Subscription-free NSE3000

Products Security & SD-WAN
1

Wandering face book, I see a subscription free model for this.

Does that return it to the features of 2022/2023 or something?

2

Without a subscription, here are the features (this is the Security feature set):

  • SD-WAN
    • WAN Active-Active and Active-Backup
    • Layer-3 and Layer-7 flow preferences
  • Site-to-Site VPNs
    • IKEv1, IKEv2
  • Remote VPN
    • L2TP-IPSec, IKEv2, WireGuard
  • Next-Gen Firewall
    • Layer-3 and Layer-7 (application-based)
  • Intrusion Detection and Prevention
    • Choice of free and commercial rulesets
  • Application Visibility and Control
  • LAN Services (DHCP, RADIUS)
  • Cloud-Managed via cnMaestro

With a Security Plus subscription (the already-existing NSE-SUB-3000-1/3/5 part numbers), you get all of the above, plus:

  • Geo-IP Firewall
  • DNS Content Filtering
    • 80+ categories
    • Fast with data caches around the world
  • LAN Vulnerability Assessment
  • High Availability
    • 1 + 1 in Active-Backup mode
  • Auto VPN
    • One-click setup of VPN tunnels
  • IoT Device Identification
  • cnMaestro Reports and Analytics
2 Likes
3

Interesting for the without a subscription model. Can we still add cambium care for warranty? We do not see that SKU [just purchased the NSE 3000].

Without subscription for security, makes the NSE 3000 very competitive against Fortigate 40.

Love to see the NSE 4000 with more power. We feel the 3000 is great for small branch offices, but issue is only 900Mbps UTM.

4

I don’t know the answer for Cambium Care, but for plain extended warranty you can use the EW-ExNSE3000-WW part numbers, where x is 1, 2, 3 or 4 for 1/2/3/4 years.

5

Thanks for this. I’ll double check with distribution.

We should of just purchased the NSE without subscription, and added extended warranty for this particular customer/use-case.

Last question. With the NSE and NO subscription associated can we still manage under a single cnMaestro “X” tenant for MSP style management? Or again, these have to be shelved to a separate tenant account.

6

I’m afraid that you will need the Security Plus subscription if you want to put an NSE3000 in a cnMaestro X account. The subscription-free version can only be used with cnMaestro Essentials.

7

Thanks,

Can you all "clean’ up the licensing naming or better matrix? Security Plus does not equal or appear to be same as “cnMaestro X” license. Hence confusion.

Also, never had answers as to what process is for when we convert a “customer/tenant” and need “X” feature set as we are IT/MSP/Installer. How do we migrate devices. I can open another thread, as stilll looking for info on how we would offload a customer if they decide to goto another vendor [If we hold the licenses and tied to our cnMaestro X master account].

8

I agree, we ought to have a knowledge base article that explains the licensing options. It is complicated.

I believe you can move devices between accounts by “offboarding” them from the original account, at which point you can then onboard them to another account like normal.

To move subscriptions between accounts, you need to raise a support ticket. The support team will be able to remove licenses from the original account and create equivalent ones in the destination account.

If you would prefer, there is also a “pay monthly” option for cnMaestro X whereby Cambium can bill you directly for the devices in your account. When you remove devices from the account, you are automatically no longer billed for them.

9

The way I think about it is:

  • Security Plus is a built-in feature (automatically included) in cnMaestro X
  • You can also use Security Plus in cnMaestro Essentials by purchasing the NSE-SUB-3000-1/3/5 subscription.
10

I was going to ask the same question… but this post answers it.

:slight_smile:

Thanks

11

Simon,

Thanks for this info. can you further address…. There are dedicated Maestro X subscriptions for the NSE appliances that can be purchased.

What about this scenerio, how would we license it?

Customer purchases NSE appliance, wants full subscription features, but also has XV2 access points WITHOUT Maestro X subscription; only advance care.

12

There is only one set of 1/3/5 year subscriptions for the NSE product line e.g. the NSE 3000 has NSE-SUB-3000-1, NSE-SUB-3000-3 and NSE-SUB-3000-5 SKUs which are 1/3/5 year Security Plus subscriptions. There is no additional cnMaestro X subscription SKU.

  • If you use this subscription in a cnMaestro Essentials account it gives you access to the Security Plus features in an Essentials accounts (DNS Content filtering, Device Fingerprinting, Vulnerability Scanning, etc).
  • If you use this subscription in a cnMaestro X account, it gives you access to the same Security Plus features. In addition, you can access reports and other horizontal features that are part of cnMaestro X for all device types.

To use the NSE3000 to a cnMaestro X account you must have a valid NSE-SUB-3000-1/3/5subscription. This is optional in an Essentials account, but then you will not get access to any of the Security Plus features without the subscription.

In your case, I assume you have a cnMaestro Essentials account in which you have onboarded XV2 APs. Now you want to add an NSE3000 there with the security plus features. To do that, go to Administration → Settings and enable Security Plus. Then add an NSE-SUB-3000-1/3/5subscription and onboard your NSE3000. You do not need to purchase any additional subscriptions for your XV2 devices.