Cambium NSE 3000 - Security & SD-WAN Gateway

SME Security & SD-WAN Appliance for up to 100 users

The Network Service Edge (NSE) delivers advanced security, network and WAN services for small and medium enterprise networks. These services are integrated into Cambium’s ONE Network solution that enables organizations to deploy and manage security policy across the wireless and wired network, all fully managed and controlled as part of a single framework.

Model NSE 3000 features two Gigabit WAN ports and four Gigabit LAN ports and offers reliable connectivity with WAN throughputs of up to 1 Gbps. An industry-leading IDS/IPS engine, advanced application and Geo-IP firewalls, a network security scanner, anti-malware protection, SD-WAN for cutting edge application visibility and control.

Security

• With a single click, enable intrusion detection or prevention and let the industry-leading IDS/IPS engine protect your network against threats. This engine supports both community and paid premium rules.
• Create advanced firewall layer-3 and application based rules to protect your network.
• Use Geo-IP filters to deny or allow traffic to/from specific countries
• Get an audit of security vulnerabilities for devices on your network. Get notified when critical vulnerabilities are discovered and reported.

SD-WAN & Traffic Engineering

• Set up WAN-links to share traffic or configure them in an active-backup fashion
• Share traffic on both WAN-links and specify the traffic load
• Tracks WAN link health and automatically fails over traffic to the performing link
• Prioritize business-critical applications and restrict bandwidth for non-critical apps
• Easily prioritize and allot reserved bandwidth for time-sensitive voice applications

Network Services

• Create separate networks for employees, guests and IoT devices with ease.
• Enable traffic shaping and rate-limiting policies to cap internet bandwidth for guests
• Use the on-box RADIUS server to create user accounts and setup secure network authentication for all users and devices on your network
• NSE includes and on-box DNS-server. Use it to block known malware sites and other unwanted sites with a single click
• NSE supports Dynamic DNS updated for WAN-interfaces. Create easy to remember hostnames to expose on-premise services
• NSE keeps all databases current and always updated - intrusion rules, vulnerability reports, device signatures, GEO-IP databases, malware sites database

Remote Connectivity

• Enable remote workers to log in to your network securely from any device. The NSE supports the industry standard and widely supported L2TP-IPsec VPN
• Turn on Multi-Factor Authentication to enhance password-based authentication. Offers MFA via Google Authenticator
• Use the built-in Dynamic DNS feature to expose the VPN service via an easy to remember and fixed hostname

Analytics

• Get a comprehensive overview and security analysis of all the devices on your network via our cloud management platform
• Use the IPS dashboard o gain insight on intrusion attempts. Use the insight to refine prevention policy and enhance intrusion rule sets
• Get a network security audit of all devices on your network. Patch and remediation measures are provided to help you secure your devices
• Get deep insight into all the application traffic on your network. Use the insight to craft granular policies to prioritize and allocate sufficient bandwidth to business-critical apps

Cloud Management

• NSE 3000 is completely managed by the easy-to-use, secure and cloud-hosted Cambium Networks cnMaestro Management System. A single-pane-of-glass platform to operate and manage all Cambium enterprise products - NSE, Enterprise Wi-Fi and cnMatrix switches
• Zero-touch provisioning. Power on the device and have it automatically managed and configured
• Reusable configuration groups allow easy onboarding of multiple sites
• Dashboard widgets that give you a comprehensive overview of device and network health
• Insight and stats on all connected devices on your network
• Easy to consume data on intrusion attempts - severity, details, country of origin and remedial measures
• Network Security audit of all device on your network. Patch and remediation measures are provided to help you secure your devices

Hardware Features

• 2 x 1 GbE WAN interfaces (RJ45 or SFP)
• 4 x 1 GbE LAN ports
• 2 x USB 3.0
• 1 x console port
• Up to 945 Mbps Layer 3 forwarding throughput
• Up to 917 Mbps Advanced firewall throughput NAT+AVC)
• Up to 911 Mbps Throughput with NAT + AVC + IDS + ACL
• Up to 300 Mbps VPN client throughput