Zyxel NWA50AX, NWA50AX Pro, NWA90AX, NWA90AX Pro Solution Guide

Unlock Networking
Possibilities with
Cloud

Nebula Secure Cloud Networking Solution

Solution Guide

We help you make
everything easier

2 Solution Guide Nebula Secure Cloud Networking Solution

Overview

Nebula secure cloud networking solution provides

cloud-based, centralized control and visibility over

all Nebula wired, wireless, security firewall, security

router, and mobile router hardware — all without the

cost and complexity of on-site control equipment or

Highlights

• Intuitive, automated network management interface

as well as continuous feature updates that eliminate

training and labor for network implementation,

maintenance and support

• Zero-touch provisioning, built-in multi-tenant,

multisite network management tools accelerate

deployment of large networks

• Centralized, unified and on-demand control as well

as visibility that reduce capital expense for hardware

and software

• Free cloud management for the life of the product

without the need for ongoing costs

overlay management systems. With comprehensive

product portfolio that can be centrally managed from

the cloud, Nebula offers simple, intuitive and scalable

management for all networks.

• Access points and switches with NebulaFlex Pro,

USG FLEX firewalls (0102 bundled SKUs), ATP

firewalls, SCR security router (w/SCR Pro Pack),

and Nebula 5G/4G routers are sold with bundled

Professional Pack license for you to experience

advanced cloud management features

• A comprehensive networking and security product

portfolio from a single vendor ensures better

product compatibility

• Per-device licensing model with flexible

subscriptions provides rich diversity and high

flexibility for customers of all sizes

K-12 Campus

Boutique Hotel

Department Store

Branch Office

Cloud
Networking

Nebula AP

Nebula Switch

Nebula Security
Gateway/Firewall/Router

On-premises Nebula Hardware

Retail Store/Teleworker

https://nebula.zyxel.com/

Browser & Apps-based

Management

Nebula
Mobile Router

Management
Traffic

Solution Guide Nebula Secure Cloud Networking Solution 3

Introduction to
Nebula secure cloud
networking solution

Nebula’s networking and security products, including

access points, switches, security firewalls, security

router and 5G/4G routers, are purpose-built for cloud

management. They break the traditions and come

up with easy management, centralized control, auto-

configuration, real-time Web-based diagnostics, remote

monitoring and more.

The Nebula cloud managed networking introduces

an affordable, effortless approach for network

deployments with high security and scalability to

provide completely control over Nebula devices and

users. When an organization grows from small sites to

massive, distributed networks, the Nebula hardware with

cloud-based self-provisioning enables easy, quick and

plug-n-play deployment to multiple locations without IT

professionals.

Through Nebula cloud services, firmware and security

signature updates are delivered seamlessly, while secure

VPN tunnels can be established automatically between

different branches over the Web with just a few clicks.

Based on a secure infrastructure, Nebula is designed

with fault-tolerant properties that enable local networks

to keep operating properly in WAN downtimes.

4 Solution Guide Nebula Secure Cloud Networking Solution

Nebula secure cloud
networking solution
architecture

The Nebula Cloud provides a networking paradigm for

building and managing networks over the Internet in

the Software as a Service model. Software as a Service

(SaaS) is defined as a way of delivering software for

users to access via the Internet rather than local

installation. In the Nebula architecture, network

functions and management services are pushed to the

cloud and delivered as a service that provides instant

control to the entire network without wireless controllers

and overlay network management appliances.

Data Privacy and
Out-of-band
Control Plane

All Nebula devices are built from the ground up for cloud

management with the capability to communicate with

Nebula’s cloud control center through the Internet. This

TLS-secured connectivity between hardware and the

cloud provides network-wide visibility and control for

network management using the minimal bandwidth.

Over the cloud, thousands of Nebula devices around

the world can be configured, controlled, monitored and

managed under a single pane of glass. With multi-site

network management tools, businesses are allowed to

deploy new branches of any size, while administrators

are able to make policy changes any time from a central

control platform.

The Nebula service uses the infrastructure and services

built upon the Amazon Web Service (AWS), so all Nebula

security details can be referred to AWS Cloud Security.

Nebula is committed to data protection, privacy

and security as well as compliance with applicable

regulatory frameworks in the world. Nebula’s technical

architecture along with its internal administrative and

procedural safeguards can assist customers with design

and deployment of cloud-based networking solutions

that comply with EU data privacy regulations.

In Nebula’s out-of-band control plane, network and

management traffics are split into two different data

paths. Management data (e.g. configuration, statistics,

monitoring, etc.) turn towards Nebula’s cloud from

devices through an encrypted Internet connection

of the NETCONF protocol, while user data (e.g. Web

browsing and internal applications, etc.) flows directly

to the destination on the LAN or across the WAN without

passing through the cloud.

Cloud Hosted

Network Service

Internet Traffic

WLAN Traffic

Management

LAN Traffic

Traffic

Internet
Traffic

5Solution Guide Nebula Secure Cloud Networking Solution

Features of the Nebula Architecture:

• End user data does not traverse through the cloud.

• Unlimited throughput, no centralized controller

bottlenecks when new devices are added.

NETCONF Standard

• Network functions even if connection to cloud is

interrupted.

• Nebula’s cloud management is backed by a 99.99%

uptime SLA.

Nebula is an industry-first solution that implements

NETCONF protocol for safety of configuration changes

in cloud management as all NETCONF messages

are protected by TLS and exchanged using secure

transports. Prior to NETCONF, CLI scripting and SNMP

were two common approaches; but they have several

limitations such as lacking of transaction management

or useful standard security and commit mechanisms.

The NETCONF protocol has been designed to address

the shortcomings of the existing practices and protocols.

With the support of TCP and Callhome to overcome the

NAT barrier, NETCONF is considered more reliable and

elegant. It is also thinner than CWMP (TR-069) SOAP,

which saves Internet bandwidth. With these features,

the NETCONF protocol is regarded as more suitable for

cloud networking.

6 Solution Guide Nebula Secure Cloud Networking Solution

Nebula Control Center
(NCC)

Nebula Control Center offers a powerful insight into

distributed networks. Its intuitive and web-based interface

illustrates an instant view and analysis of network

performance, connectivity and status automatically and

continuously. Integrated with organization-wide and site-

wide management tools, Nebula provides a quick and

remote access for administrators to ensure the network is

up and performing efficiently.

Nebula Control Center is also engineered with a number

of security tools that provide optimal protection to

networks, devices and users; and they also deliver the

needed information to enforce security and enhance

control over the entire Nebula network.

Highlights

•

Responsive web design and intuitive user interface

with light & dark modes

•

Multi-lingual management interface (English,

Traditional Chinese, Japanese, German, French,

Russian and more to come)

•

Multi-tenant, multi-site manageability

•

Role-based administration privileges

•

First time setup wizard

• Powerful organization-wide management tools

First Time Setup Wizard

Nebula first time setup wizard helps create your

organization/site and setup an integrated network with

only a few simple clicks, making your devices up and

running in minutes.

•

Rich site-wide management tools

•

Site-based auto and smart configuration tools

•

Misconfigured protection against disconnecting NCC

•

Configuration changing alerts

•

Login & Configure auditing

•

Real-time and historical monitoring/reporting

•

Granular device based information and trouble

shooting tools

•

Flexible firmware management

Role-based Administration

Supervisors are allowed to appoint different privileges

for multiple administrators to manage network and

guess access. Specify management authority in the

network access control function to maximize security

and to avoid accidental misconfiguration.

Role-based Administration

7Solution Guide Nebula Secure Cloud Networking Solution

Organization-wide Management Tools

Powerful organization-wide features such as

organizational overview, configuration backup and

restore, configuration template and configuration clone

are supported to allow MSP and IT admins to manage

their org/sites much easier.

