Next-Gen Firewall and Unified Threat Management
Network Service Edge (NSE) delivers a next-gen firewall and unified threat management (UTM) for organizations requiring a complete security and SD-WAN solution. NSE enables Cambium’s ONE Network, unifying Wi-Fi, switching, security, SD-WAN, wireless backhaul, and fiber in a single, cloud-managed network.
Cambium Networks’ NSE 3000 delivers best-in-class advanced security, SD-WAN, and network services for small to medium enterprise networks. Additionally, NSE 3000 features 6 multi-gig (1G) Ethernet ports 945 Mbps firewall / 911 Mbps encrypted IPS throughput.
Resilient application-intelligent WAN edge
Network protection for ongoing/emerging threats
Core services in one integrated solution
NSE 3000 provides 24×7 vulnerability assessment for all wireless and wired devices connected to the local network. The service runs periodic scans to detect CVE (Common Vulnerabilities and Exposures) and provides a score with recommended remediation.
NSE 3000 addresses the cyber security risks and scale challenge of supporting OT/IoT devices on the network. These devices often cannot be readily updated to address security issues and need to be proactively monitored. Via AI-based methods, NSE automatically identifies and protects IoT devices from external threats.
Application Control on NSE provides visibility and control of more than 5,000 apps. Block, rate-limit, or prioritize applications based on desired business outcomes. Segment ISP traffic across multiple WAN links based on different latency and performance requirements.
NSE 3000 integrates with Starlink® satellite internet systems to improve manageability, security, and enterprise scalability on networks using these systems. Monitor throughput, latency, drops, dish alignment, and more in real-time across multiple sites.
NSE 3000 enables public IP addressing over CGNAT. Assign real, static public IPv4 addresses to remote locations behind Starlink, LTE or any CGNAT network using WireGuard® VPNs to ensure consistent and always-reachable IP access.
NSE 3000 provides the security and SD-WAN edge for an end-to-end Cambium network that delivers holistic security and visibility for the wireless and wired LAN. Together with cnMaestro™, you can build a complete and easy-to-deploy network managed from one console.
Compare Tiers
| Feature | Security No subscription | Security Plus Recommended |
|---|---|---|
| SD-WAN | ||
| WAN Load Balancing (Active-Active & Active-Backup) | ✓ | ✓ |
| Flow Preferences (L3 & L7) | ✓ | ✓ |
| Traffic Shaping | ✓ | ✓ |
| Failover Policies | ✓ | ✓ |
| VPN | ||
| Site-to-Site VPN (IKEv1, IKEv2 — Hub & Spoke, Mesh) | ✓ | ✓ |
| Remote VPN (L2TP-IPSec, IKEv2, WireGuard) | ✓ | ✓ |
| Virtual WAN — Public IP over CGNAT (WireGuard) | — | ✓ |
| Auto VPN (One-Click Tunnel Setup) | — | ✓ |
| IoT Device Identification | — | ✓ |
| Firewall | ||
| Next-Gen Firewall — Layer 3 (IP-based) | ✓ | ✓ |
| Next-Gen Firewall — Layer 7 (Application-based) | ✓ | ✓ |
| Geo-IP Firewall (LAN→WAN & WAN→LAN) | — | ✓ |
| Threat Protection | ||
| Intrusion Detection & Prevention (IDS/IPS) | ✓ | ✓ |
| LAN Vulnerability Assessment | — | ✓ |
| Content Filtering | ||
| DNS Content Filtering (80+ categories, Safe Search) | — | ✓ |
| Analytics & Visibility | ||
| Application Visibility & Control | ✓ | ✓ |
| RADIUS Authentication | ✓ | ✓ |
| cnMaestro Reports & Analytics | — | ✓ |
| Cloud Management | ||
| cnMaestro Essentials | ✓ | ✓ |
| cnMaestro X | — | ✓ |
| High Availability | ||
| 1+1 Active-Backup HA | — | ✓ |
