ZYXEL NETWORKS Nebula AP Secure Cloud Networking Solution Instructions

Nebula secure cloud networking solution offers cloud-based
management for various Nebula hardware devices. It simplifies
network management and provides scalability.

Key Features

Centralized Management: Manage all Nebula devices from the
cloud.

Easy Deployment: Quick and plug-n-play deployment to multiple
locations.
Security: Secure VPN tunnels, TLS-secured connectivity.

Scalability: Supports growth from small sites to massive
networks.

Setup and Configuration

Visit https://nebula.zyxel.com/ to access the Nebula cloud
platform.

Create an account and register your Nebula devices to the cloud
platform.
Follow the on-screen instructions to configure your network
settings, establish VPN tunnels, and set up security policies.

Monitoring and Management

Use the Nebula cloud platform to monitor network performance,
configure device settings, and manage security policies
centrally.

Frequently Asked Questions (FAQ)

Q: Can Nebula devices be managed without an internet
connection?

A: No, Nebula devices require an internet connection to
communicate with the cloud control center for management.

Q: Is Nebula suitable for small businesses?

A: Yes, Nebula is designed to support organizations of all
sizes, from small sites to large distributed networks.

“`

View Fullscreen

Unlock Networking Possibilities with Cloud
Nebula Secure Cloud Networking Solution Solution Guide

We help you make everything easier
2 Solution Guide Nebula Secure Cloud Networking Solution

Overview

Nebula secure cloud networking solution provides cloud-based, centralized control and visibility over all Nebula wired, wireless, security firewall, security router, and mobile router hardware — all without the cost and complexity of on-site control equipment or

overlay management systems. With comprehensive product portfolio that can be centrally managed from the cloud, Nebula offers simple, intuitive and scalable management for all networks.

Highlights

· Intuitive, automated network management interface as well as continuous feature updates that eliminate training and labor for network implementation, maintenance and support
· Zero-touch provisioning, built-in multi-tenant, multisite network management tools accelerate deployment of large networks
· Centralized, unified and on-demand control as well as visibility that reduce capital expense for hardware and software
· Free cloud management for the life of the product without the need for ongoing costs

· Access points and switches with NebulaFlex Pro, USG FLEX firewalls (0102 bundled SKUs), ATP firewalls, USG FLEX H firewalls (0102 bundled SKUs), and Nebula 5G/4G routers are sold with bundled Professional Pack license for you to experience advanced cloud management features
· A comprehensive networking and security product portfolio from a single vendor ensures better product compatibility
· Per-device licensing model with flexible subscriptions provides rich diversity and high flexibility for customers of all sizes

K-12 Campus

Branch Office

Retail Store/Teleworker

https://nebula.zyxel.com/

Boutique Hotel Department Store

Cloud Networking

Nebula AP Nebula Switch

Browser & Apps-based Management
Nebula Mobile Router
Management Traffic

Nebula Security Gateway/Firewall/Router On-premises Nebula Hardware
Solution Guide Nebula Secure Cloud Networking Solution 3

Introduction to Nebula secure cloud networking solution

Nebula’s networking and security products, including access points, switches, security firewalls, security router and 5G/4G routers, are purpose-built for cloud management. They break the traditions and come up with easy management, centralized control, autoconfiguration, real-time Web-based diagnostics, remote monitoring and more.
The Nebula cloud managed networking introduces an affordable, effortless approach for network deployments with high security and scalability to provide completely control over Nebula devices and users. When an organization grows from small sites to

massive, distributed networks, the Nebula hardware with cloud-based self-provisioning enables easy, quick and plug-n-play deployment to multiple locations without IT professionals.
Through Nebula cloud services, firmware and security signature updates are delivered seamlessly, while secure VPN tunnels can be established automatically between different branches over the Web with just a few clicks. Based on a secure infrastructure, Nebula is designed with fault-tolerant properties that enable local networks to keep operating properly in WAN downtimes.

4 Solution Guide Nebula Secure Cloud Networking Solution

Nebula secure cloud networking solution architecture

The Nebula Cloud provides a networking paradigm for building and managing networks over the Internet in the Software as a Service model. Software as a Service (SaaS) is defined as a way of delivering software for users to access via the Internet rather than local installation. In the Nebula architecture, network functions and management services are pushed to the cloud and delivered as a service that provides instant control to the entire network without wireless controllers and overlay network management appliances.
Data Privacy and Out-of-band Control Plane

All Nebula devices are built from the ground up for cloud management with the capability to communicate with Nebula’s cloud control center through the Internet. This TLS-secured connectivity between hardware and the cloud provides network-wide visibility and control for network management using the minimal bandwidth.
Over the cloud, thousands of Nebula devices around the world can be configured, controlled, monitored and managed under a single pane of glass. With multi-site network management tools, businesses are allowed to deploy new branches of any size, while administrators are able to make policy changes any time from a central control platform.

The Nebula service uses the infrastructure and services built upon the Amazon Web Service (AWS), so all Nebula security details can be referred to AWS Cloud Security. Nebula is committed to data protection, privacy and security as well as compliance with applicable regulatory frameworks in the world. Nebula’s technical architecture along with its internal administrative and procedural safeguards can assist customers with design and deployment of cloud-based networking solutions that comply with EU data privacy regulations.
In Nebula’s out-of-band control plane, network and management traffics are split into two different data paths. Management data (e.g. configuration, statistics, monitoring, etc.) turn towards Nebula’s cloud from devices through an encrypted Internet connection of the NETCONF protocol, while user data (e.g. Web browsing and internal applications, etc.) flows directly to the destination on the LAN or across the WAN without passing through the cloud.

Cloud Hosted Network Service

Management Internet Traffic Traffic

Internet Traffic

LAN Traffic

WLAN Traffic

Solution Guide Nebula Secure Cloud Networking Solution 5

Features of the Nebula Architecture: · End user data does not traverse through the cloud. · Unlimited throughput, no centralized controller
bottlenecks when new devices are added.

· Network functions even if connection to cloud is interrupted.
· Nebula’s cloud management is backed by a 99.99% uptime SLA.

NETCONF Standard

Nebula is an industry-first solution that implements NETCONF protocol for safety of configuration changes in cloud management as all NETCONF messages are protected by TLS and exchanged using secure transports. Prior to NETCONF, CLI scripting and SNMP were two common approaches; but they have several limitations such as lacking of transaction management or useful standard security and commit mechanisms. The NETCONF protocol has been designed to address the shortcomings of the existing practices and protocols.

With the support of TCP and Callhome to overcome the NAT barrier, NETCONF is considered more reliable and elegant. It is also thinner than CWMP (TR-069) SOAP, which saves Internet bandwidth. With these features, the NETCONF protocol is regarded as more suitable for cloud networking.

6 Solution Guide Nebula Secure Cloud Networking Solution

Nebula Control Center (NCC)

Nebula Control Center offers a powerful insight into distributed networks. Its intuitive and web-based interface illustrates an instant view and analysis of network performance, connectivity and status automatically and continuously. Integrated with organization-wide and sitewide management tools, Nebula provides a quick and remote access for administrators to ensure the network is up and performing efficiently.
Nebula Control Center is also engineered with a number of security tools that provide optimal protection to networks, devices and users; and they also deliver the needed information to enforce security and enhance control over the entire Nebula network.