Site-wide Management Tools

Integrated with the feature-rich dashboards, maps,

floor plans, automatic visual and actionable network

topology and site-based auto and smart configuring

tools, the Nebula Control Center delivers instant

network analysis and automatically performs AP

authentication, configuration parity check, switch ports

link aggregation and site-to-site VPN.

Misconfiguration Protection

To prevent any connectivity interruption caused by

incorrect or inappropriate configuration, the Nebula

devices can intelligently identify if the order or setting

from NCC is correct to ensure the connection is always

up with the Nebula cloud.

Configuration Changing Alerts

Configuration changing alerts help administrators

to manage thousands of networking devices more

efficiently, especially in larger or distributed sites. These

real-time alerts are automatically sent from the Nebula

Cloud system when configuration changes are made

to keep new policies always up-to-date in the entire IT

organization.

Login & Configure Auditing

The Nebula cloud control center automatically

records the time and IP address of every logged

in administrators. The configure audit log lets

administrators track Web-based login actions on their

Nebula networks to see what configuration changes

were made and who made the changes.

Real-time & Historical Monitoring

Nebula Control center provides 24x7 monitoring over

the entire network, giving administrators real-time and

historical activity views with unlimited status records

that can be backdated to the installation time.

Map & Floor Plan

Misconfiguration Protection:
Set IP Address

8 Solution Guide Nebula Secure Cloud Networking Solution

Configuration Changing AlertsSite-wide Management Tools:

Nebula Mobile App

The Nebula mobile app offers a fast approach to network

management, providing an easy method for device

registration and an instant view of real-time network

status, which is particularly suitable for small business

owners with little to no IT skills. With it, you can perform

WiFi network configuration, break down usage by device

Highlights

• Sign up Nebula account

• Installation walk through wizard for creating org & site,

adding devices (QR code or manually), setting up WiFi

networks

• Hardware install guide and LED guide

• Enable/disable WiFi & sharing it via mobile messaging

applications or QR code

• Switch and gateway ports info

• Mobile router WAN status

• Site-wide client monitoring with action support

• Site-wide application usage analysis with action support

• Centralize 3-in-1 device status

and client, troubleshoot with live tools, check the status

of connected Nebula devices and clients at a glance,

and scan device QR codes to register large numbers of

devices to the Nebula Control Center all at once. The

app’s features and functions include:

• Site-wide and per-device usage graph

• Site-wide and per-device PoE consumption

• Check map and photo of device location

• Live trouble shooting tools: reboot, Locator LED, switch

port power reset, cable diagnostics, connection test

• Firmware upgrade schedule

• License overview and inventory

• Push notifications - Device down/up & license issue

related

• Notification center up to 7 days alert history

• Nebula support request (Pro Pack license is required)

9Solution Guide Nebula Secure Cloud Networking Solution

Product families

Access Points
with NebulaFlex/
NebulaFlex Pro

Zyxel NebulaFlex solution allows the access points

to be used in two modes; it’s easy to switch between

standalone mode and License Free Nebula Cloud

management, anytime, with a few simple clicks.

NebulaFlex

access point to different needs in an ever-changing

environment.

Access Points with NebulaFlex Product Options

Model NWA50AX NWA50AX Pro NWA90AX NWA90AX Pro

Product
name

provides true flexibility to adapt the

802.11ax (WiFi 6)
Dual-Radio PoE
Access Point

802.11ax (WiFi 6)
Dual-Radio PoE
Access Point

When used with Nebula you are able to centrally

manage, access real-time network information and

gain effortless control over your devices, all under a

single intuitive platform without the need to install any

software or add additional equipment like a controller.

NebulaFlex

functionality (standalone, hardware controller and

Nebula) to give business clients true flexibility whatever

their project may need.

Pro further supports triple mode

802.11ax (WiFi 6)
Dual-Radio PoE
Access Point

802.11ax (WiFi 6)
Dual-Radio PoE
Access Point

Typical
deployment

Radio
specification

Power DC input: 12 VDC 1.5 A

Antenna Embedded antenna Embedded antenna Embedded antenna Embedded antenna

* Bundled licenses are not applicable to NebulaFlex AP.

10 Solution Guide Nebula Secure Cloud Networking Solution

Small business,
Entry-level
establishments

• 1 x 802.11 b/g/n/ax
radio

• 1 x 802.11 a/n/ac/ax
radio

• 1.775 Gbps max rate

• 2x2 + 2x2 MU-MIMO

PoE (802.3at): power
draw 16 W

Small business,
Entry-level
establishments

• 1 x 802.11 b/g/n/ax
radio

• 1 x 802.11 a/n/ac/ax
radio

• 2.975 Gbps max rate

• 3x3 + 2x2 MU-MIMO

DC input: 12 VDC 2 A
PoE (802.3at): power
draw 20.5 W

Small business,
Entry-level
establishments

• 1 x 802.11 b/g/n/ax
radio

• 1 x 802.11 a/n/ac/ax
radio

• 1.775 Gbps max rate

• 2x2 + 2x2 MU-MIMO

DC input: 12 VDC 1.5 A
PoE (802.3at): power
draw 16 W

Small business,
Entry-level
establishments

• 1 x 802.11 b/g/n/ax
radio

• 1 x 802.11 a/n/ac/ax
radio

• 2.975 Gbps max rate

• 3x3 + 2x2 MU-MIMO

DC input: 12 VDC 2 A
PoE (802.3at): power
draw 20.5 W

Highlights

• Enjoy cloud features like zero-touch deployment,

real-time configurations with Nebula

• Easy setup on SSID/SSID schedule/VLAN/Rate limiting

• DPPSK (Dynamic Personal Pre-Shared Key) and

standard-based WPA Personal support

• Enterprise wireless security and RF optimization

• Secure WiFi solution provides remote workers the same

access to the corporate network and resources while

being protected with the enterprise-grade security.

• Connect and Protect (CNP) service provides small

business environments with a trusted and application

visible WiFi hotspot network to enhance wireless user

protection and experience.

• DCS, smart load balancing and client roaming/steering

• Rich Captive Portal support Nebula Cloud

Authentication Server accounts, social login with

Facebook accounts, Facebook WiFi, and Voucher

• Support smart mesh and wireless bridge

• Wireless health monitoring and report

Access Points with NebulaFlex Product Options

Model NWA55AXE NWA110AX NWA210AX

Product
name

802.11ax (WiFi 6) Dual-Radio
Outdoor PoE Access Point

802.11ax (WiFi 6) Dual-Radio
PoE Access Point

802.11ax (WiFi 6) Dual-Radio
PoE Access Point

Typical
deployment

Radio
specification

Power DC input: 12 VDC 1.5 A

Outdoor,
Entry-level establishments

• 1 x 802.11 b/g/n/ax radio

• 1 x 802.11 a/n/ac/ax radio

• 1.775 Gbps max rate

• 2x2 MU-MIMO

PoE (802.3at): power draw 16 W

Entry-level wireless
establishments

• 1 x 802.11 b/g/n/ax radio

• 1 x 802.11 a/n/ac/ax radio

• 1.775 Gbps max rate

• 2x2:2 + 2x2:2 MU-MIMO

DC input: 12 VDC 1.5 A
PoE (802.3at): power draw 17 W

Medium to high density
deployments

• 1 x 802.11 b/g/n/ax radio

• 1 x 802.11 a/n/ac/ax radio

• 2.975 Gbps max rate

• 4x4:4 + 2x2:2 MU-MIMO

DC input: 12 VDC 2 A
PoE (802.3at): power draw 19 W

Antenna External antenna Embedded antenna Embedded antenna

* Bundled licenses are not applicable to NebulaFlex AP.

