Cambium Networks:

NSE 3000

The Network Service Edge (NSE) functions as the WAN edge, providing firewalling, network security and network function services

Cambium Networks introduces Network Service Edge (NSE) for delivering advanced security, routing, and SD-WAN policies for small and medium enterprises. Integrated into Cambiums ONE Network solution enabling organisations to deploy and manage security policy across the network and wired network, all fully managed and controlled as part of a single framework.

NSE 3000 features two Gigabit WAN ports and four Gigabit LAN ports offering reliable connectivity with WAN throughputs of up to 1 Gbps. An industry-leading IDS/IPS engine, advanced application and Geo-IP firewalls, a network security scanner, anti-malware protection, and SD-WAN for cutting-edge application visibility and control.

SD-WAN

Establish a resilient and
application-intelligent WAN edge

Routing
WAN Load-Balancing and failover
Bandwidth Control
WAN QoS

NETWORK SERVICES

Deliver core services in one
integrated solution

DHCP
RADIUS
Directory connectors

SECURITY

Ensure network protection dynamically
for ongoing and emerging threats

Firewall
ISD / IPS
VPN with MFA
IoT Security
LAN security assessment
Zero Trust Network Access (ZTNA) – coming soon

Front

BACK / PORTS

Cambium Network Service Edge NSE3000 rear view

BOTTOM

SIDE PANEL

Cambium NSE 3000 Overview

Security

With a single click, enable intrusion detection or prevention and let the industry-leading IDS/IPS engine protect your network against threats. This engine supports community and paid premium rules.
Create advanced firewall layer-3 and application-based rules to protect your network. Use Geo-IP filters to deny or allow traffic to/from specific countries.
Get an audit of security vulnerabilities for devices on your network. Get notified when critical vulnerabilities are discovered and reported

SD-WAN and Traffic Engineering

Set up WAN links to share traffic or configure them in an active-backup fashion
Share traffic on both WAN links and specify the traffic share
Tracks WAN link health and automatically fails over traffic to the performing link
Prioritise business-critical applications and restrict bandwidth for non-critical apps
Quickly prioritise and allot reserved bandwidth for time-sensitive voice applications

Remote Connectivity

Enable remote workers to log in to your network securely from any device. The NSE supports the industry standard and widely supported L2TP-IPsec VPN
Turn on Multi-Factor Authentication to enhance password-based authentication. Offers MFA via Google Authenticator
Use the in-built Dynamic DNS feature to expose the VPN service via an easy-to-remember and fixed hostname

Network Services

Create separate networks for employees, guests and IoT devices with ease. Our VLAN and DHCP configuration make this setup a breeze
Enable traffic shaping and rate-limiting policies to cap internet bandwidth for guests
Use the on-box RADIUS server to create user accounts and setup secure network authentication for all the users and devices on your network
NSE includes an on-box DNS server. Use it to block known malware sites, adult content websites and gambling websites with a single click
NSE supports Dynamic DNS updates for WAN interfaces. Create easy-to-remember hostnames to expose on-premise services
NSE keeps all databases current and always updated – intrusion rules, vulnerability reports, device signatures, Geo-IP databases, malware sites database

Cloud Management

NSE 3000 is fully managed by the easy-to-use, secure, cloud-hosted Cambium Networks cnMaestro Management system. Single-pane-of-glass management to operate and manage all Cambium enterprise products – NSE 3000 devices, Enterprise Wi-Fi and cnMatrix switches
Zero-touch provisioning. Power on the device and have it automatically managed and configured
Reusable configuration groups allow easy onboarding of multiple sites
Dashboard widgets that give you a comprehensive overview of device and network health
Insight and stats on all connected devices on your network
Easy to consume data on intrusion attempts – severity, details, country of origin and remedial measures
Network security audit of all devices on your network. Patch and remediation measures are provided to help you secure your devices

Analytics

Get a comprehensive overview and security analysis of all the devices on your network via our cloud management platform
Use the intrusion prevention dashboard to gain insight into intrusion attempts. Use the insight to refine prevention policy and enhance intrusion rule sets.
Get a network security audit of all devices on your network. Patch and remediation measures are provided to help you secure your devices
Get deep insight into all the application traffic on your network. Use the insight to craft granular policies to prioritise and allocate sufficient bandwidth to business-critical apps