Highlights

· Responsive web design and intuitive user interface with light & dark modes
· Multi-lingual management interface (English, Traditional Chinese, Japanese, German, French, Russian and more to come)
· Multi-tenant, multi-site manageability · First time setup wizard · Role-based administration privileges · Pioneering cross-org management tools for MSP
· Powerful organization-wide management tools

· Rich site-wide management tools · Site-based auto and smart configuration tools · Misconfigured protection against disconnecting NCC · Configuration changing alerts · Login & Configure auditing · Real-time and historical monitoring/reporting · Granular device based information and trouble
shooting tools · Flexible firmware management

First Time Setup Wizard
Nebula first time setup wizard helps create your organization/site and setup an integrated network with only a few simple clicks, making your devices up and running in minutes.

Role-based Administration
Supervisors are allowed to appoint different privileges for multiple administrators to manage network and guess access. Specify management authority in the network access control function to maximize security and to avoid accidental misconfiguration.

Role-based Administration Solution Guide Nebula Secure Cloud Networking Solution 7

Organization-wide Management Tools Powerful organization-wide features such as organizational overview, configuration backup and restore, configuration template and configuration clone are supported to allow MSP and IT admins to manage their org/sites much easier.
Site-wide Management Tools Integrated with the feature-rich dashboards, maps, floor plans, automatic visual and actionable network topology and site-based auto and smart configuring tools, the Nebula Control Center delivers instant network analysis and automatically performs AP authentication, configuration parity check, switch ports link aggregation and site-to-site VPN.
Misconfiguration Protection To prevent any connectivity interruption caused by incorrect or inappropriate configuration, the Nebula devices can intelligently identify if the order or setting from NCC is correct to ensure the connection is always up with the Nebula cloud.

Configuration Changing Alerts Configuration changing alerts help administrators to manage thousands of networking devices more efficiently, especially in larger or distributed sites. These real-time alerts are automatically sent from the Nebula Cloud system when configuration changes are made to keep new policies always up-to-date in the entire IT organization.
Login & Configure Auditing The Nebula cloud control center automatically records the time and IP address of every logged in administrators. The configure audit log lets administrators track Web-based login actions on their Nebula networks to see what configuration changes were made and who made the changes.
Real-time & Historical Monitoring Nebula Control center provides 24×7 monitoring over the entire network, giving administrators real-time and historical activity views with unlimited status records that can be backdated to the installation time.

Site-wide Management Tools: Map & Floor Plan

Misconfiguration Protection: Set IP Address

8 Solution Guide Nebula Secure Cloud Networking Solution

Configuration Changing Alerts

Nebula Mobile App

The Nebula mobile app offers a fast approach to network management, providing an easy method for device registration and an instant view of real-time network status, which is particularly suitable for small business owners with little to no IT skills. With it, you can perform WiFi network configuration, break down usage by device

and client, troubleshoot with live tools, check the status of connected Nebula devices and clients at a glance, and scan device QR codes to register large numbers of devices to the Nebula Control Center all at once. The app’s features and functions include:

Highlights
· Sign up Nebula account · Installation walk through wizard for creating org & site,
adding devices (QR code or manually), setting up WiFi networks · Hardware install guide and LED guide · Enable/disable WiFi & sharing it via mobile messaging applications or QR code · Switch and gateway ports info · Mobile router WAN status · Site-wide client monitoring with action support · Site-wide application usage analysis with action support · Centralize 3-in-1 device status

· Site-wide and per-device usage graph · Site-wide and per-device PoE consumption · Check map and photo of device location · Live trouble shooting tools: reboot, Locator LED, switch
port power reset, cable diagnostics, connection test · Firmware upgrade schedule · License overview and inventory · Push notifications – Device down/up & license issue
related · Notification center up to 7 days alert history · Nebula support request (Pro Pack license is required)

Solution Guide Nebula Secure Cloud Networking Solution 9

Product families

Access Points with NebulaFlex/ NebulaFlex Pro

Zyxel NebulaFlex solution allows the access points to be used in two modes; it’s easy to switch between standalone mode and License Free Nebula Cloud management, anytime, with a few simple clicks. NebulaFlex provides true flexibility to adapt the access point to different needs in an ever-changing environment.

When used with Nebula you are able to centrally manage, access real-time network information and gain effortless control over your devices, all under a single intuitive platform without the need to install any software or add additional equipment like a controller. NebulaFlex Pro further supports triple mode functionality (standalone, hardware controller and Nebula) to give business clients true flexibility whatever their project may need.

Access Points with NebulaFlex Product Options

Model
Product name

NWA210BE

NWA130BE

NWA110BE

NWA90BE PRO

BE12300 WiFi 7

BE11000 WiFi 7

BE6500 WiFi 7

BE6500 4-Stream WiFi 7

Dual-Radio NebulaFlex Triple-Radio NebulaFlex Dual-Radio NebulaFlex Dual-Radio NebulaFlex

Access Point

Typical

Medium to high density Entry-level wireless

deployment deployments

establishments

Radio specification

· 1 x 802.11 b/g/n/ax/be radio
· 1 x 802.11 a/n/ac/ax/be radio
· 12.3Gbps max rate · Spatial Stream: 2+4

· 1 x 802.11 b/g/n/ax/be radio
· 1 x 802.11 a/n/ac/ax/be radio
· 11Gbps max rate · Spatial Stream: 2+2+2

Power

· DC input: USB PD 15VDC 2A (Type C)
· PoE (802.3at): power draw 21.5W

· DC input: 12VDC 2A · PoE (802.3at): power
draw 24W

Antenna

Internal antenna

* Bundled licenses are not applicable to NebulaFlex AP.

Entry-level wireless establishments
· 1 x 802.11 b/g/n/ax/be radio
· 1 x 802.11 a/n/ac/ax/be radio
· 11Gbps max rate · Spatial Stream: 2+2
· DC input: USB PD 15VDC 2 A (Type C)
· PoE (802.3at): power draw 21.5W
Internal antenna

Small business, Entry-level establishments
· 1 x 802.11 b/g/n/ax/be radio
· 1 x 802.11 a/n/ac/ax/be radio
· 6.5Gbps max rate · Spatial Stream: 2+2
· DC input: 12VDC 1.5A · PoE (802.3at): power
draw 16W
Internal antenna

10 Solution Guide Nebula Secure Cloud Networking Solution

Highlights · Enjoy cloud features like zero-touch deployment,
real-time configurations with Nebula · Easy setup on SSID/SSID schedule/VLAN/Rate limiting. · DPPSK (Dynamic Personal Pre-Shared Key) and
standard-based WPA Personal support · Enterprise wireless security and RF optimization · Secure WiFi solution provides remote workers the same
access to the corporate network and resources while being protected with the enterprise-grade security. · Connect and Protect (CNP) service provides small business environments with a trusted and application visible WiFi hotspot network to enhance wireless user protection and experience.