11Solution Guide Nebula Secure Cloud Networking Solution

Access Points with NebulaFlex Product Options

Model NWA220AX-6E NWA1123ACv3 NWA1123-AC PRO

Product
name

802.11ax (WiFi 6E) Dual-Radio
PoE Access Point

802.11ac Wave 2 Dual-Radio
Ceiling Mount PoE Access Point

802.11ac Dual-Radio
Dual-Mount Access Point

Typical
deployment

Radio
specification

Medium to high density
deployments

• 1 x 802.11 b/g/n/ax radio

• 1 x 802.11 a/n/ac/ax radio

• 5.375 Gbps max rate

• 4x4 in 6 GHz/5 GHz selectable,

Entry-level wireless
eatablishments

• 1 x 802.11 b/g/n radio

• 1 x 802.11 a/n/ac radio

• 1.2 Gbps max rate

• 2x2 MU-MIMO

Medium to high density
deployments

• 1 x 802.11 b/g/n radio

• 1 x 802.11 a/n/ac radio

• 1.75 Gbps max rate

• 3x3 MIMO with 3 streams

2x2 in 2.4 GHz MU-MIMO

Power DC input: 12 VDC 2 A

PoE (802.3at): power draw 21 W

DC input: 12 VDC, 1 A
PoE (802.3af): power draw 11 W

802.3at PoE only (No DC jack)

Antenna Embedded antenna Embedded antenna Dual-optimized internal antenna

Access Points with NebulaFlex Pro Product Options

Model WAX510D WAX610D WAX630S

Product
name

Typical
deployment

Radio
specification

Power DC input: 12 VDC 1.5 A

802.11ax (WiFi 6) Dual-Radio
Unified Access Point

Entry-level wireless
establishments

• 1 x 802.11 b/g/n/ax radio

• 1 x 802.11 a/n/ac/ax radio

• 1.775 Gbps max rate

• 2x2:2 + 2x2:2 MU-MIMO

PoE (802.3at): power draw 17 W

802.11ax (WiFi 6) Dual-Radio
Unified Pro Access Point

Medium to high density
deployments

• 1 x 802.11 b/g/n/ax radio

• 1 x 802.11 a/n/ac/ax radio

• 2.975 Gps max rate

• 4x4:4 + 2x2:2 MU-MIMO

DC input: 12 VDC 2 A
PoE (802.3at): power draw 19 W

802.11ax (WiFi 6) Dual-Radio
Unified Pro Access Point

High density and interference­laden indoor environments

• 1 x 802.11 b/g/n/ax radio

• 1 x 802.11 a/n/ac/ax radio

• 2.975 Gps max rate

• 4x4 + 2x2:2 MU-MIMO

DC input: 12 VDC 2 A
PoE (802.3at): power draw 19 W

Antenna Dual-optimized internal antenna Dual-optimized antenna Embedded smart antenna

* 1-year Professional pack license is bundled in NebulaFlex Pro AP

12 Solution Guide Nebula Secure Cloud Networking Solution

Access Points with NebulaFlex Pro Product Options

Model WAX650S WAX620D-6E WAX640S-6E

Product
name

802.11ax (WiFi 6) Dual-Radio
Unified Pro Access Point

802.11ax (WiFi 6E) Dual-Radio
Unified Pro Access Point

802.11ax (WiFi 6E) Tri-Radio
Unified Pro Access Point

Typical
deployment

Radio
specification

Power DC input: 12 VDC 2.5 A

High density and interference­laden indoor environments

• 1 x 802.11 b/g/n/ax radio

• 1 x 802.11 a/n/ac/ax radio

• 1 x monitoring radio

• 3.55 Gbps max rate

• 4x4:4 + 4x4:4 MU-MIMO

PoE (802.3bt): power draw 31 W

High density and interference­laden indoor envrionments

• 1 x 802.11 b/g/n/ax radio

• 1 x 802.11 a/n/ac/ax radio

• 5.375 Gbps max rate

• 4x4 in 6 GHz/5 GHz selectable,
2x2 in 2.4 GHz MU-MIMO

DC input : 12 VDC 2 A
PoE (802.3)at: power draw 21 W

High density and interference­laden indoor envrionments

• 1 x 802.11 b/g/n/ax radio

• 1 x 802.11 a/n/ac/ax radio

• 7.775 Gbps max rate

• 4x4 + 2x2 + 2x2 MU-MIMO

DC input : 12 VDC 2.5 A
PoE (802.3)bt: power draw 28 W

Antenna Embedded smart antenna Dual-optimized antenna Smart antenna

* 1-year Professional pack license is bundled in NebulaFlex Pro AP

Access Points with NebulaFlex

Pro Product Options

Model WAC5302D-Sv2 WAC500 WAC500H

Product
name

Typical
deployment

Radio
specification

Power PoE (802.3at): power draw 20 W

802.11ac Dual-Radio Unified
Access Point

802.11ac Wave 2 Dual-Radio

Unified Access Point

Per-room deployments Entry-level wireless

establishments

• 1 x 802.11 b/g/n radio

• 1 x 802.11 a/n/ac radio

• 1.6 Gbps max rate

• 2x2 MU-MIMO

• 1 x 802.11 b/g/n radio

• 1 x 802.11 a/n/ac radio

• 1.2 Gbps max rate

• 2x2 MU-MIMO

DC input: 12 VDC, 1 A

(includes 7 W for PoE PSE)

PoE (802.3af): power draw 11 W

802.11ac Wave 2 Wall-Plate
Unified Access Point

Per-room deployments

• 1 x 802.11 b/g/n radio

• 1 x 802.11 a/n/ac radio

• 1.2 Gbps max rate

• 2x2 MU-MIMO

DC input: 12 VDC, 1 A

PoE (802.3at/af): power draw 18 W
PoE (802.3af): power draw 12 W
(PoE PSE disabled)

Antenna Smart antenna Embedded antenna Embedded antenna

* 1-year Professional pack license is bundled in NebulaFlex Pro AP

13Solution Guide Nebula Secure Cloud Networking Solution

Access Points with NebulaFlex Pro Product Options

Model WAX655E

Product
name

802.11ax (WiFi 6) Dual-Radio Unified Pro
Outdoor Access Point

Typical

Outdoor

deployment

Radio
specification

• 1 x 802.11 b/g/n/ax radio

• 1 x 802.11 a/n/ac/ax radio

• 5.4 Gbps max rate

• 4x4 + 2x2 MU-MIMO

Power 802.3at PoE only

Antenna External antenna

* 1-year Professional pack license is bundled in NebulaFlex Pro AP

14 Solution Guide Nebula Secure Cloud Networking Solution

Switches with
NebulaFlex/
NebulaFlex Pro

Zyxel switches with NebulaFlex allow you to easily switch

between standalone and our license-free Nebula cloud

management platform anytime with just a few simple

clicks. NebulaFlex Pro switches include XS3800-28,

XGS2220 Series, GS2220 Series, and GS1350 Series, which

are further bundled with a 1-year Professional Pack

license. XS3800-28, XGS2220 and GS2220 Series switches

come with NebulaFlex Pro which provides advanced

IGMP technology, network analytics alerts and more,

that allow resellers, MSPs, and network admins to

Switches with NebulaFlex Product Options

Model GS1915-8 GS1915-8EP GS1915-24E GS1915-24EP

Product name 8-port GbE Smart

Managed Switch

8-port GbE Smart
Managed PoE
Switch

experience the simplicity, scalability, and flexibility of

Zyxel’s Nebula networking solution. Meanwhile, GS1350

Series further focus on surveillance applications,

giving you the flexibility to monitor and manage your

surveillance network via the cloud. Both NebulaFlex/

NebulaFlex Pro switches protect your investment on

wired technology by offering the flexibility to transition

to the cloud in your own time, without worrying about

additional ongoing licensing costs.

24-port GbE Smart
Managed Switch

24-port GbE Smart
Managed PoE
Switch

Switch class Smart Managed Smart Managed Smart Managed Smart Managed

Total port count 8 8 24 24

100M/1G (RJ-45) 8 8 24 24

100M/1G (RJ-45, PoE+) - 8 - 12

1G SFP - - - -

1G combo (SFP/RJ-45) - - - -

Switching capacity
(Gbps)

Total PoE power budget
(watts)

* Bundled licenses are not applicable to NebulaFlex switches.

