Cambium Networks:

Network Service Edge

The Network Service Edge (NSE) functions as the WAN edge, providing firewalling, network security and network function services

Cambium Networks introduces Network Service Edge (NSE) for delivering advanced security, routing, and SD-WAN policies for small and medium enterprises. Integrated into Cambium’s ONE

Network solution enabling organisations to deploy and manage security policy across the network and wired network, all fully managed and controlled as part of a single framework.

Cambium NSE 4000 Overview

For organisations that need to deploy secure and scalable enterprise networks, Cambium Networks announces an expansion of Network Service Edge (NSE) with the NSE 4000 model. NSE delivers advanced security, routing and SD-WAN policies for small and medium enterprises as part of Cambium’s ONE Network. Cambium unifies Wi-Fi, switching, security, SD-WAN, wireless backhaul and fibre in a single cloud-managed network, giving IT complete network control and ensuring robust end-to-end security. NSE is a 4-in-1 solution delivering functionality in four key areas:

High-Performance SD-WAN and UTM

Next-generation firewall, IPS/IDS, application visibility and control, site-to-site and remote VPN, multi-WAN
DHCP/DNS/Radius-Server, Auto-VLAN
Wireguard VPN

DNS-Based Content Filter

Protect users from malicious, illegal and undesirable content
Fast, accurate, reliable, with 80+ categories and sub-categories, with safe search options

Vulnerability Assessment

Proactive 24×7 scan and vulnerability assessment of all LAN devices
Vulnerability data, attack probabilities, known attack data and workflows for management

Asset Discovery

Detection and inventory of all the devices on the network
Top-of-the-line device identification – Type, brand, operating system
Application prioritisation for wired clients via Cambium’s ONE Network

Cambium Networks NSE 4000 SD WAN Network Service Edge

NSE 4000: Solution Guide

NSE 4000 SOLUTION GUIDE

NSE 4000: Datasheet

DOWNLOAD NSE4000 DATASHEET

Cambium NSE3000 Overview

Security

With a single click, enable intrusion detection or prevention and let the industry-leading IDS/IPS engine protect your network against threats. This engine supports community and paid premium rules.
Create advanced firewall layer-3 and application-based rules to protect your network. Use Geo-IP filters to deny or allow traffic to/from specific countries.
Get an audit of security vulnerabilities for devices on your network. Get notified when critical vulnerabilities are discovered and reported

SD-WAN and Traffic Engineering

Set up WAN links to share traffic or configure them in an active-backup fashion
Share traffic on both WAN links and specify the traffic share
Tracks WAN link health and automatically fails over traffic to the performing link
Prioritise business-critical applications and restrict bandwidth for non-critical apps
Quickly prioritise and allot reserved bandwidth for time-sensitive voice applications

Remote Connectivity

Enable remote workers to log in to your network securely from any device. The NSE supports the industry standard and widely supported L2TP-IPsec VPN
Turn on Multi-Factor Authentication to enhance password-based authentication. Offers MFA via Google Authenticator
Use the in-built Dynamic DNS feature to expose the VPN service via an easy-to-remember and fixed hostname

Network Services

Create separate networks for employees, guests and IoT devices with ease. Our VLAN and DHCP configuration make this setup a breeze
Enable traffic shaping and rate-limiting policies to cap internet bandwidth for guests
Use the on-box RADIUS server to create user accounts and setup secure network authentication for all the users and devices on your network
NSE includes an on-box DNS server. Use it to block known malware sites, adult content websites and gambling websites with a single click
NSE supports Dynamic DNS updates for WAN interfaces. Create easy-to-remember hostnames to expose on-premise services
NSE keeps all databases current and always updated – intrusion rules, vulnerability reports, device signatures, Geo-IP databases, malware sites database

Cloud Management

NSE 3000 is fully managed by the easy-to-use, secure, cloud-hosted Cambium Networks cnMaestro Management system. Single-pane-of-glass management to operate and manage all Cambium enterprise products – NSE 3000 devices, Enterprise Wi-Fi and cnMatrix switches
Zero-touch provisioning. Power on the device and have it automatically managed and configured
Reusable configuration groups allow easy onboarding of multiple sites
Dashboard widgets that give you a comprehensive overview of device and network health
Insight and stats on all connected devices on your network
Easy to consume data on intrusion attempts – severity, details, country of origin and remedial measures
Network security audit of all devices on your network. Patch and remediation measures are provided to help you secure your devices

Analytics

Get a comprehensive overview and security analysis of all the devices on your network via our cloud management platform
Use the intrusion prevention dashboard to gain insight into intrusion attempts. Use the insight to refine prevention policy and enhance intrusion rule sets.
Get a network security audit of all devices on your network. Patch and remediation measures are provided to help you secure your devices
Get deep insight into all the application traffic on your network. Use the insight to craft granular policies to prioritise and allocate sufficient bandwidth to business-critical apps