· DCS, smart load balancing and client roaming/steering · Rich Captive Portal support Nebula Cloud
Authentication Server accounts, Microsoft Entra ID (Azure AD), social login with Facebook accounts, and Voucher · Support smart mesh and wireless bridge · Wireless health monitoring and report · WiFi Aid gives insights into the client’s connection issues to optimize connectivity and troubleshoot

Access Points with NebulaFlex Product Options

Model
Product name

NWA50BE PRO

NWA90BE

NWA50BE

NWA30BE

BE6500 4-Stream WiFi 7 BE5100 4-Stream WiFi 7 BE5100 4-Stream WiFi 7 BE5100 4-Stream WiFi 7

Dual-Radio NebulaFlex Dual-Radio NebulaFlex Dual-Radio NebulaFlex Dual-Radio Desktop

Access Point

NebulaFlex Access Point

Typical

Small business,

deployment Entry-level

establishments

Small business, Entry-level establishments

Radio specification

· 1 x 802.11 b/g/n/ax/be radio
· 1 x 802.11 a/n/ac/ax/be radio
· 6.5Gbps max rate · Spatial Stream: 2+2

· 1 x 802.11 b/g/n/ax/be radio
· 1 x 802.11 a/n/ac/ax/be radio
· 5.1Gbps max rate · Spatial Stream: 2+2

Power

· DC input: 12VDC 1.5A · PoE (802.3at): power
draw 16W

· DC input: 12VDC 1.5A

Antenna

Internal antenna

External antenna

* Bundled licenses are not applicable to NebulaFlex AP.

Solution Guide Nebula Secure Cloud Networking Solution 11

Access Points with NebulaFlex Product Options

Model
Product name

NWA55BE
BE5100 4-Stream WiFi 7 Dual-Radio NebulaFlex Outdoor Access Point

NWA210AX
AX3000 WiFi 6 Dual-Radio NebulaFlex Access Point

NWA110AX
AX1800 WiFi 6 Dual-Radio NebulaFlex Access Point

NWA90AX Pro
AX3000 WiFi 6 Dual-Radio NebulaFlex Access Point

Typical deployment

Outdoor, Entry-level establishments

Medium to high density Entry-level wireless

deployments

establishments

Small business, Entry-level establishments

Radio specification

· 1 x 802.11 b/g/n/ax/be radio
· 1 x 802.11 a/n/ac/ax/be radio
· 5.1Gbps max rate · Spatial Stream: 2+2

· 1 x 802.11 b/g/n/ax radio · 1 x 802.11 b/g/n/ax radio · 1 x 802.11 b/g/n/ax radio

· 1 x 802.11 a/n/ac/ax radio · 1 x 802.11 a/n/ac/ax radio · 1 x 802.11 a/n/ac/ax radio

· 2.975Gbps max rate

· 1.775Gbps max rate

· 2.975Gbps max rate

· Spatial Stream: 2+4

· Spatial Stream: 2+2

Power

· PoE (802.3at): power draw 16W

· DC input: 12VDC 2A · PoE (802.3at): power
draw 19W

· DC input: 12VDC 1.5A · PoE (802.3at): power
draw 17W

· DC input: 12VDC 2A · PoE (802.3at): power
draw 20.5W

Antenna

External antenna

Internal antenna

* Bundled licenses are not applicable to NebulaFlex AP.

Access Points with NebulaFlex Product Options

Model
Product name

NWA50AX Pro
AX3000 WiFi 6 Dual-Radio NebulaFlex Access Point

NWA90AX
AX1800 WiFi 6 Dual-Radio NebulaFlex Access Point

NWA50AX
AX1800 WiFi 6 Dual-Radio NebulaFlex Access Point

NWA55AXE
AX1800 WiFi 6 Dual-Radio NebulaFlex Outdoor Access Point

Typical deployment

Small business, Entry-level establishments

Outdoor, Entry-level establishments

Radio specification

· 1 x 802.11 b/g/n/ax radio · 1 x 802.11 b/g/n/ax radio · 1 x 802.11 b/g/n/ax radio · 1 x 802.11 b/g/n/ax radio

· 1 x 802.11 a/n/ac/ax radio · 1 x 802.11 a/n/ac/ax radio · 1 x 802.11 a/n/ac/ax radio · 1 x 802.11 a/n/ac/ax radio

· 2.975Gbps max rate

· 1.775Gbps max rate

· Spatial Stream: 2+2

Power

· DC input: 12VDC 2A · PoE (802.3at): power
draw 20.5W

· DC input: 12VDC 1.5A · PoE (802.3at): power
draw 16W

· PoE (802.3at): power draw 16W

Antenna

Internal antenna

External antenna

* Bundled licenses are not applicable to NebulaFlex AP.

12 Solution Guide Nebula Secure Cloud Networking Solution

Access Points with NebulaFlex Pro Product Options

Model
Product name

WBE660S
BE22000 WiFi 7 Triple-Radio NebulaFlex Pro Access Point

WBE630S
BE12300 6-Stream WiFi 7 Dual-Radio NebulaFlex Pro Access Point

WBE530
BE11000 WiFi 7 Triple-Radio NebulaFlex Pro Access Point

WBE510D
BE6500 4-Stream WiFi 7 Dual-Radio NebulaFlex Pro Access Point

Typical deployment Radio specification
Power
Antenna

High density and interference-laden indoor environments

High density and interference laden indoor environments

Medium to high density deployments

· 1 x 802.11 b/g/n/ax/be radio
· 1 x 802.11 a/n/ac/ax/be radio
· 22Gbps max rate · Spatial Stream: 4+4+4

· 1 x 802.11 b/g/n/ax/be radio
· 1 x 802.11 a/n/ac/ax/be radio
· 12.3Gbps max rate · Spatial Stream: 2+4

· 1 x 802.11 b/g/n/ax/be radio
· 1 x 802.11 a/n/ac/ax/be radio
· 11Gbps max rate · Spatial Stream: 2+2+2

· DC input: USB PD 15VDC · DC input: USB PD 15VDC · DC input: 12VDC 2A

3A (Type C)

2A (Type C)

· PoE (802.3bt): power

· PoE (802.3bt): power · PoE (802.3at): power

draw 24W

draw 41W

draw 21.5W

Internal smart antenna Internal smart antenna Internal antenna

* 1-year Professional pack license is bundled in NebulaFlex Pro AP.

Medium to high density deployments
· 1 x 802.11 b/g/n/ax/be radio
· 1 x 802.11 a/n/ac/ax/be radio
· 6.5Gbps max rate · Spatial Stream: 2+2
· DC input: USB PD 15VDC 2A (Type C)
· PoE (802.3at): power draw 21.5W
Dual-optimized internal antenna

Access Points with NebulaFlex Pro Product Options

Model
Product name

WAX650S
AX3600 WiFi 6 Dual-Radio NebulaFlex Pro Access Point

WAX630S
AX3000 WiFi 6 Dual-Radio NebulaFlex Pro Access Point

WAX610D
AX3000 WiFi 6 Dual-Radio NebulaFlex Pro Access Point

WAX510D
AX1800 WiFi 6 Dual-Radio NebulaFlex Pro Access Point

Typical deployment

High density and interference-laden indoor environments

Medium to high density Medium to high density

deployments

Radio specification

· 1 x 802.11 b/g/n/ax radio · 1 x 802.11 b/g/n/ax radio · 1 x 802.11 b/g/n/ax radio · 1 x 802.11 b/g/n/ax radio

· 1 x 802.11 a/n/ac/ax radio · 1 x 802.11 a/n/ac/ax radio · 1 x 802.11 a/n/ac/ax radio · 1 x 802.11 a/n/ac/ax radio

· 1 x monitoring radio

· 2.975Gbps max rate

· 1.775Gbps max rate

· 3.55Gbps max rate

· Spatial Stream: 2+4

· Spatial Stream: 2+2

· Spatial Stream: 4+4

Power

· DC input: 12VDC 2.5A · PoE (802.3bt): power
draw 31W

· DC input: 12VDC 2A · PoE (802.3at): power
draw 19W

· DC input: 12VDC 1.5A · PoE (802.3at): power
draw 17W

Antenna

Internal smart antenna Internal smart antenna Dual-optimized internal Dual-optimized internal

antenna

* 1-year Professional pack license is bundled in NebulaFlex Pro AP.

