# So how screwed are we?

**URL:** https://community.cambiumnetworks.com/t/so-how-screwed-are-we/108833
**Category:** Enterprise Wi-Fi Networks
**Created:** [September 15, 2026, 11:58am UTC](https://community.cambiumnetworks.com/t/so-how-screwed-are-we/108833 "2026-09-15T11:58:20Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![Springs](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/s/d78d45/32.png) [@Springs](https://community.cambiumnetworks.com/u/Springs)
#### Post date: [September 15, 2026, 11:58am UTC](https://community.cambiumnetworks.com/t/so-how-screwed-are-we/108833/1 "2026-09-15T11:58:20Z")

</div>

With everything that happened… I assume we are all on borrowed time with our Cambium WiFi installs.

Anyone already offloaded there sites from cnmaestro?

Is there a guide for this yet?

---

<div class="post-metadata">

### Author: ![ntox](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/n/9d8465/32.png) [@ntox](https://community.cambiumnetworks.com/u/ntox)
#### Post date: [September 16, 2026, 2:53am UTC](https://community.cambiumnetworks.com/t/so-how-screwed-are-we/108833/2 "2026-09-16T02:53:01Z")

</div>

Offload as far as in, migrating to another vendor hardware or to on-prem instance?

I’m in process of trying on-prem… but messy without ability to split or have new cnMaestro X licenses. I’ve imported some configs for non licensed ‘essentials’ hardware.

Further question is how will Cambium and disti honor existing CCAV subscriptions for HW replacement on RMA’

Unsure what we will do four all the NSE appliances we now have in the wild.  
This is a mess.

---

<div class="post-metadata">

### Author: ![ntox](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/n/9d8465/32.png) [@ntox](https://community.cambiumnetworks.com/u/ntox)
#### Post date: [September 16, 2026, 3:42am UTC](https://community.cambiumnetworks.com/t/so-how-screwed-are-we/108833/3 "2026-09-16T03:42:38Z")

</div>

Further… if cambium licensing goes dark and TAC [which TAC has, but still only a few days].

without cloud.cambium and without licensing.cambium – we are stuck. I’m scrambing to POC the on-prem. But the issue remains of moving existing entitlements to on-prem anchor.

Only option for outdoor wifii is Umbiggi, otherwise be larger enterprise vendor - but price delta is maybe 3x…

Aruba Instant ON is also uncertain option, given the DOJ is requiring they sell their IP and portfolio.

Our options for outdoor guest wireless [enterprise] and fixed wireless are very slim. [Fixed 60Ghz is not so bad].

---

<div class="post-metadata">

### Author: ![DigitalMan2020](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/d/c6cbf5/32.png) [@DigitalMan2020](https://community.cambiumnetworks.com/u/DigitalMan2020)
#### Post date: [September 16, 2026, 4:21am UTC](https://community.cambiumnetworks.com/t/so-how-screwed-are-we/108833/4 "2026-09-16T04:21:20Z")

</div>

If I understand correctly, even if you have on premise version, if the cloud.cambium is lost then alerts and onboarding are obsolete?

---

<div class="post-metadata">

### Author: ![ntox](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/n/9d8465/32.png) [@ntox](https://community.cambiumnetworks.com/u/ntox)
#### Post date: [September 16, 2026, 4:30am UTC](https://community.cambiumnetworks.com/t/so-how-screwed-are-we/108833/5 "2026-09-16T04:30:58Z")

</div>

Yep, i believe there is still dependency. As we wont be able to claim hardware. Would have to manually import and adopt to on-prem - similar to Umbiggy.

I hope a decent network company picks up the SKU’s and cnMaestro platform… I doubt Umbiggy will… most likely be PE or a channel picking up the scraps.

Unless the RSK advisors and UK pulls head out of their arses.

---

<div class="post-metadata">

### Author: ![ntox](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/n/9d8465/32.png) [@ntox](https://community.cambiumnetworks.com/u/ntox)
#### Post date: [September 16, 2026, 3:07pm UTC](https://community.cambiumnetworks.com/t/so-how-screwed-are-we/108833/6 "2026-09-16T15:07:21Z")

</div>

Very worried here about cnMaestro Cloud being killed on October 1st.

How are we to support NSE appliances…??? Now we need to tell customers, hey - we just deployed new NSE’s to your sites last week - we have to replacement. We will take a significant financial hit if we have to eat replacement costs on switching vendor.

