NSE roadmap & device roadmap

Cambium team -

Kindly keep this section updated regarding NSE roadmap / development and product hardware improvements. We want more transparency as we start deploying the NSE appliances to customers.

Feature requests:
Where is IPV6
Will Cambium release a virtual appliance device for Azure [Similar to Meraki vMX]?
Cambium provided DDNS [That way it will auto-apply DDNS address to WAN interfaces]
Cambium Auto-VPN to remote Cambium NSE’s [Site to site VPN] MESH VPN, etc.

Rack mount kit?
What about other NSE appliances that have more than 900Mbps total throughput… We have customers with 1Gbe fiber connections.

What about Layer3 routing protocols [OSPF, BGP, etc]. Or will there be a line in the sand for what market vertical Cambium is looking to fill. We can use other hardware vendors for that.

Will Cambium develop their own Cambium VPN client software? Compete with Cisco AnyConnect, Palo GlobalProtect, Sonicwall… Yes, there is “WireGuard”; but still not as good as a dedicated SSL VPN client.

IF Cambium taking NSE seriously - love to see the effort and transparency. Given the hardware costs, plus subscriptions.

If the Cambium VPN software is licensed based - that is fine. Most customers would easily pay for it to not use L2TP or Wireguard.

Hi Anthony,

Auto VPN will be available in Q1. We also expect to announce a rack mount kit for the NSE 3000 in the next few months.

We do have appliances with higher throughput in development and we plan to add IPv6 and dynamic routing, but the timeline for these is beyond the typical 6 month public roadmap that we announce.

As there are many free / low cost DNS service providers (I myself use Cloudflare - great availability and they charge only the registrar fees for a domain) that let you use DDNS with a custom domain, we do not provide a Cambium hosted DDNS service and instead support many of these third party services, but are open to reconsidering this based on customer feedback.

I’ve noted your input on SSL VPN and the virtual appliance. We periodically reevaluate our roadmap and feedback like this is very helpful in reprioritizing items and adding them to the roadmap.

Thank you for the detailed comments. If you’d like to further discuss your SD-WAN / security requirements on a call please send me direct message.

Appreciate the input here!

It would be a great value add for Cambium to provide, again – for the “X” subscription? Why “X” name – should be cnMaestro “Complete” - just weird for us as we make the transition. When its provided as value add or included feature, it is one less product stack we have to manage for ourselves and customers.

Hopefully Cambium puts thoughts into their own VPN software client, it will be welcomed.

A virtual appliance would be amazing, plus a NSE 4000 or NSE 5000 would be a great addition.

1 Like

I vote for this. Cambium will need to continue developing and release more features. Virtual appliance and their own VPN appliance if they really want to be competitive.

Virtual appliance for Azure to take advantage of future Auto VPN.

Wandering face book, I see a subscription free model for this.

Does that return it to the features of 2022/2023 or something?

Without a subscription, here are the features (this is the Security feature set):

  • SD-WAN
    • WAN Active-Active and Active-Backup
    • Layer-3 and Layer-7 flow preferences
  • Site-to-Site VPNs
    • IKEv1, IKEv2
  • Remote VPN
    • L2TP-IPSec, IKEv2, WireGuard
  • Next-Gen Firewall
    • Layer-3 and Layer-7 (application-based)
  • Intrusion Detection and Prevention
    • Choice of free and commercial rulesets
  • Application Visibility and Control
  • LAN Services (DHCP, RADIUS)
  • Cloud-Managed via cnMaestro

With a Security Plus subscription (the already-existing NSE-SUB-3000-1/3/5 part numbers), you get all of the above, plus:

  • Geo-IP Firewall
  • DNS Content Filtering
    • 80+ categories
    • Fast with data caches around the world
  • LAN Vulnerability Assessment
  • High Availability
    • 1 + 1 in Active-Backup mode
  • Auto VPN
    • One-click setup of VPN tunnels
  • IoT Device Identification
  • cnMaestro Reports and Analytics

Interesting for the without a subscription model. Can we still add cambium care for warranty? We do not see that SKU [just purchased the NSE 3000].

Without subscription for security, makes the NSE 3000 very competitive against Fortigate 40.

Love to see the NSE 4000 with more power. We feel the 3000 is great for small branch offices, but issue is only 900Mbps UTM.

I don’t know the answer for Cambium Care, but for plain extended warranty you can use the EW-ExNSE3000-WW part numbers, where x is 1, 2, 3 or 4 for 1/2/3/4 years.

Thanks for this. I’ll double check with distribution.

We should of just purchased the NSE without subscription, and added extended warranty for this particular customer/use-case.

Last question. With the NSE and NO subscription associated can we still manage under a single cnMaestro “X” tenant for MSP style management? Or again, these have to be shelved to a separate tenant account.

I’m afraid that you will need the Security Plus subscription if you want to put an NSE3000 in a cnMaestro X account. The subscription-free version can only be used with cnMaestro Essentials.

Thanks,

Can you all "clean’ up the licensing naming or better matrix? Security Plus does not equal or appear to be same as “cnMaestro X” license. Hence confusion.

Also, never had answers as to what process is for when we convert a “customer/tenant” and need “X” feature set as we are IT/MSP/Installer. How do we migrate devices. I can open another thread, as stilll looking for info on how we would offload a customer if they decide to goto another vendor [If we hold the licenses and tied to our cnMaestro X master account].

I agree, we ought to have a knowledge base article that explains the licensing options. It is complicated.

I believe you can move devices between accounts by “offboarding” them from the original account, at which point you can then onboard them to another account like normal.

To move subscriptions between accounts, you need to raise a support ticket. The support team will be able to remove licenses from the original account and create equivalent ones in the destination account.

If you would prefer, there is also a “pay monthly” option for cnMaestro X whereby Cambium can bill you directly for the devices in your account. When you remove devices from the account, you are automatically no longer billed for them.

The way I think about it is:

  • Security Plus is a built-in feature (automatically included) in cnMaestro X
  • You can also use Security Plus in cnMaestro Essentials by purchasing the NSE-SUB-3000-1/3/5 subscription.

:frowning:

People have been asking for IPv6 support since more than a year and I was interviewed by Cambium colleagues more than 6 months ago and it’s still not even on the public roadmap?

The NSE is sitting around gathering dust for quite a while now and IPv6 has been a mandatory RFC requirement for more than a decade already.