Solution Guide Nebula Secure Cloud Networking Solution 13

Access Points with NebulaFlex Pro Product Options

Model
Product name

WAX655E
AX5400 WiFi 6 Dual-Radio NebulaFlex Pro Outdoor Access Point

WAX300H
AX3000 WiFi 6 Dual-Radio NebulaFlex Pro Wall-Plate Access Point

WAC500H
AC1200 WiFi 5 Wave 2 Dual-Radio NebulaFlex Pro Wall-Plate Access Point

Typical

Outdoor

deployment

Per-room deployments

Radio

· 1 x 802.11 b/g/n/ax radio

specification · 1 x 802.11 a/n/ac/ax radio · 5.4Gbps max rate

· Spatial Stream: 2+4

· 1 x 802.11 b/g/n/ax radio · 1 x 802.11 a/n/ac/ax radio · 2.975Gbps max rate · Spatial Stream: 2+2

· 1 x 802.11 b/g/n radio · 1 x 802.11 a/n/ac radio · 1.2Gbps max rate · Spatial Stream: 2+2

Power

· 802.3at PoE only

· PoE (802.3at): power draw

· DC input: 12VDC, 1A

25.5W (include 4W for PoE PSE) · PoE (802.3at/af): power draw 18W

Antenna

External antenna

Internal antenna

* 1-year Professional pack license is bundled in NebulaFlex Pro AP.

14 Solution Guide Nebula Secure Cloud Networking Solution

Switches with NebulaFlex/ NebulaFlex Pro

Zyxel switches with NebulaFlex allow you to easily switch between standalone and our license-free Nebula cloud management platform anytime with just a few simple clicks. NebulaFlex Pro switches are further bundled with a 1-year Professional Pack license. XS3800-28, XGS2220 and GS2220 Series switches come with NebulaFlex Pro which provides advanced IGMP technology, network analytics alerts and more, that allow resellers, MSPs, and network admins to experience the simplicity, scalability, and flexibility of Zyxel’s Nebula networking solution.

Meanwhile, GS1350 Series further focus on surveillance applications, giving you the flexibility to monitor and manage your surveillance network via the cloud. Both NebulaFlex/NebulaFlex Pro switches protect your investment on wired technology by offering the flexibility to transition to the cloud in your own time, without worrying about additional ongoing licensing costs.

Switches with NebulaFlex Product Options

Model Product name

XMG1915-10E
8-port 2.5GbE Smart Managed Switch with 2 SFP+ Uplink

XMG1915-10EP
8-port 2.5GbE Smart Managed PoE Switch with 2 SFP+ Uplink

XMG1915-18EP
16-port 2.5GbE Smart Managed PoE Switch with 2 SFP+ Uplink

Switch class

Smart Managed

Total port count

100M/1G/2.5G (RJ-45)

100M/1G/2.5G (RJ-45, PoE++) –

1G/10G SFP+

Switching capacity (Gbps)

Total PoE power budget (watts) –

* Bundled licenses are not applicable to NebulaFlex switches.

Smart Managed 10 8 8 2 80 130

Smart Managed 18 16 8 2 120 180

Solution Guide Nebula Secure Cloud Networking Solution 15

Highlights
· Comprehensive Switch product portfolio includes wide-range port selection, multiple speed options (1G, 2.5G, 10G, 25G, 100G), PoE or non-PoE, and all fiber models.
· Smart fan and fanless designs offer silent operations in the office
· Offers scalable 10G to 100G solution in the cloud
· Check real-time status intuitively by cloud and PoE LED indicators
· GS1350 Series Surveillance switches are designed with specialized PoE features for IP cameras and surveillance report that can be monitor and manage the surveillance networks via the Cloud
· Enjoy cloud features like zero-touch deployment, real-time configurations with Nebula

· Efficient network provisioning with multiple ports configuration all at once
· User-friendly ACL and PoE schedule configuration · Intelligent PoE technology and network topology · Auto PD Recovery to detect and recover failed powered
devices automatically · RADIUS, static MAC forwarding and 802.1X authentication · Advanced Switch Control (Vendor Based VLAN, IP
Interfacing & Static Routing, Remote CLI access) · Advanced IGMP multicast functionality and IPTV report · Switch Stacking enhances bandwidth, scalability, and
redundancy through unified cloud management · Port Advisor identifies port issues with visual summaries
and quick diagnostics

Switches with NebulaFlex Product Options

Model Product name

GS1915-8
8-port GbE Smart Managed Switch

GS1915-8EP

GS1915-24E

8-port GbE Smart

24-port GbE Smart

Managed PoE Switch Managed Switch

GS1915-24EP
24-port GbE Smart Managed PoE Switch

Switch class

Smart Managed Smart Managed

Total port count

100M/1G (RJ-45)

100M/1G (RJ-45, PoE+) –

Switching capacity

(Gbps)

Total PoE power budget –

(watts)

* Bundled licenses are not applicable to NebulaFlex switches.

Smart Managed 24 24 48
–

Smart Managed 24 24 12 48
130

16 Solution Guide Nebula Secure Cloud Networking Solution

Switches with NebulaFlex Product Options

Model Product name

GS1920-8HPv2
8-port GbE Smart Managed PoE Switch

GS1920-24v2
24-port GbE Smart Managed Switch

GS1920-24HPv2
24-port GbE Smart Managed PoE Switch

GS1920-48v2
48-port GbE Smart Managed Switch

GS1920-48HPv2
48-port GbE Smart Managed PoE Switch

Switch class

Smart Managed Smart Managed

Total port count 10

100M/1G (RJ-45) 8

100M/1G

–

(RJ-45, PoE+)

1G SFP

–

1G combo

(SFP/RJ-45)

Switching capacity 20

(Gbps)

Total PoE power

130

–

budget (watts)

* Bundled licenses are not applicable to NebulaFlex switches.

Smart Managed 28 24 24
4
56
375

Smart Managed 50 44 –
2 4
100
–

Smart Managed 50 44 48
2 4
100
375

Switches with NebulaFlex Product Options

Model Product name

XS1930-10
8-port 10G Multi-Gig Lite-L3 Smart Managed Switch with 2 SFP+

XS1930-12HP
8-port 10G MultiGig PoE Lite-L3 Smart Managed Switch with 2 10G Multi-Gig Ports & 2 SFP+

XS1930-12F
10-port 10G Lite-L3 Smart Managed Fiber Switch with 2 10G Multi-Gig Ports

XMG1930-30
24-port 2.5G Multi-Gig Lite-L3 Smart Managed Switch with 6 10G Uplink

XMG1930-30HP
24-port 2.5G Multi-Gig Lite-L3 Smart Managed PoE++/PoE+ Switch with 6 10G Uplink

Switch class

Smart Managed Smart Managed

Total port count 10

100M/1G/2.5G –

–

(RJ-45)

100M/1G/2.5G –

–

(RJ-45, PoE+)

100M/1G/2.5G –

–

(RJ-45, PoE++)

1G/2.5G/5G/10G 8

(RJ-45)

1G/2.5G/5G/10G –

(RJ-45, PoE++)

1G/10G SFP+

Switching capacity 200

240

(Gbps)

Total PoE power

–

375

budget (watts)

* Bundled licenses are not applicable to NebulaFlex switches.