---

<div class="post-metadata">

### Author: ![DigitalMan2020](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/d/c6cbf5/32.png) [@DigitalMan2020](https://community.cambiumnetworks.com/u/DigitalMan2020)
#### Post date: [September 16, 2026, 3:38pm UTC](https://community.cambiumnetworks.com/t/so-how-screwed-are-we/108833/7 "2026-09-16T15:38:12Z")

</div>

If one used the on prem version, could one setup snmp to send notifications? Just trying to find work around if OCt1 is deadline

---

<div class="post-metadata">

### Author: ![ntox](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/n/9d8465/32.png) [@ntox](https://community.cambiumnetworks.com/u/ntox)
#### Post date: [September 16, 2026, 3:42pm UTC](https://community.cambiumnetworks.com/t/so-how-screwed-are-we/108833/8 "2026-09-16T15:42:45Z")

</div>

You can setup SMTP email for notifications. Unsure what you would want to do with SNMP.

I stood up on-prem cnMaestro last night. But without any cloud communication, no licensing, no anchor sites, nothing.

We are stuck – as we need to manage the NSE appliances. The hardware should all run with local configs and perhaps local management. But any NGFW features will be nuked without the cloud.

---

<div class="post-metadata">

### Author: ![DigitalMan2020](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/d/c6cbf5/32.png) [@DigitalMan2020](https://community.cambiumnetworks.com/u/DigitalMan2020)
#### Post date: [September 16, 2026, 3:44pm UTC](https://community.cambiumnetworks.com/t/so-how-screwed-are-we/108833/9 "2026-09-16T15:44:08Z")

</div>

Thank you for your reply, yes this a nightmare, SNMP to monitor tx/rx, lan ports, rssi etc of our epmp and pmp devices

---

<div class="post-metadata">

### Author: ![ntox](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/n/9d8465/32.png) [@ntox](https://community.cambiumnetworks.com/u/ntox)
#### Post date: [September 16, 2026, 3:56pm UTC](https://community.cambiumnetworks.com/t/so-how-screwed-are-we/108833/10 "2026-09-16T15:56:24Z")

</div>

Unsure if can use on-prem to deliver SNMP alerts, as that require full NMS or network monitoring. I can maybe test.

Or if others show up here that have experience with on-prem cnMaestro

---

<div class="post-metadata">

### Author: ![Springs](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/s/d78d45/32.png) [@Springs](https://community.cambiumnetworks.com/u/Springs)
#### Post date: [September 16, 2026, 5:12pm UTC](https://community.cambiumnetworks.com/t/so-how-screwed-are-we/108833/11 "2026-09-16T17:12:00Z")

</div>

According to CNMaestro… I have 239 WiFi client serving APs deployed across 70 sites, and maybe another 20 or so on the shelf.

Configuring them to be standalone is gonna be a problem for the sites that use EPSK for certain.

---

<div class="post-metadata">

### Author: ![ntox](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/n/9d8465/32.png) [@ntox](https://community.cambiumnetworks.com/u/ntox)
#### Post date: [September 16, 2026, 5:54pm UTC](https://community.cambiumnetworks.com/t/so-how-screwed-are-we/108833/12 "2026-09-16T17:54:33Z")

</div>

I have on-prem up and running. Going to start adopting a few lab/home office AP’s.

Auto-approve enabled for on-prem. Have to go into each device and modify the management:

If [cloud.cambiumnetworks.com](http://cloud.cambiumnetworks.com) goes dark – I assume devices will no longer care who owns the NMS and or where devices are registered.

cnmaestro url  
cnmaestro cambium-id YOUR\_ANCHOR\_ID  
cnmaestro onboarding-key YOUR\_KEY  
no cambium-remote validate-server-cert  
cnmaestro enable

Then you can onboard each devices - re-assigning all your customer network profile settings / configs.

---

<div class="post-metadata">

### Author: ![AbdulKarim](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/a/7ea924/32.png) [@AbdulKarim](https://community.cambiumnetworks.com/u/AbdulKarim)
#### Post date: [September 16, 2026, 5:56pm UTC](https://community.cambiumnetworks.com/t/so-how-screwed-are-we/108833/13 "2026-09-16T17:56:23Z")

</div>

might test this out actually, can just block outbound to [cloud.cambiumnetworks.com](http://cloud.cambiumnetworks.com) in lab and see what it does.

---

<div class="post-metadata">

### Author: ![ntox](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/n/9d8465/32.png) [@ntox](https://community.cambiumnetworks.com/u/ntox)
#### Post date: [September 16, 2026, 6:02pm UTC](https://community.cambiumnetworks.com/t/so-how-screwed-are-we/108833/14 "2026-09-16T18:02:53Z")

</div>

Exactly 😉 that. I had also planned to do that and maybe give some validations.

