NSE release 2.5-b2 is available for NSE3000 and NSE4000. You can download it from the support portal under the beta releases section. Click on Join Beta and agree to the terms to access the release files.
This release incorporates the following changes with respect to 2.4-r1.
The following features no longer require a Security Plus subscription when configured using the device UI. They will be available on all devices including ones that have never been connected to cnMaestro cloud
- High availability
- Geo-IP firewall
- Tailscale
- Virtual WAN
- RADIUS Proxy
The cnMaestro UI will continue to only show these features if you have a Security Plus subscription. So if you don’t have one, you will need to configure these from the device UI.
In addition, the following Beta features are available
- A new web UI with extensive monitoring and full configuration support. To enable this, log in to the device web UI and click on Management → Switch to the full web interface or configure the
[no] management full-webuiconfig option using the CLI - A Prometheus collector that exposes various metrics. This can be integrated with Grafana, VictoriaMetrics and other similar products for monitoring and alerts. Configure this in the full web UI under Management → Prometheus Collector or configure the
[no] management prometheus-collectorconfig option using the CLI.
Both services can be accessed over the LAN, or remotely using Tailscale or a Wireguard VPN.
This is a beta release that has undergone limited testing. While we expect that, except for the changes mentioned above, the firmware will behave substantially identical to release 2.4, it should only be deployed if you require the above features. Test the release in your environment before deploying in production.
In addition, the following documents are available with this release:
- A draft CLI reference guide NSE-CLI-Reference-v2.5-b1.pdf . This is a draft version and may contain errors.
- An OpenAPI specification openapi-v2.5-b1.yaml for the REST API used by the web UI, which can also be used by third party products.