Smart Managed 12 –
–
–
2
–
10 240
–

Smart Managed 30 24
–
–
4
–
2 240
–

Smart Managed 30 24
20
4
4
4
2 240
700

Solution Guide Nebula Secure Cloud Networking Solution 17

Switches with NebulaFlex Product Options

Model Product name

XGS1935-28
24-port GbE Lite-L3 Smart Managed Switch with 4 10G Uplink

XGS1935-28HP
24-port GbE PoE Lite-L3 Smart Managed Switch with 4 10G Uplink

XGS1935-52

XGS1935-52HP

48-port GbE Lite-L3 Smart Managed Switch with 4 10G Uplink

48-port GbE PoE Lite-L3 Smart Managed Switch with 4 10G uplink

Switch class

Smart Managed

Total port count

100M/1G (RJ-45)

100M/1G (RJ-45, PoE+) –

1G/10G SFP+

Switching capacity (Gbps) 128

Total PoE power budget (watts)

* Bundled licenses are not applicable to NebulaFlex switches.

Smart Managed 28 24 24 4 128 375

Smart Managed 52 48 4 176 –

Smart Managed 52 48 48 4 176 375

Switches with NebulaFlex Pro Product Options

Model Product name

GS1350-6HP
5-port GbE Smart Managed PoE Switch with GbE Uplink

GS1350-12HP
8-port GbE Smart Managed PoE Switch with GbE Uplink

GS1350-18HP
16-port GbE Smart Managed PoE Switch with GbE Uplink

GS1350-26HP
24-port GbE Smart Managed PoE Switch with GbE Uplink

Switch class

Smart Managed

Total port count

100M/1G (RJ-45)

100M/1G (RJ-45, PoE+) 5 (port 1-2 PoE++) 8

1G SFP

1G combo (SFP/RJ-45) –

–

Switching capacity (Gbps) 12

Total PoE power budget 60

130

(watts)

* 1-year Professional pack license is bundled in NebulaFlex Pro switch.

Smart Managed 18 16 16 2 36 250

Smart Managed 26 24 24 2 52 375

18 Solution Guide Nebula Secure Cloud Networking Solution

Switches with NebulaFlex Pro Product Options

Model Product name

GS2220-10
8-port GbE L2 Switch with GbE Uplink

GS2220-10HP
8-port GbE L2 PoE Switch with GbE Uplink

GS2220-28
24-port GbE L2 Switch with GbE Uplink

GS2220-28HP
24-port GbE L2 PoE Switch with GbE Uplink

Switch class

Layer 2 Plus

Total port count

100M/1G (RJ-45)

100M/1G (RJ-45, PoE+) –

1G SFP

–

1G combo (SFP/RJ-45) 2

Switching capacity (Gbps) 20

Total PoE power budget –

180

(watts)

* 1-year Professional pack license is bundled in NebulaFlex Pro switch.

Switches with NebulaFlex Pro Product Options

Model Product name

GS2220-50
48-port GbE L2 Switch with GbE Uplink

Layer 2 Plus 28 4 56 –

Layer 2 Plus 28 24 24 4 56 375

GS2220-50HP
48-port GbE L2 PoE Switch with GbE Uplink

Switch class

Layer 2 Plus

Total port count

100M/1G (RJ-45)

100M/1G (RJ-45, PoE+) –

1G SFP

1G combo (SFP/RJ-45) 4

Switching capacity (Gbps) 100

Total PoE power budget (watts)

* 1-year Professional pack license is bundled in NebulaFlex Pro switch.

Layer 2 Plus 50 44 48 2 4 100 375

Solution Guide Nebula Secure Cloud Networking Solution 19

Switches with NebulaFlex Pro Product Options

Model Product name

XGS2220-30
24-port GbE L3 Access Switch with 6 10G Uplink

XGS2220-30HP
24-port GbE L3 Access PoE+ Switch with 6 10G Uplink (400W)

XGS2220-30F
24-port SFP L3 Access Switch with 6 10G Uplink

Switch class

Layer 3 Access

Total port count

100M/1G (RJ-45)

100M/1G (RJ-45, PoE+) –

100M/1G (RJ-45, PoE++) –

1G/2.5G/5G/10G (RJ-45) 2

1G/2.5G/5G/10G

–

(RJ-45, PoE++)

1G SFP

–

1G/10G SFP+

Switching capacity (Gbps) 168

Total PoE power budget (watts)

Physical stacking

* 1-year Professional pack license is bundled in NebulaFlex Pro switch.

Layer 3 Access 30 24 16 8 2 2
4 168 400
4

Switches with NebulaFlex Pro Product Options

Model Product name

XGS2220-54
48-port GbE L3 Access Switch with 6 10G Uplink

XGS2220-54HP
48-port GbE L3 Access PoE+ Switch with 6 10G Uplink (600W)

Layer 3 Access 30 2 –
24 4 168 –
4
XGS2220-54FP 48-port GbE L3 Access PoE+ Switch with 6 10G Uplink (960W)

Switch class

Layer 3 Access

Total port count

100M/1G (RJ-45)

100M/1G (RJ-45, PoE+) –

100M/1G (RJ-45, PoE++) –

100M/1G/2.5G/5G/10G 2

(RJ-45)

100M/1G/2.5G/5G/10G (RJ-45, PoE++)

1G SFP

–

1G/10G SFP+

Switching capacity (Gbps) 261

Total PoE power budget (watts)

Physical stacking

* 1-year Professional pack license is bundled in NebulaFlex Pro switch.

Layer 3 Access 54 48 40 8 2
2
4 261 600
4

20 Solution Guide Nebula Secure Cloud Networking Solution

Layer 3 Access 54 48 40 8 2
2
4 261 960
4

Switches with NebulaFlex Pro Product Options

Model Product name

XS3800-28
28-port 10GbE L3 Aggregation Switch

Model Product name

CX4800-56F
48-port 10G/25G L3 Aggregation Fiber Switch with 8 100G Uplink

Switch class

Layer 3 Aggregation

Total port count

1G/2.5G/ 5G/10G 4 (RJ-45)

10G Multi-Gig

combo

(1G/2.5G/5G/10G

RJ-45/10G SFP+)

1G/10G SFP+

Switching capacity 560 (Gbps)

Physical stacking

* 1-year Professional pack license is bundled in NebulaFlex Pro switch.

Switch class

Layer 3 Aggregation

Total port count

10G/25G SFP28

100G QSFP28

Switching capacity 4 (Tbps)

* 1-year Professional pack license is bundled in NebulaFlex Pro switch.