Our issue is NSE security appliances… RIP. Unless someone internal Cambium leaks or they [Cambium] do something worthwhile - but doubtful given the path they’re taking. its sickening.

I hope the CEO feels great about himself.

---

<div class="post-metadata">

### Author: ![CraigN](https://d10gw3vjmzyp8.cloudfront.net/user_avatar/community.cambiumnetworks.com/craign/32/30059_2.png) [@CraigN](https://community.cambiumnetworks.com/u/CraigN)
#### Post date: [September 16, 2026, 9:09pm UTC](https://community.cambiumnetworks.com/t/so-how-screwed-are-we/108833/15 "2026-09-16T21:09:12Z")

</div>

On your cnMaestro on prem, if you go to administration → Settings → Cloud Connectivity, you can disable connecting your on prem instance to your Cloud anchor account. This means its free from the cloud and will run independently. However, you will need to make sure you download firmware versions from the support website and then upload them to your on Prem as it wont have access to these if you disable the connection to cloud.

---

<div class="post-metadata">

### Author: ![ntox](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/n/9d8465/32.png) [@ntox](https://community.cambiumnetworks.com/u/ntox)
#### Post date: [September 17, 2026, 12:19am UTC](https://community.cambiumnetworks.com/t/so-how-screwed-are-we/108833/16 "2026-09-17T00:19:44Z")

</div>

Thanks @CraigN. That is the conclusion I have come to.

Cloud Anchor allows issuance and assignment of entitlements and also hook to [cloud.cambiumnetworks.com](http://cloud.cambiumnetworks.com) to poll for OVA updates and firmware updates to pull down to devices.

I’ve already staged my system with as much firmware as possible.

---

<div class="post-metadata">

### Author: ![ntox](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/n/9d8465/32.png) [@ntox](https://community.cambiumnetworks.com/u/ntox)
#### Post date: [September 17, 2026, 12:20am UTC](https://community.cambiumnetworks.com/t/so-how-screwed-are-we/108833/17 "2026-09-17T00:20:38Z")

</div>

@CraigN  
Can you please beg cnMaestro or NSE team to issue ONE last on-prem version.. sneak it into our support portal for downloads? WE NEED **NSE** MANANGEMENT! \<3. Without NSE management we’re cooked. The SD-WAN security appliances are pc-load-letter, dead to us.

---

<div class="post-metadata">

### Author: ![Springs](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/s/d78d45/32.png) [@Springs](https://community.cambiumnetworks.com/u/Springs)
#### Post date: [September 17, 2026, 2:15am UTC](https://community.cambiumnetworks.com/t/so-how-screwed-are-we/108833/18 "2026-09-17T02:15:04Z")

</div>

> [@AbdulKarim](#):
>
> [cloud.cambiumnetworks.com](http://cloud.cambiumnetworks.com)

Didn’t stop my APs from reaching the cloud.

Went into torch and found the actual IPs

100.57.117.44

35.153.29.30

Blocking those showed my APs as offline.

---

<div class="post-metadata">

### Author: ![ntox](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/n/9d8465/32.png) [@ntox](https://community.cambiumnetworks.com/u/ntox)
#### Post date: [September 17, 2026, 2:54am UTC](https://community.cambiumnetworks.com/t/so-how-screwed-are-we/108833/19 "2026-09-17T02:54:50Z")

</div>

Most likely a MikroTik thing not being able to block via FQDN due to the AWS CDN? Most likely Cambium has DNS failover configured I’m sure if you create address-list in your MikroTik and block via those dst-address – it’ll work.

 ![Screenshot 2026-09-16 at 10.50.34 PM](https://d1okf4ta8xniw3.cloudfront.net/original/3X/a/8/a81d735017799d3ffc1daf980c637e5ba351bdb1.png)

---

<div class="post-metadata">

### Author: ![NicNic\_94](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/n/e36b37/32.png) [@NicNic\_94](https://community.cambiumnetworks.com/u/NicNic_94)
#### Post date: [September 17, 2026, 12:33pm UTC](https://community.cambiumnetworks.com/t/so-how-screwed-are-we/108833/20 "2026-09-17T12:33:01Z")

</div>

If we can by some AP in stock will not be able to onboard AP on onpremise server if cloud anchor is down. right ?

[Next page](https://community.cambiumnetworks.com/t/so-how-screwed-are-we/108833.md?page=2)