16 16 48 48

- 60 - 130

15Solution Guide Nebula Secure Cloud Networking Solution

Highlights

• Comprehensive Switch product portfolio includes

wide-range port selection, multiple speed options (1G,

Multi-Gig, 10G), PoE or non-PoE, and all fiber models.

• Smart fan and fanless designs offer silent operations

in the office

• Check real-time status intuitively by cloud and PoE

LED indicators

• The Multi-Gigabit (100M/1G/2.5G/5G/10G) switchs that

can step up the network bandwidth via the cloud

• GS1350 Series Surveillance switches are designed

with specialized PoE features for IP cameras and

surveillance report that can be monitor and manage

the surveillance networks via the Cloud

• Flexible to switch between standalone and Nebula

Cloud management without additional costs

Switches with NebulaFlex Product Options

• Enjoy cloud features like zero-touch deployment,

real-time configurations with Nebula

• Efficient network provisioning with multiple ports

configuration all at once

• User-friendly ACL and PoE schedule configuration

• Intelligent PoE technology and network topology

• RADIUS, static MAC forwarding and 802.1X authentication

• Advanced Switch Control (Vendor Based VLAN, IP

Interfacing & Static Routing, Remote CLI access)

• Advanced IGMP multicast functionality and IPTV report

• Auto PD Recovery to detect and recover failed powered

devices automatically

Model GS1920-8HPv2 GS1920-24v2 GS1920-24HPv2 GS1920-48v2 GS1920-48HPv2

Product name 8-port GbE

Smart Managed
PoE Switch

24-port GbE
Smart Managed
Switch

24-port GbE
Smart Managed
PoE Switch

48-port GbE
Smart Managed
Switch

48-port GbE
Smart Managed
PoE Switch

Switch class Smart Managed Smart Managed Smart Managed Smart Managed Smart Managed

Total port count 10 28 28 50 50

100M/1G (RJ-45) 8 24 24 44 44

100M/1G

8 - 24 - 48

(RJ-45, PoE+)

1G SFP - - - 2 2

1G combo

2 4 4 4 4

(SFP/RJ-45)

Switching capacity

20 56 56 100 100

(Gbps)

Total PoE power

130 - 375 - 375

budget (watts)

* Bundled licenses are not applicable to NebulaFlex switches.

16 Solution Guide Nebula Secure Cloud Networking Solution

Switches with NebulaFlex Product Options

Model XS1930-10 XS1930-12HP XS1930-12F

Product name 8-port 10G Multi-Gig

Lite-L3 Smart Managed
Switch with 2 SFP+

Switch class Smart Managed Smart Managed Smart Managed

Total port count 10 12 12

100M/1G/2.5G/5G/10G (RJ-45) 8 10 2

100M/1G/2.5G/5G/10G
(RJ-45, PoE++)

1G/10G SFP+ 2 2 10

Switching capacity (Gbps) 200 240 240

Total PoE power budget (watts) - 375 -

Switches with NebulaFlex Product Options

- 8 -

8-port 10G Multi-Gig PoE
Lite-L3 Smart Managed
Switch with 2 10G
Multi-Gig Ports & 2 SFP+

10-port 10G Lite-L3
Smart Managed Fiber
Switch with 2 10G
Multi-Gig Ports

Model XMG1930-30 XMG1930-30HP

Product name 24-port 2.5G Multi-Gig Lite-L3

Smart Managed Switch
with 6 10G Uplink

Switch class Smart Managed Smart Managed

Total port count 30 30

100M/1G/2.5G (RJ-45) 24 24

100M/1G/2.5G (RJ-45, PoE+) - 20

100M/1G/2.5G (RJ-45, PoE++) - 4

100M/1G/2.5G/5G/10G (RJ-45) 4 4

100M/1G/2.5G/5G/10G
(RJ-45, PoE++)

1G/10G SFP+ 2 2

Switching capacity (Gbps) 240 240

Total PoE power budget (watts) - 700

- 4

24-port 2.5G Multi-Gig Lite-L3
Smart Managed PoE++/PoE+ Switch
with 6 10G Uplink

17Solution Guide Nebula Secure Cloud Networking Solution

Switches with NebulaFlex Product Options

Model XGS1930-28 XGS1930-28HP XGS1930-52 XGS1930-52HP

Product name 24-port GbE Lite-L3

Smart Managed
Switch with
4 10G Uplink

24-port GbE Lite-L3
Smart Managed
PoE+ Switch with
4 10G Uplink

48-port GbE Lite-L3
Smart Managed
Switch with
4 10G Uplink

48-port GbE Lite-L3
Smart Managed
PoE+ Switch with
4 10G Uplink

Switch class Smart Managed Smart Managed Smart Managed Smart Managed

Total port count 28 28 52 52

100M/1G (RJ-45) 24 24 48 48

100M/1G (RJ-45, PoE+) - 24 - 48

1G/10G SFP+ 4 4 4 4

Switching capacity (Gbps) 128 128 176 176

Total PoE power budget

- 375 - 375

(watts)

* Bundled licenses are not applicable to NebulaFlex switches.

Switches with NebulaFlex Pro Product Options

Model GS1350-6HP GS1350-12HP GS1350-18HP GS1350-26HP

Product name 5-port GbE

Smart Managed
PoE Switch with
GbE Uplink

8-port GbE
Smart Managed
PoE Switch with
GbE Uplink

16-port GbE
Smart Managed
PoE Switch with
GbE Uplink

24-port GbE
Smart Managed
PoE Switch with
GbE Uplink

Switch class Smart Managed Smart Managed Smart Managed Smart Managed

Total port count 6 12 18 26

100M/1G (RJ-45) 5 10 16 24

100M/1G (RJ-45, PoE+) 5 (port 1-2 PoE++) 8 16 24

1G SFP 1 2 - -

1G combo (SFP/RJ-45) - - 2 2

Switching capacity (Gbps) 12 24 36 52

Total PoE power budget

60 130 250 375

(watts)

18 Solution Guide Nebula Secure Cloud Networking Solution

Switches with NebulaFlex Pro Product Options

Model GS2220-10 GS2220-10HP GS2220-28 GS2220-28HP

Product name 8-port GbE L2

Switch with
GbE Uplink

Switch class Layer 2 Plus Layer 2 Plus Layer 2 Plus Layer 2 Plus

Total port count 10 10 28 28

100M/1G (RJ-45) 8 8 - 24

100M/1G (RJ-45, PoE+) - 8 - 24

1G SFP - - - -

1G combo (SFP/RJ-45) 2 2 4 4

Switching capacity (Gbps) 20 20 56 56

Total PoE power budget
(watts)

- 180 - 375

8-port GbE L2
PoE Switch with
GbE Uplink

24-port GbE L2
Switch with
GbE Uplink

24-port GbE L2
PoE Switch with
GbE Uplink

Switches with NebulaFlex Pro Product Options

Model GS2220-50 GS2220-50HP

Product name 48-port GbE L2 Switch

with GbE Uplink

Switch class Layer 2 Plus Layer 2 Plus

Total port count 50 50

100M/1G (RJ-45) 44 44

100M/1G (RJ-45, PoE+) - 48

1G SFP 2 2

1G combo (SFP/RJ-45) 4 4

Switching capacity (Gbps) 100 100

Total PoE power budget
(watts)