Switch Accessory with Nebula Monitor Functions

Model Product name

PoE12-3PD
Cloud Outdoor/ Indoor PoE Extender

Total port count PoE in port
PoE out port
Max. PoE power budget Enclosure Installation Power input Operating temperature Ethernet port surge protection Ethernet port ESD protection (air/contact)

4 1 x 10/100/1000BASE-T Ethernet with IEEE 802.3bt PoE++ 3 x 10/100/1000BASE-T Ethernet with IEEE 802.3at PoE+ 45W
IP55, plastic Pole and Wall 802.3bt (60W) PoE input only -20°C to 50°C/-4°F to 122°F
6KV
8KV/6KV

Solution Guide Nebula Secure Cloud Networking Solution 21

Firewall Series

Zyxel’s firewall innovation has steadily progressed over the years, leading to the advanced USG FLEX H Series–built for high-performance and hybrid network environments. Powered by next-gen hardware, the H Series delivers up to 3x faster throughput, supports 1G to 10G high-speed ports, and features a modular design with flexible port combinations to suit evolving business needs. As part of the Nebula cloud-managed ecosystem, it provides unified policy control, real-time analytics,

and AI-powered threat intelligence. Smart Sync ensures that configurations and security policies stay in sync across both cloud and on-prem deployments, offering consistent protection with less manual effort. Together, Nebula and USG FLEX H deliver enterprise-grade security in a scalable, easy-to-manage solution–empowering SMBs and MSPs to stay ahead in today’s complex and fast-changing threat landscape.

Highlights
· Cloud and on-prem security integrated with smart sync to effortlessly enforce unified security policies
· High assurance multi-layered protection includes IP/ URL/DNS reputation filter, App Patrol, Web Filtering, Anti-malware and IPS
· Collaborating policy enforcement devices and eliminating repetitive logins with Collaborative Detection & Response
· Support for Org-wide VPN and Orchestrator SD-VPN with VPN topology displaying traffic usage

· Best practices for remote access with Secure WiFi and VPN management consolidates and ensures the same network control and security across multiple sites
· Level up security with two-factor authentication (2FA) network access let you quickly and easily verify users’ identities with users accessing their networks through the edge devices
· Cloud sandboxing technology prevents zero-day attacks of all sorts
· Comprehensive summary reports for security events and network traffic through SecuReporter service

22 Solution Guide Nebula Secure Cloud Networking Solution

Product Options
Model Product name

USG FLEX 50H/HP USG FLEX 100H/HP USG FLEX 200H/HP USG FLEX 500H

Firewall

USG FLEX 700H
USG FLEX 700H Firewall

Hardware Specifications Interface/Ports

· 50H: 5 x 1GbE
· 50HP: 4 x 1GbE 1 x 1GbE/PoE+ (802.3at, 30W max.)

· 100H: 8 x 1GbE
· 100HP: 7 x 1GbE 1 x 1GbE/PoE+ (802.3at, 30W max.)

USB 3.0 ports

Console port

Yes (RJ-45)

Rack-mountable

–

Fanless

Yes

System Capacity & Performance*1

SPI firewall throughput*2 (Mbps)

2,000

VPN throughput*3 (Mbps)

500

IPS throughput*4 (Mbps)

1,000

Anti-Malware throughput*4 (Mbps)

600

UTM throughput*4

600

(Anti-Malware & IPS, Mbps)

Max. TCP concurrent sessions*5

100,000

Max. concurrent IPSec VPN tunnels*6

Recommended gateway-to-gateway

IPSec VPN tunnels

Concurrent SSL VPN users

VLAN interface

Security Service*7

Anti-Malware

Yes

IPS

Yes

Application Patrol

Yes

Web Filtering

Yes

Reputation Filter

Yes

SecuReporter

Yes

Sandboxing

Yes

Collaborative Detection & Response

Yes

Security Profile Synchronize (SPS)

Yes

Geo Enforcer

Yes

Device Insight

Yes

SSL (HTTPS) Inspection

Yes

Two-Factor Authentication

Yes

VPN Features

VPN Protocal

IKEv2/IPSec, SSL, Tailscale*8

WLAN Management & Connectivity

Default Number of Managed AP

Secure WiFi

Yes

Maximum Number of Tunnel-Mode AP*9 3

Maximum Number of Managed AP

Recommend max. AP in 1 AP Group

Device HA

–

1 Yes (RJ-45) Yes
4,000 900 1,500 1,000 1,000
300,000 50 20
25 16
Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes
IKEv2/IPSec, SSL, Tailscale*8
8 Yes 6 24 10 –

· 200H: 2 x 2.5mGig 6 x 1GbE
· 200HP: 1 x 2.5mGig 1 x 2.5mGig/PoE+ (802.3at, 30W max.) 6 x 1GbE
1
Yes (RJ-45)
Yes
Yes

2 x 2.5mGig

2 x 2.5mGig/PoE+ 2 x 10mGig/PoE+

(802.3at, total 30W) (802.3at, total 30W)

8 x 1GbE

2 x 10G SFP+

1 Yes (RJ-45) Yes –

6,500 1,200 2,500 1,800 1,800
600,000 100 50
50 32

10,000 2,000 4,500 3,000 3,000
1,000,000 300 150
150 64

15,000 3,000 7,000 4,000 4,000
2,000,000 1,000 300
500 128

Yes

IKEv2/IPSec, SSL, Tailscale*8

IKEv2/IPSec, SSL, IKEv2/IPSec, SSL,

Tailscale*8

Yes

130

520

200

Yes

*1: Actual performance may vary depending on system configuration, network conditions, and activated applications.
*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets). *3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets). *4: Anti-Malware (with Express Mode) and IPS throughput measured using
the industry standard HTTP performance test (1,460-byte HTTP packets). Testing done with multiple flows.

*5: Maximum sessions measured using the industry standard IXIA IxLoad testing tool.
*6: Including Gateway-to-Gateway and Client-to-Gateway. *7: Requires a Zyxel service license to enable or extend feature capacity. SSL
(HTTPS) inspection and Two-Factor Authentication are default supported features for any registered USG FLEX H device. *8: Local GUI only. *9: Available in Q3, 2026

Solution Guide Nebula Secure Cloud Networking Solution 23

Product Options
Model Product name

USG FLEX 50
ZyWALL USG FLEX 50 Firewall

USG FLEX 50AX
ZyWALL USG FLEX 50AX Firewall

USG FLEX 100
ZyWALL USG FLEX 100 Firewall

USG FLEX 100AX
ZyWALL USG FLEX 100AX Firewall

USG FLEX 200
ZyWALL USG FLEX 200 Firewall

USG FLEX 500
ZyWALL USG FLEX 500 Firewall

USG FLEX 700
ZyWALL USG FLEX 700 Firewall

System Capacity & Performance*1

SPI firewall

350

throughput*2 (Mbps)

VPN throughput*3

(Mbps)

IPS throughput*4

–

(Mbps)

Anti-Malware

–

throughput*4 (Mbps)

UTM throughput*4

–

(Anti-Malware & IPS,

Mbps)

Max. TCP concurrent 20,000 sessions*5

20,000

Max. concurrent IPSec 20

VPN tunnels*6

Recommended

gateway-to-gateway

IPSec VPN tunnels

Concurrent SSL VPN 15

users

VLAN interface

Wireless Specifications

Standard compliance –

802.11 ax/ac/n/g/b/a

Wireless frequency –

2.4/5GHz

Radio

–

SSID number

–

No. of antenna

–

2 detachable antennas

Antenna gain

–

3dbi @2.4GHz/5GHz

Data rate

–

2.4GHz: up to 600Mbps 5GHz: up to 1200Mbps

Security Service

Sandboxing*7

–

Web Filtering*7

Yes

Application Patrol*7 –

–

Anti-Malware*7

–

IPS*7

–

SecuReporter*7

Yes

Collaborative

–

Detection & Response*7

Device Insight

Yes

Security Profile

Yes

Synchronize (SPS)*7

Geo Enforcer

Yes

SSL (HTTPS)

