NSE3000 - Cambium Network Service Edge NSE 3000 Firewall SD-WAN Router

Cambium Networks introduces Network Service Edge (NSE) firewall for delivering advanced security, routing and SD-WAN policies for small and medium enterprises. Model NSE 3000 features two Gigabit WAN ports and four Gigabit LAN ports and offers reliable connectivity with WAN throughputs of up to 1 Gbps. An industry-leading IDS/IPS engine, advanced application and Geo-IP firewalls, a network security scanner, anti-malware protection, SD-WAN for cutting edge application visibility and control.

Security
• With a single click, enable intrusion detection or intrusion prevention and let the industry-leading IDS/IPS engine protect your network against threats. This engine supports community and paid premium rules.
• Create advanced firewall layer-3 and application-based rules to protect your network. Use Geo-IP filters to deny or allow traffic to/from specific countries
• Two Gigabit WAN ports and four Gigabit LAN ports and offer reliable connectivity with WAN Load balancing
• Get an audit of security vulnerabilities for devices on your network. Get notified when critical vulnerabilities are discovered and reported

SD-WAN and Traffic Engineering:
• Set up WAN links to share traffic or configure them in an active-backup fashion
• Share traffic on both WAN links and specify the traffic share
• Tracks WAN link health and automatically fails over traffic to the performing link.
• Prioritise business-critical applications and restrict bandwidth for non-critical apps
• Easily prioritise and allot reserved bandwidth for timesensitive voice applications

Remote Connectivity
• Enable remote workers to log in to your network securely from any device. The NSE supports the industry standard and widely supported L2TP-IPsec VPN
• Turn on Multi-Factor Authentication to enhance password-based authentication. Offers MFA via Google Authenticator
• Use the in-built Dynamic DNS feature to expose the VPN service via an easy to remember and fixed hostname Analytics
• Get a comprehensive overview and security analysis of all the devices on your network via our cloud management platform
• Use the intrusion prevention dashboard to gain insight on intrusion attempts. Use the insight to refine prevention policy and enhance intrusion rule sets.
• Get a network security audit of all devices on your network. Patch and remediation measures are provided to help you secure your devices
• Get deep insight into all the application traffic on your network. Use the insight to craft granular policies to prioritise and allocate sufficient bandwidth to business critical apps

Network Services
• Create separate networks for employees, guests and IoT devices with ease. Our VLAN and DHCP configuration make this setup a breeze
• Enable traffic shaping and rate-limiting policies to cap internet bandwidth for guests
• Use the on-box RADIUS server to create user accounts and setup secure network authentication for all the users and devices on your network
• NSE includes an on-box DNS server. Use it to block known malware sites, porn and gambling websites with a single click
• NSE supports Dynamic DNS updates for WAN interfaces. Create easy to remember hostnames to expose on-premise services
• NSE keeps all databases current and always updated - intrusion rules, vulnerability reports, device signatures, Geo-IP databases, malware sites database

Cambium Networks introduces Network Service Edge (NSE) firewall for delivering advanced security, routing and SD-WAN policies for small and medium enterprises. Model NSE 3000 features two Gigabit WAN ports and four Gigabit LAN ports and offers reliable connectivity with WAN throughputs of up to 1 Gbps. An industry-leading IDS/IPS engine, advanced application and Geo-IP firewalls, a network security scanner, anti-malware protection, SD-WAN for cutting edge application visibility and control.

Security
• With a single click, enable intrusion detection or intrusion prevention and let the industry-leading IDS/IPS engine protect your network against threats. This engine supports community and paid premium rules.
• Create advanced firewall layer-3 and application-based rules to protect your network. Use Geo-IP filters to deny or allow traffic to/from specific countries
• Two Gigabit WAN ports and four Gigabit LAN ports and offer reliable connectivity with WAN Load balancing
• Get an audit of security vulnerabilities for devices on your network. Get notified when critical vulnerabilities are discovered and reported

SD-WAN and Traffic Engineering:
• Set up WAN links to share traffic or configure them in an active-backup fashion
• Share traffic on both WAN links and specify the traffic share
• Tracks WAN link health and automatically fails over traffic to the performing link.
• Prioritise business-critical applications and restrict bandwidth for non-critical apps
• Easily prioritise and allot reserved bandwidth for timesensitive voice applications

Remote Connectivity
• Enable remote workers to log in to your network securely from any device. The NSE supports the industry standard and widely supported L2TP-IPsec VPN
• Turn on Multi-Factor Authentication to enhance password-based authentication. Offers MFA via Google Authenticator
• Use the in-built Dynamic DNS feature to expose the VPN service via an easy to remember and fixed hostname Analytics
• Get a comprehensive overview and security analysis of all the devices on your network via our cloud management platform
• Use the intrusion prevention dashboard to gain insight on intrusion attempts. Use the insight to refine prevention policy and enhance intrusion rule sets.
• Get a network security audit of all devices on your network. Patch and remediation measures are provided to help you secure your devices
• Get deep insight into all the application traffic on your network. Use the insight to craft granular policies to prioritise and allocate sufficient bandwidth to business critical apps

Network Services
• Create separate networks for employees, guests and IoT devices with ease. Our VLAN and DHCP configuration make this setup a breeze
• Enable traffic shaping and rate-limiting policies to cap internet bandwidth for guests
• Use the on-box RADIUS server to create user accounts and setup secure network authentication for all the users and devices on your network
• NSE includes an on-box DNS server. Use it to block known malware sites, porn and gambling websites with a single click
• NSE supports Dynamic DNS updates for WAN interfaces. Create easy to remember hostnames to expose on-premise services
• NSE keeps all databases current and always updated - intrusion rules, vulnerability reports, device signatures, Geo-IP databases, malware sites database