- 375

48-port GbE L2 PoE Switch
with GbE Uplink

19Solution Guide Nebula Secure Cloud Networking Solution

Switches with NebulaFlex Pro Product Options

Model XGS2220-30 XGS2220-30HP XGS2220-30F

Product name 24-port GbE L3 Access

Switch with 6 10G
Uplink

Switch class Layer 3 Access Layer 3 Access Layer 3 Access

Total port count 30 30 30

100M/1G (RJ-45) 24 24 -

100M/1G (RJ-45, PoE+) - 16 -

100M/1G (RJ-45, PoE++) - 8 -

100M/1G/2.5G/5G/10G (RJ-45) 2 2 2

100M/1G/2.5G/5G/10G (RJ-45, PoE++) - 2 -

1G SFP - - 24

1G/10G SFP+ 4 4 4

Switching capacity (Gbps) 168 168 168

Total PoE power budget (watts) - 400 -

24-port GbE L3 Access
PoE+ Switch with 6 10G
Uplink (400 W)

24-port SFP L3 Access
Switch with 6 10G
Uplink

Switches with NebulaFlex Pro Product Options

Model XGS2220-54 XGS2220-54HP XGS2220-54FP

Product name 48-port GbE L3 Access

Switch with 6 10G
Uplink

Switch class Layer 3 Access Layer 3 Access Layer 3 Access

Total port count 54 54 54

100M/1G (RJ-45) 48 48 48

100M/1G (RJ-45, PoE+) - 40 40

100M/1G (RJ-45, PoE++) - 8 8

100M/1G/2.5G/5G/10G (RJ-45) 2 2 2

100M/1G/2.5G/5G/10G (RJ-45, PoE++) - 2 2

1G SFP - - -

1G/10G SFP+ 4 4 4

Switching capacity (Gbps) 261 261 261

Total PoE power budget (watts) - 600 960

20 Solution Guide Nebula Secure Cloud Networking Solution

48-port GbE L3 Access
PoE+ Switch with 6 10G
Uplink (600 W)

48-port GbE L3 Access
PoE+ Switch with 6 10G
Uplink (960 W)

Switches with NebulaFlex Pro Product Options

Model XS3800-28

Product name 28-port 10GbE L3 Aggregation Switch

Switch class Layer 3 Aggregation

Total port count 28

100M/1G/2.5G/ 5G/10G (RJ-45) 4

10G Multi-Gig combo
(1G/2.5G/5G/10G RJ-45/10G SFP+)

1G/10G SFP+ 16

Switching capacity (Gbps) 560

8

21Solution Guide Nebula Secure Cloud Networking Solution

Firewall Series

Zyxel’s firewalls are the newest addition to the Nebula

cloud management family, and it further optimizes

Nebula with holistic security and protection for SMB

business networks. Zyxel’s firewalls are capable of

authenticating individuals and devices for all scenarios,

especially for remote applications. This enables it to

extend and secure your distributed network anywhere

easily and affordably. Zyxel’s firewalls deliver high

performance, ensure comprehensive protection as a

Highlights

• High assurance multi-layered protection includes IP/

URL/DNS reputation filter, App Patrol, Web Filtering,

Anti-malware and IPS

• Collaborating policy enforcement devices and

eliminating repetitive logins with Collaborative

Detection & Response

• Best practices for remote access with Secure WiFi and

VPN management consolidates and ensures the same

network control and security across multiple sites

• Level up security with two-factor authentication (2FA)

network access let you quickly and easily verify users’

identities with users accessing their networks through

the edge devices

self-evolving solution, and synchronize your security

to fit into all kinds of networks. Our integrated cloud

threat intelligence will automatically stop threats

at the network edge by blocking or quarantining,

preventing damage to the network. We also provide

up-to-the-minute protection with detailed reporting on

investigations, threat preventions, active monitoring,

and high visibility of network activities in today’s ever-

changing, ever-more-complex network environments.

• Cloud sandboxing technology prevents zero-day

attacks of all sorts

• Comprehensive summary reports for security events

and network traffic through SecuReporter service

• Flexible to switch between on-premise and Nebula

Cloud management without additional costs

• Enjoy cloud features like Zero Touch Provisioning (ZTP),

real-time configurations with Nebula

22 Solution Guide Nebula Secure Cloud Networking Solution

Product Options

Model ATP100(W) ATP200 ATP500 ATP700 ATP800

Product name ATP Firewall ATP Firewall ATP Firewall ATP Firewall ATP Firewall

System Capacity & Performance

SPI firewall throughput (Mbps)

VPN throughput (Mbps)

IPS throughput (Mbps)

Anti-malware throughput (Mbps)

UTM throughput (AV and IDP)

Max. TCP concurrent sessions

Max. concurrent IPsec VPN tunnels

Recommended gateway-to-gateway

*1

*2

*3

*4

*4

*5

1,000 2,000 2,600 6,000 8,000

300 500 900 1,200 1,500

600 1200 1,700 2,200 2,700

*4

380 630 900 1,600 2,000

380 600 890 1,500 1900

300,000 600,000 1,000,000 1,600,000 2,000,000

*6

40 100 300 500 1,000

20 50 150 300 300

IPsec VPN tunnels

Concurrent SSL VPN users 30 60 150 150 500

VLAN interface 8 16 64 128 128

Security Service

Sandboxing

Web Filtering

Application Patrol

Anti-Malware

*7

IPS

Reputation Filter

SecuReporter

Collaborative Detection & Response

*7

*7

*7

*7

Ye s Ye s Ye s Ye s Ye s

Ye s Ye s Ye s Ye s Ye s

Ye s Ye s Ye s Ye s Ye s

Ye s Ye s Ye s Ye s Ye s

Ye s Ye s Ye s Ye s Ye s

*7

*7

Ye s Ye s Ye s Ye s Ye s

Ye s Ye s Ye s Ye s Ye s

*7

Ye s Ye s Ye s Ye s Ye s

Device Insight Ye s Ye s Ye s Ye s Ye s

Security Profile Synchronize (SPS)

*7

Ye s Ye s Ye s Ye s Ye s

Geo Enforcer Yes Ye s Ye s Ye s Ye s

SSL (HTTPS) Inspection Ye s Ye s Ye s Ye s Ye s

2-Factor Authentication Ye s Ye s Ye s Ye s Ye s

VPN Features

VPN IKEv2, IPSec,

SSL, L2TP/IPSec

IKEv2, IPSec,
SSL, L2TP/IPSec

IKEv2, IPSec,
SSL, L2TP/IPSec

IKEv2, IPSec,
SSL, L2TP/IPSec

Microsoft Azure Ye s Ye s Ye s Ye s Yes

Amazon VPC Ye s Ye s Ye s Ye s Ye s

Secure WiFi Service

Maximum Number of

*7

12 20 36 132 260

Tunnel-Mode AP

Maximum Number of Managed AP 24 40 72 264 520

Recommend max. AP in 1 AP Group 10 20 60 200 300

Note:
*: This matrix with firmware ZLD5.3 or later.
*1: Actual performance may vary depending on system configuration, network

conditions, and activated applications.
*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
*3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets).
*4: Anti-malware (with Express mode) and IPS throughput measured using

the industry standard HTTP performance test (1,460-byte HTTP packets).

Testing done with multiple flows.

*5: Maximum sessions measured using the industry standard IXIA IxLoad

testing tool
*6: Including Gateway-to-Gateway and Client-to-Gateway.
*7: Enable or extend feature capacity with Zyxel service license.