–

inspection

2-Factor

Yes

Authentication

VPN Features

VPN

IKEv2, IPSec, IKEv2, IPSec, SSL, L2TP/IPSec SSL, L2TP/IPSec

Microsoft Azure

Yes

Amazon VPC

Yes

Secure WiFi Service*7

Maximum Number of –

–

Tunnel-Mode AP

Maximum Number of –

–

Managed AP

Recommend max. AP –

–

in 1 AP Group

900 270 540 360 360
300,000 50 20
30 8
–
Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes
IKEv2, IPSec, SSL, L2TP/IPSec Yes Yes
6 24 10

900
270
540
360
360
300,000
50
20
30
8
802.11 ax/ac/n/g/b/a 2.4/5GHz 2 4 2 detachable antennas 3dbi @2.4GHz/5GHz 2.4GHz: up to 600Mbps 5GHz: up to 1200Mbps
Yes Yes Yes Yes Yes Yes Yes
Yes Yes
Yes Yes
Yes
IKEv2, IPSec, SSL, L2TP/IPSec Yes Yes
6
24
10

1,800 450 1,100 570 550
600,000 100 50
60 16
–
Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes
IKEv2, IPSec, SSL, L2TP/IPSec Yes Yes
10 40 20

2,300 810 1,500 800 800
1,000,000 300 150
150 64
–
Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes
IKEv2, IPSec, SSL, L2TP/IPSec Yes Yes
18 72 60

5,400 1,100 2,000 1,450 1,350
1,600,000 500 250
150 128
–
Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes
IKEv2, IPSec, SSL, L2TP/IPSec Yes Yes
130 520 200

*1: Actual performance may vary depending on system configuration, network conditions, and activated applications.
*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets). *3: VPN throughput measured based on RFC 2544 (1,424-byte UDP packets); IMIX: UDP
throughput based on a combination of 64 byte, 512 byte and 1424 byte packet sizes.

*4: Anti-malware (with Express Mode) and IPS throughput measured using the industry standard HTTP performance test (1,460-byte HTTP packets). Testing done with multiple flows.
*5: Maximum sessions measured using the industry standard IXIA IxLoad testing tool *6: Including Gateway-to-Gateway and Client-to-Gateway. *7: With Zyxel service license to enable or extend the feature capacity.

24 Solution Guide Nebula Secure Cloud Networking Solution

Product Options
Model Product name

ATP100 ATP Firewall

ATP200 ATP Firewall

ATP500 ATP Firewall

ATP700 ATP Firewall

ATP800 ATP Firewall

System Capacity & Performance*1

SPI firewall throughput*2 (Mbps)

1,000

2,000

2,600

6,000

8,000

VPN throughput*3 (Mbps)

300

500

900

1,200

1,500

IPS throughput*4 (Mbps)

600

1,200

1,700

2,200

2,700

Anti-Malware throughput*4 (Mbps) 380

630

900

1,600

2,000

UTM throughput*4

380

600

890

1,500

1900

(Anti-Malware and IPS, Mbps)

Max. TCP concurrent sessions*5

300,000

600,000

1,000,000

1,600,000

2,000,000

Max. concurrent IPSec VPN tunnels*6 40

100

300

500

1,000

Recommended gateway-to-gateway 20

150

300

IPSec VPN tunnels

Concurrent SSL VPN users

150

500

VLAN interface

128

Security Service

Sandboxing*7

Yes

Web Filtering*7

Yes

Application Patrol*7

Yes

Anti-Malware*7

Yes

IPS*7

Yes

Reputation Filter*7

Yes

SecuReporter*7

Yes

Collaborative Detection & Response*7 Yes

Yes

Device Insight

Yes

Security Profile Synchronize (SPS)*7 Yes

Yes

Geo Enforcer

Yes

SSL (HTTPS) Inspection

Yes

2-Factor Authentication

Yes

VPN Features

VPN

IKEv2, IPSec,

SSL, L2TP/IPSec SSL, L2TP/IPSec SSL, L2TP/IPSec SSL, L2TP/IPSec SSL, L2TP/IPSec

Microsoft Azure

Yes

Amazon VPC

Yes

Secure WiFi Service*7

Maximum Number of Tunnel-Mode AP

130

Maximum Number of Managed AP 24

264

520

Recommend max. AP in 1 AP Group 10

200

300

*1: Actual performance may vary depending on system configuration, network conditions, and activated applications.
*2: Maximum throughput based on RFC 2544 (1,518-byte UDP packets). *3: VPN throughput measured based on RFC 2544 (1,424-byte UDP
packets). *4: Anti-Malware (with Express mode) and IPS throughput measured
using the industry standard HTTP performance test (1,460-byte HTTP packets). Testing done with multiple flows.

*5: Maximum sessions measured using the industry standard IXIA IxLoad testing tool.
*6: Including Gateway-to-Gateway and Client-to-Gateway. *7: Enable or extend feature capacity with Zyxel service license.

Solution Guide Nebula Secure Cloud Networking Solution 25

Security Router Series

The USG LITE and SCR series are secure, cloudmanaged routers that provide business-class firewall protection, VPN gateway capabilities, high-speed WiFi, and built-in security to safeguard against ransomware and other threats. These routers are ideal for teleworkers or small businesses/offices seeking easy-to-manage, subscription-free network security.

Powered by Zyxel Security Cloud, the USG LITE and SCR series feature best-in-class threat management capabilities. They detect malicious network activities, prevent ransomware and malware, block intrusions and exploits, and protect against threats from the dark web, ads, VPN proxies, mail fraud, and phishing. This offers small business owners comprehensive security without any subscription fees.

Highlights · Subscription-free Security built-in as standard
(inc. Ransomware/Malware Protection) · The latest WiFi technology provides the fastest
wireless connection speed possible. · Self-configuring, plug-and-play deployment by
Nebula Mobile app · Central management via Zyxel Nebula Platform · Auto VPN for easy deployment for site-to-site VPN
Connectivity

· Up to 8 SSIDs with intergrade enterprise security and personal/guest access
· 2.5GbE ports provide premium wired connections · Access security status and analytics through an
informative dashboard · Optional Elite Pack Licensing to increase
functionality and security

26 Solution Guide Nebula Secure Cloud Networking Solution

Product Options
Model Product name

USG LITE 60AX AX6000 WiFi 6 Security Router

SCR 50AXE AXE5400 WiFi 6E Security Router

Hardware Wireless standard
CPU RAM/FLASH Interface
System Capacity & Performance*1 SPI firewall throughput LAN to WAN (Mbps)*2 Throughput with threat intelligence on (Mbps) VPN throughput*3
Security Service Ransomware/Malware Protection Intrusion Blocker Dark Web Blocker Stop Mail Fraud & Phishing Block Ads Block VPN Proxy Web Filtering Firewall Country Restriction (GeoIP) Allowlist/Blocklist Identify Traffic (Applications & Clients) Block Applications or Clients Throttle Application Usage (BWM) Security Event Analytics
VPN Features Site2site VPN Remote VPN
Wireless Features Site-wide SSID provisioning from Nebula cloud See wireless client info from the Nebula dashboard WiFi encryption SSID number Auto/Fixed channel selection MU-MIMO/Explicit beamforming
Networking WAN type Networking features
IPTV/MOD support Management
Site-wide SSID management Multi-site management Topology Diagnostics Remote support

