensuring continuous network operation.
Security
- With a single click, enable intrusion detection or intrusion prevention and let the industry-leading IDS/IPS engine protect your network against threats.
- Create secure tunnels between multiple sites or connect securely to a central site with our site-to-site VPN.
- Create advanced firewall layer-3 and application-based rules to protect your network. Use Geo-IP filters to deny or allow traffic to/from specific countries.
- Audit security vulnerabilities with always-on LAN vulnerability scans and get notified when critical ones are discovered.
- Filter malware and undesired content with our DNS content filter. Select options to block from over 88+ categories of domain names. This helps you enforce CIPA guidelines for the K–12 customer segment.
SD-WAN and Traffic Engineering:
- Set up WAN links to share traffic or configure them in an active-backup fashion.
- Share traffic on both WAN links and specify the traffic share.
- Tracks WAN link health and automatically fails over traffic to the performing link.
- Prioritize business-critical applications and restrict bandwidth for non-critical apps.
- Easily prioritize and allot reserved bandwidth for time-sensitive voice applications.
Auto VPN, Site-to-Site, and Remote Access VPN
- Auto-VPN: Effortlessly create secure tunnels between multiple sites or connect tens of remote sites to a central hub with just a couple of clicks.
- Enable remote workers to log in to your network securely from any device. NSE 3000 supports industry standard WireGuard, L2TP-IPSec, and IKEv2-EAP protocols for remote access VPN.
- Turn on multi-factor authentication to enhance password-based authentication. Offers MFA via Google Authenticator.
Analytics
- Get a comprehensive overview and security analysis of all the devices on your network via Cambium’s cnMaestro cloud management platform.
- Use the intrusion prevention dashboard to gain insight on intrusion attempts. Use the insight to refine prevention policy and enhance intrusion rule sets.
- Get a network security audit of all devices on your network. Patch and remediation measures are provided to help you secure your devices
- Get deep insight into all the application traffic on your network. Use the insight to craft granular policies to prioritize and allocate sufficient bandwidth to business-critical apps.
Network Services
- Create separate networks for employees, guests, and IoT devices with ease. Our VLAN and DHCP configuration make this setup a breeze.
- Enable traffic shaping and rate-limiting policies to cap internet bandwidth for guests.
- Use the on-box RADIUS server to create user accounts and set up secure network authentication for all the users and devices on your network.
- NSE supports Dynamic DNS updates for WAN interfaces. Create easy-to-remember host names to expose on-premise services.
- NSE keeps all databases current and always updated - intrusion rules, vulnerability reports, device signatures, Geo-IP databases, malware sites database.
Cloud Management
- NSE 3000 is completely managed by the easy-to-use, secure, and cloud-hosted Cambium Networks cnMaestro Network Management system. A single-pane-of-glass management system to operate and manage all Cambium enterprise products (NSE 3000, Enterprise Wi-Fi, and cnMatrix switches).
- NSE 3000 works without subscription and includes strong built-in security features. A subscription adds advanced security and additional features.
- Zero-touch provisioning: Power on the device and have it automatically managed and configured.
- Reusable configuration groups allow easy onboarding of multiple sites.
- Dashboard widgets that give you a comprehensive overview of device and network health.
- Insight and stats on all connected devices on your network.
- Easy to consume data on intrusion attempts - severity, details, country of origin, and remedial measures.
- Network security audit of all devices on your network: Patch and remediation measures are provided to help you secure your devices.