IKEv2, IPSec,
SSL, L2TP/IPSec

23Solution Guide Nebula Secure Cloud Networking Solution

Product Options

Model USG FLEX 50(AX) USG FLEX 100(AX) USG FLEX 200 USG FLEX 500 USG FLEX 700

Product name ZyWALL USG

FLEX 50/50AX
Firewall

ZyWALL USG
FLEX 100/100AX
Firewall

ZyWALL USG
FLEX 200
Firewall

ZyWALL USG
FLEX 500
Firewall

ZyWALL USG
FLEX 700
Firewall

System Capacity & Performance

*1

SPI firewall throughput*2 (Mbps) 350 900 1,800 2,300 5,400

VPN throughput (Mbps) 90 270 450 810 1,100

VPN IMIX throughput (Mbps)

IPS throughput

*4

(Mbps) - 540 1100 1,500 2,000

Anti-Malware throughput (Mbps)

UTM throughput
(Anti-malware & IPS, Mbps)

Max. TCP concurrent sessions

Max. concurrent IPsec VPN tunnels

Recommended gateway-to-gateway

*3

*4

*5

40 100 160 240 550

*4

- 360 570 800 1,450

- 360 550 800 1,350

20,000 300,000 600,000 1,000,000 1,600,000

*6

10 (20) 40 100 300 500

5 20 50 150 250

IPsec VPN tunnels

Concurrent SSL VPN users 15 30 60 150 150

VLAN interface 8 8 16 64 128

Security Service

Sandboxing

Reputation Filter

Anti-Malware

*7

IPS

Application Patrol

*7

*7

*7

- Ye s Yes Ye s Ye s

- Ye s Yes Ye s Ye s

- Ye s Yes Ye s Ye s

- Ye s Yes Ye s Ye s

*7

- Ye s Yes Ye s Ye s

Email Security - Ye s Ye s Ye s Ye s

Web Filtering

SecuReporter

Collaborative Detection & Response

*7

*7

Ye s Ye s Yes Yes Yes

Ye s Ye s Yes Yes Yes

*7

- Ye s Yes Ye s Ye s

Geo Enforcer Ye s Ye s Ye s Yes Yes

SSL (HTTPS) Inspection - Ye s Yes Ye s Ye s

2-Factor Authentication Yes Ye s Ye s Ye s Ye s

Device Insight Ye s Ye s Ye s Ye s Ye s

Security Profile Synchronize (SPS)

*7

Ye s Ye s Yes Yes Yes

VPN Features

VPN IKEv2, IPSec,

SSL, L2TP/IPSec

IKEv2, IPSec,
SSL, L2TP/IPSec

IKEv2, IPSec,
SSL, L2TP/IPSec

IKEv2, IPSec,
SSL, L2TP/IPSec

Microsoft Azure Ye s Ye s Yes Yes Yes

Amazon VPC Ye s Ye s Ye s Ye s Ye s

Secure WiFi Service

Maximum Number of

*7

- 10 10 18 130

Tunnel-Mode AP

Maximum Number of Managed AP - 24 40 72 520

Recommend max. AP in 1 AP Group - 10 20 60 200

Note:
*: This matrix with firmware ZLD5.3 or later.
*1: Actual performance may vary depending on system configuration, network

conditions, and activated applications.
*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets).
*3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets);

IMIX: UDP throughput based on a combination of 64 byte, 512 byte and 1424

byte packet sizes.

*4: Anti-malware (with Express Mode) and IPS throughput measured using

the industry standard HTTP performance test (1,460-byte HTTP packets).
Testing done with multiple flows.

*5: Maximum sessions measured using the industry standard IXIA IxLoad

testing tool
*6: Including Gateway-to-Gateway and Client-to-Gateway.
*7: With Zyxel service license to enable or extend the feature capacity.

IKEv2, IPSec,
SSL, L2TP/IPSec

24 Solution Guide Nebula Secure Cloud Networking Solution

Security Router Series

The SCR series is a secure cloud-managed router that

offers business-class firewall, VPN gateway, latest WiFi

technology, and built-in security to safeguard against

ransomware and other threats. It’s a perfect solution

for teleworkers or small businesses/offices looking for

easy-to-manage and subscription-free network security.

Highlights

• Subscription-free Security built-in as standard

(inc. Ransomware prevention)

• The latest WiFi technology provides the fastest

wireless connection speed possible.

• Self-configuring, plug-and-play deployment by

Nebula mobile

• Central management via Zyxel Nebula Platform

• Auto VPN for easy deployment for site-to-site VPN

Connectivity

Powered by Zyxel Security Cloud, the SCR series features

best-in-class threat management capabilities, detecting

malicious network activities, preventing ransomware

and malware, blocking intrusion and exploits, dark web,

ads, VPN proxy, mail fraud, and phishing. The SCR series

offers affordable security to small business owners

without any subscription fees.

• Up to 4 SSIDs with intergrade enterprise security

and personal/guest access

• Four GbE ports for printers, phones and other

wired devices

• Access security status and analytics through an

informative dashboard

• Optional SCR Pro Pack Licensing to increase

functionality and security

25Solution Guide Nebula Secure Cloud Networking Solution

Product Options

Model SCR 50AXE

Product name Secure Cloud-managed Router with

Hardware

Wireless standard IEEE 802.11 ax 6 GHz

CPU Dual-core, 1.00 GHz, Cortex A53

RAM/FLASH 1 GB/256 MB

Interface 1 x WAN: 1 GbE RJ-45 port

System Capacity & Performance

SPI firewall throughput LAN to WAN (Mbps) 890

Throughput with threat intelligence on (Mbps) 880

Security Service

Ransomware/Malware Protection Ye s

Intrusion Blocker Ye s

Dark Web Blocker Ye s

Stop Mail Fraud & Phishing Ye s

Block Ads Yes

Block VPN Proxy Ye s

Web Filtering Ye s

Firewall Ye s

Country Restriction (GeoIP) Ye s

Allowlist/Blocklist Ye s

Identify Traffic (Applications & Clients) Ye s

Block Applications or Clients Ye s

Security Event Analytics Nebula Threat Report

VPN Features

Site2site VPN IPSec

Networking

WAN type DHCP/Static IP/PPPoE

Networking features Port forwarding

IPTV passthrough IGMP Proxy

WLAN Management

Site-wide SSID management Ye s

Multi-site management Ye s

Topology Ye s

Diagnostics Ye s

Remote support Ye s

AXE5400 WiFi 6E Tri-band

IEEE 802.11 ax/ac/n/a 5 GHz
IEEE 802.11 ax/n/b/g 2.4 GHz

4 x LAN: 1 GbE RJ-45 ports

Guest VLAN
DHCP
IP/MAC binding
MAC filter

26 Solution Guide Nebula Secure Cloud Networking Solution

5G/4G Router Series

Zyxel 5G/4G routers are the newest addition to the

Nebula cloud management family, and it further

optimizes Nebula with more comprehensive and unified

solutions for SMB networks.

Zyxel offers wide 5G NR and 4G LTE product portfolio.

From indoor to outdoor, Zyxel’s offerings are suitable

for a wide range of deployment scenarios and a variety

of network infrastructures, freeing yourself from cabled

Highlights

• 5G NR downlink up to 5 Gbps* (FWA710, FWA510, NR7101,

NR5101)

• IP68-rated weather protection (FWA710, NR7101,

LTE7461-M602)

• Deploys WiFi 6 AX3600 (FWA510), AX1800 (NR5101)

• Supports SA/NSA mode and network slicing function

(FWA710, FWA510, NR7101, NR5101)

installation. Outdoor router offers internet connectivity

that utilizes state-of-the-art wireless network

technology, and thanks to its outdoor-friendly design,

it is now possible to work in harsh environments. Indoor

router can be a backup or primary connection through

5G/4G for your business. Enjoy a superior mobile

network experience in any occasions and easily expand

businesses with our wireless broadband solutions.

• Easy installation via free mobile app for finding the

best installation signal spot

• Free from wired connection

• Failover function (FWA510, NR5101, NR7101 and

LTE3301-PLUS)

* The maximum data rate is a theoretical value. The actual data rate depends

on the operator and network environment

27Solution Guide Nebula Secure Cloud Networking Solution

Product Options

Model Nebula FWA710 Nebula NR7101 Nebula FWA510 Nebula NR5101 Nebula LTE7461 Nebula LTE3301-PLUS

Product Name Nebula 5G NR Outdoor Router Nebula 5G NR Outdoor Router Nebula 5G NR Indoor Router Nebula 5G NR Indoor Router Nebula 4G LTE-A Outdoor Router Nebula 4G LTE-A Indoor Router

Download Data Rates 5 Gbps* 5 Gbps* 5 Gbps* 5 Gbps* 300 Mbps* 300 Mbps*

5G

LTE

Band Freq (MHz) Duplex
1 2100 FDD Ye s Ye s Ye s
3 1800 FDD Ye s Ye s Ye s Ye s - -
5 850 FDD Ye s Yes Ye s Ye s - -
7 2600 FDD Ye s Ye s Ye s Ye s - -
8 900 FDD Yes Ye s Ye s Ye s - -
20 800 FDD Ye s Yes Ye s Yes - -
28 700 FDD Yes Yes Yes Ye s - -
38 1900 TDD Ye s Yes Ye s Ye s - -
40 2300 TDD Ye s Ye s Ye s Yes - -
41 2500 TDD Ye s Ye s Ye s Ye s - -
77 3700 TDD Ye s Ye s Ye s Ye s - -
78 3500 TDD Yes Yes Yes Ye s - -
DL 4x4 MIMO Yes (n5/8/20/28 supports 2x2 only) Yes (n5/8/20/28 supports 2x2 only) Yes (n5/8/20/28 supports 2x2 only) Yes (n5/8/20/28 supports 2x2 only) - -
DL 2x2 MIMO - - - - Ye s Ye s
1 2100 FDD Ye s Ye s Ye s
2 1900 FDD - - - - Yes -
3 1800 FDD Ye s Ye s Ye s Ye s - Ye s
4 1700 FDD - - - - Ye s -
5 850 FDD Ye s Yes Ye s Ye s Ye s Yes
7 2600 FDD Ye s Ye s Ye s Ye s Ye s Yes
8 900 FDD Yes Ye s Ye s Ye s - Ye s
12 700a FDD - - - - Ye s -
13 700c FDD - - - - Yes -
20 800 FDD Ye s Yes Ye s Yes - Ye s
25 1900+ FDD - - - - Ye s -
26 850+ FDD - - - - Yes -
28 700 FDD Yes Yes Yes Ye s - Yes
29 700d FDD - - - - Ye s -
38 1900 FDD Ye s Yes Ye s Ye s - -
40 2300 TDD Ye s Ye s Ye s Yes - Yes
41 2500 TDD Ye s Ye s Ye s Ye s - Ye s
42 3500 TDD Ye s Ye s Ye s Ye s - -
43 3700 TDD Ye s - Yes - - -
66 1700 FDD - - - - Ye s -
DL CA Ye s Ye s Ye s Ye s B2+B2/B5/B12/B13/B26/B29; B4+B4/B5/B12/B13/B26/B29;

UL CA Ye s Ye s Ye s Ye s - -
DL 4x4 MIMO B1/3/7/38/40/41/42 B1/3/7/38/40/41/42 B1/3/7/38/40/41/42 B1/3/7/38/40/41/42 - -
DL 2x2 MIMO Ye s Ye s Ye s Ye s Ye s Yes
DL 256-QAM Ye s Ye s Ye s Yes - -
DL 64-QAM Ye s Ye s Ye s Ye s Ye s Yes
UL 64-QAM Yes (supports 256QAM) Yes (supports 256QAM) Yes (supports 256QAM) Yes (supports 256QAM) - -
UL 16-QAM Ye s Ye s Ye s Yes Yes -
MIMO (UL/DL) 1x4 1x4 1x4 1x4 - 1x2
1 2100 FDD Ye s Ye s Ye s

3G

WiFi

Ethernet

SIM slot Micro/Nano SIM slot Micro SIM Micro SIM Micro SIM Micro SIM Micro SIM Micro SIM
Power DC input PoE 48 V PoE 48 V DC 12 V DC 12 V PoE 48 V DC 12 V
Ingress protection IP68 IP68 - - IP67 -

* The maximum data rate is a theoretical value. The actual data rate depends on the operator.
** WiFi is used for management purpose only.

3 1800 FDD Ye s Ye s Ye s Ye s - Ye s
5 2100 FDD Ye s Ye s Ye s Ye s - Ye s
8 900 FDD Yes Ye s Ye s Ye s - Ye s

802.11n 2x2 Yes** Yes** Yes

802.11ac 2x2 - - Ye s Ye s - Ye s

802.11ax 2x2 - - Ye s Ye s - -

802.11ax 4x4 - - Ye s - - -
Number of users - - Up to 64 Up to 64 - Up to 32
LAN 2.5GbE x1 (PoE) 1GbE x1 (PoE) 2.5GbE x2
WAN - - 2.5GbE x1 (reuse LAN 1) 1GbE x1 (reuse LAN 1) - 1GbE x1 (reuse LAN 1)

28 Solution Guide Nebula Secure Cloud Networking Solution

Ye s - -

Ye s - Ye s

B7+B5/B7/B12/B13/B26/B29; B25+B5/B12/B13/B25/B26/B29;
B66+B5/B12/B13/B26/B29/B66 (B29 is only for secondary
component carrier)

Ye s - Ye s

Ye s Yes** Ye s

1GbE x2 1GbE x1 (PoE) 1GbE x4

B1+B1/B5/B8/B20/B28
B3+B3/B5/B7/B8/B20/B28
B7+B5/B7/B8/B20/B28
B38+B38; B40+B40; B41+B41

29Solution Guide Nebula Secure Cloud Networking Solution

License information

Per-device
License Model

Nebula’s per-device licensing allows IT teams to

maintain various expiration dates across devices, sites

or organizations. Each Organization can have a single

shared expiration, which will be manageable through our

new Circle license management platform for channel

partners, namely Subscription Alignment.

Flexible Management
License Subscription

Nebula Control Center (NCC) offers multiple

subscription options to meet customers’ needs. Whether

you are looking for a complimentary option giving you

some peace of mind at no extra cost, more control over

your network updates and visibility, or even the most

advanced management of cloud networking, Nebula is

here to help you.

However, the devices must maintain the same NCC

management License Pack Type across the organization.

Nebula MSP Pack further provides cross-organization

management functionality, helping MSP streamlines

multi-tenant, multi-site, multi-level network deployment

and management, and deliver superior service to their

customers.

MSP Pack

Per-admin account license that include cross-org.
management features and can be used in conjunction
with existing Packs (Base/Plus/Pro)

Base Pack

License-free feature

set/service with a rich set of

management features

30 Solution Guide Nebula Secure Cloud Networking Solution

An add-on feature set/service

that includes all the features

from free Nebula Base Pack

as well as the most frequently

requested advanced features
to enable additional control of
network updates and visibility

Plus Pack

• MSP portal

• Create organization

• MSP branding

functionality and management

devices, sites, and organizations

• Admins & teams

• Cross-org synchronization

• Alert templates

Pro Pack

A full feature set/service

that includes all the features

from Nebula Plus Pack as

well as additional advanced

features to enable maximum

manageability of NCC for

NCC Organization Management
License Pack Feature Table

M R F S W

●

●

●

●

●

●

●

Feature Name

Unlimited Registration & Central Management
(Configuration, Monitoring, Dashboard, Location Map &
Floor Plan Visual) of Nebula Devices

Zero Touch Auto-Deployment of Hardware/Configuration
from Cloud

Over-the-air Firmware Management

IOS and Android APP
(Deployment, Management and Push Notifications)

Central Device and Client Monitoring
(Log and Stat Information) and Reporting

Admin Accounts per Organization
(Full Access for Administration Rights)

User Authentication Entries
(via built-in Nebula Cloud Authentication Server)

Network Function Scheduling (SSID/PoE/Firewall Rules)

MAC-Based and 802.1X Authentication

Captive Portal Authentication

Base Pack Plus Pack Pro Pack

● ● ●

● ● ●

● ● ●

● ● ●

24HR

(Rolling)

 8 NO LIMIT

50 100 NO LIMIT

7D

(Rolling)

1YR

(Rolling)

● ● ●

● ● ●

● ● ●

●

●

●

●

●

●

●

Exempted from Cloud Saving Mode

Advanced Firmware Scheduling (Org/Site/Device)

Advanced Reporting Features (including Export/Email
Reports/Scheduled Reports – Custom Logo)

Automatic Network Topology (Visual and Actionable)

Email Users and Alert Notifications

WiFi Vouchers (Auto-Gen Vouchers for Access/
Authentication with user defined time limits)

Advanced Switch Control
(Vendor Based VLAN, Auto PD Recovery)

Organizational User Audit/Change Logs

● ●

● ●

● ●

● ●

● ●

● ●

● ●

●

31Solution Guide Nebula Secure Cloud Networking Solution

M R F S W

Feature Name

Base Pack Plus Pack Pro Pack

●

●

●

●

●

●

Organizational-wide Configuration Sync,
Clone and Template

Configuration Backup/Restore

Remote CLI Access/Configurator

Priority Nebula Support Request
(Direct NCC incl. Web Chat)

Open API for Ecosystem Partner Application Integration

Advanced Client Connection Monitoring & Trouble
Shooting (WiFi Aid, Connection log)

Advanced WiFi AAA Security (Dynamic Personal PSK,
Facebook WiFi, Dynamic VLAN Assignment via NCAS,
3rd Party AAA Integration incl. Captive Portal MAC Auth.
Fallback)

Advanced WiFi Control & Management
(RSSI Threshold Setting per AP, Export NAT AP Traffic Log,
Programmable SSID & PSK)

WiFi Health Monitoring and Report
(AI/Machine Learning for Wireless)

Switch IP Interfacing & Static Routing

●

●

●

●

●

●

●

●

●

●

Switch Surveillance Monitoring

Switch IPTV Feature Set
(Advanced IGMP, IPTV Report w. AI/ML Alert)

Zyxel CNM SecuReporter Traffic Log Archiving

Firewall Advanced VPN Feature Set
(VPN Topology, VPN Traffic Usage, Smart VPN, L2TP/IPSec
VPN Client Script Provisioning)

Collaborative Detection & Response (CDR) with
automatically respond action (USG FLEX & ATP Series only)

M = Management Feature (NCC)
R = 5G/4G Mobile Router Feature
F = Firewall Feature

32 Solution Guide Nebula Secure Cloud Networking Solution

S = Switch Feature
W = Wireless Feature

●

●

●

●

●

Flexible Security License Subscription

With the addition of USG FLEX and ATP Series firewall to

the Nebula cloud management family, Nebula security

solution further expands its offerings with holistic

security and protection for SMB business networks.

Gold Security Pack

A complete feature set for ATP and USG FLEX series to

perfectly fit SMBs’ requirements as well as to enable the

maximum performance and security with an all-in-one

appliance. This pack not only supports all Zyxel security

services but also Nebula Professional Pack.

Furthermore, the new cloud-based access point security

service — Connect & Protect (CNP) provides a value-

added protection to ensure a secure and smooth small

business WiFi.

Secure WiFi

USG FLEX license to manage remote access points (RAP)

with the support of secured tunnel to extend corporate

network to remote workplace.

UTM Security Pack

All-in-one UTM security service license add-on(s) to

USG FLEX Series Firewall, which includes Web Filtering,

IPS, Application Patrol, Anti-Malware, SecuReporter,

Collaborative Detection & Response, and Security

Profile Sync.

Connect & Protect (CNP)

Cloud-mode access point license to provide Threat

Protection & App Visibility with throttling to ensure a

secure and smooth wireless network.

Content Filter Pack

Three-in-one security service license add-on(s) to USG

FLEX 50, which includes Web Filtering, SecuReporter,

and Security Profile Sync.

SCR Pro Pack

Providing customers with access to full Web Filtering

categories, allowing for tracking and regulating website

access based on content. It also upgrades Ransomware

Prevention Premium for real-time threat intelligence

and unlocks advanced Nebula Pro features.

33Solution Guide Nebula Secure Cloud Networking Solution

Service related information

30-day Free Trial

Nebula offers the flexibility, on a per organization basis,

to users for them to decide which license(s) they want

to trial and when they want to trial according to their

needs. For both new and existing organizations, users

can freely choose the license(s) they want to trial at

their preferable time as long as they didn’t use the

license(s) before.

Nebula Community

The Nebula community is a great place where users can

come together to share tips and ideas, get problems

solved and learn from fellow users around the world.

Join the conversations to know more about everything

the Nebula products can do. Visit Nebula community to

explore more.

URL: https://community.zyxel.com/en/categories/nebula

34 Solution Guide Nebula Secure Cloud Networking Solution

Support Request

The Support Request channel allows users to submit

request tickets directly on NCC. It is a tool that provides

an easy way for users to send and track an inquiry for

help on a problem, request or service, to find answers

to their questions quickly. The request will go directly

to the Nebula support team, and will be reviewed

and followed by a dedicated group until the proper

resolutions are found.

* Available for Professional Pack users.

Corporate Headquarters

Zyxel Networks Corp.

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.com

Europe Asia The Americas

Zyxel Belarus

Tel: [phone]
Email: [e-mail]
www.zyxel.by

Zyxel BeNeLux

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.nl
www.zyxel.be

Zyxel Bulgaria
(Bulgaria, Macedonia,
Albania, Kosovo)

Tel: [phone]
Email: [e-mail]
www.zyxel.bg

Zyxel Czech Republic

Tel: [phone]
Hotline: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.cz

Zyxel Denmark A/S

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.dk

Zyxel Finland

Tel: [phone]
Email: myynti@zyxel.fi
www.zyxel.fi

Zyxel France

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.fr

Zyxel Germany GmbH

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.de

Zyxel Hungary & SEE

Tel: [phone]
Email: [e-mail]
www.zyxel.hu

Zyxel Iberia

Tel: [phone]
Email: [e-mail]
www.zyxel.es

Zyxel Italy

Tel: [phone]
Email: [e-mail]
www.zyxel.it

Zyxel Norway

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.no

Zyxel Poland

Tel: [phone]
Hotline: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.pl

Zyxel Romania

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.ro

Zyxel Russia

Tel: [phone]
Email: [e-mail]
www.zyxel.ru

Zyxel Slovakia

Tel: [phone]
Hotline: [phone]
Fax: [phone]
Email: [e-mail]
http://www.zyxel.sk

Zyxel Sweden A/S

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.se

Zyxel Switzerland

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.ch

Zyxel Turkey A.S.

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.com.tr

Zyxel UK Ltd.

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.co.uk

Zyxel Ukraine

Tel: [phone]
Email: [e-mail]
www.zyxel.ua

Zyxel China (Shanghai)
China Headquarters

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.cn

Zyxel China (Beijing)

Tel: [phone]
Email: [e-mail]
www.zyxel.cn

Zyxel China (Tianjin)

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.cn

Zyxel India

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.in

Zyxel Kazakhstan

Tel: [phone]
Email: [e-mail]
www.zyxel.kz

Zyxel Korea Corp.

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.kr

Zyxel Malaysia

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.com.my

Zyxel Middle East FZE

Tel: [phone]
Cell: [phone]
Email: [e-mail]
www.zyxel-me.com

Zyxel Philippine

Email: [e-mail]
www.zyxel.com.ph

Zyxel Singapore

Tel: [phone]
Hotline: [phone]
Fax: [phone]
Email: [e-mail]

Zyxel Taiwan (Taipei)

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.com.tw

Zyxel Thailand

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.co.th

Zyxel Vietnam

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.com/vn/vi/

Zyxel USA
North America Headquarters

Tel: [phone]
Fax: [phone]
Email: [e-mail]
us.zyxel.com

Zyxel Brazil

Tel: [phone]
Fax: [phone]
Email: [e-mail]
www.zyxel.com/br/pt/

For more product information, visit us on the web at www.zyxel.com

Copyright © 2023 Zyxel and/or its affiliates. All rights reserved.
All specifications are subject to change without notice.

5-000-00023004 04/23