IEEE 802.11 ax/ac/n/a 5GHz IEEE 802.11 ax/n/b/g 2.4GHz
Quad-core, 2.00GHz 1GB/512MB 1 x WAN: 2.5GbE RJ-45 port 1 x LAN: 2.5GbE RJ-45 port 4 x LAN: 1GbE RJ-45 ports
2,000 2,000 300
Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Nebula Threat Report
IPSec Yes
Yes Yes WPA2-PSK, WPA3-PSK 8 Yes Yes
DHCP/Static IP/PPPoE Reserve IP (static DHCP) Block clients NAT – Virtual server DHCP server and DHCP relay Dynamic DNS (DDNS) Static route Guest Network VLAN Segmentation Yes
Yes Yes Yes Yes Yes

IEEE 802.11 ax 6GHz IEEE 802.11 ax/ac/n/a 5GHz IEEE 802.11 ax/n/b/g 2.4GHz Dual-core, 1.00GHz, Cortex A53 1GB/256MB 1 x WAN: 1GbE RJ-45 port 4 x LAN: 1GbE RJ-45 ports
900 900 55
Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Nebula Threat Report
IPSec –
Yes Yes WPA2-PSK, WPA3-PSK 4 Yes Yes
DHCP/Static IP/PPPoE Port forwarding Guest VLAN DHCP IP/MAC binding MAC filter
–
Yes Yes Yes Yes Yes

*1: Actual performance may vary depending on system configuration,network conditions, and activated applications. *2: Maximum throughput is measured using FTP with a 2GB file and 1,460-byte packets across multiple sessions. *3: VPN throughput is measured based on RFC 2544 using 1,424-byte UDP packets

Solution Guide Nebula Secure Cloud Networking Solution 27

5G/4G Router Series

Zyxel offers a wide range of Nebula-managed 5G NR and 4G LTE routers, ideal for Fixed Wireless Access (FWA) across diverse business environments. These solutions eliminate the need for wired infrastructure, enabling fast, flexible deployments.

Our outdoor routers deliver stable connectivity in challenging environments, while indoor models provide reliable 5G/4G access as either a primary or backup connection. Designed for performance and simplicity, all devices support cloud-based management via Nebula, allowing centralized monitoring, configuration, and troubleshooting across multiple sites.

Highlights · 5G NR downlink up to 5Gbps* (FWA710, FWA510,
FWA505) · IP68-rated weather protection (FWA710) · Deploys WiFi 6 AX3600 (FWA510), AX1800 (FWA505) · Supports SA/NSA mode and network slicing function
(FWA710, FWA510, FWA505)

· Easily provision and manage networks in real-time from anywhere at any time, all centrally and seamlessly
· Free from wired connection · Failover function (FWA510, FWA505, LTE3301-PLUS)
* The maximum data rate is a theoretical value. The actual data rate depends on the operator and network environment

28 Solution Guide Nebula Secure Cloud Networking Solution

Product Options
Model Product Name

Nebula FWA710

Nebula FWA510

Nebula 5G NR Outdoor Router Nebula 5G NR Indoor Router

Nebula FWA505 Nebula 5G NR Indoor Router

Download Data Rates

5Gbps*

Band Freq (MHz) Duplex

2100

FDD Yes

1800

FDD Yes

850

FDD Yes

2600

FDD Yes

900

FDD Yes

800

FDD Yes

700

FDD Yes

2600

TDD Yes

2300

TDD Yes

2500

TDD Yes

3700

TDD Yes

3500

TDD Yes

DL 4×4 MIMO

Yes (n5/8/20/28 supports 2×2 only)

DL 2×2 MIMO

–

2100

FDD Yes

1900

FDD –

1800

FDD Yes

1700

FDD –

850

FDD Yes

2600

FDD Yes

900

FDD Yes

700a

FDD –

700c

FDD –

800

FDD Yes

1900+

FDD –

850+

FDD –

700

FDD Yes

700d

FDD –

LTE

2600

FDD Yes

2300

TDD Yes

2500

TDD Yes

3500

TDD Yes

3700

TDD Yes

1700

FDD –

DL CA

Yes

UL CA

Yes

DL 4×4 MIMO

B1/B3/B7/B32/B38/B40/B41/B42

DL 2×2 MIMO

Yes

DL 256-QAM

Yes

DL 64-QAM

Yes

UL 64-QAM

Yes (supports 256QAM)

UL 16-QAM

Yes

MIMO (UL/DL)

2×2/4×4

2100

FDD Yes

1800

2100

FDD Yes FDD Yes

900

FDD Yes

802.11n 2×2

Yes**

802.11ac 2×2

–

WiFi

802.11ax 2×2

–

802.11ax 4×4

–

Number of users

–

Ethernet

GbE LAN WAN

2.5GbE x1 (PoE) –

SIM slot

Micro/Nano SIM slot

Micro SIM

Power

DC input

PoE 48V

Ingress protection Network processor

IP68

5Gbps*
Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes (n5/8/20/28 supports 2×2 only) Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes B1/B3/B7/B32/B38/B40/B41/B42 Yes Yes Yes Yes (supports 256QAM) Yes 2×2/4×4 Yes Yes Yes Yes Yes Yes Yes Yes Up to 64 2.5GbE x2 2.5GbE x1 (reuse LAN 1) Micro SIM DC 12V –

5Gbps*
Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes (n1/n3/n7/n38/n40/n41/n77/n78) (n5/n8/n20/n28) Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes B1/B3/B7/B32/B38/B40/B41/B42 Yes 256-QAM/256-QAM Yes Yes (supports 256QAM) Yes 2×2/4×4 Yes Yes Yes Yes Yes Yes Yes Up to 64 1GbE x2 x1 (reuse LAN 1) Micro SIM DC 12V –

* The maximum data rate is a theoretical value. The actual data rate depends on the operator. ** WiFi is used for management purpose only.

Solution Guide Nebula Secure Cloud Networking Solution 29

Model Product Name

Nebula LTE3301-PLUS Nebula 4G LTE-A Indoor Router

Download Data Rates

Band

DL 4×4 MIMO

DL 2×2 MIMO

LTE

DL CA

Freq (MHz) 2100 1800 850 2600 900 800 700 2600 2300 2500 3700 3500
2100 1900 1800 1700 850 2600 900 700a 700c 800 1900+ 850+ 700 700d 2600 2300 2500 3500 3700 1700

Duplex FDD FDD FDD FDD FDD FDD FDD TDD TDD TDD TDD TDD
FDD FDD FDD FDD FDD FDD FDD FDD FDD FDD FDD FDD FDD FDD FDD TDD TDD TDD TDD FDD

UL CA

DL 4×4 MIMO

DL 2×2 MIMO

DL 256-QAM

DL 64-QAM

UL 64-QAM

UL 16-QAM

MIMO (UL/DL)

2100

3 5

1800 2100

900

802.11n 2×2

802.11ac 2×2

WiFi

802.11ax 2×2

802.11ax 4×4

Number of users

Ethernet

LAN WAN

SIM slot

Micro/Nano SIM slot

Power

DC input

Ingress protection

FDD FDD FDD FDD

300Mbps*
Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes B1+B1/B5/B8/B20/B28 B3+B3/B5/B7/B8/B20/B28 B7+B5/B7/B8/B20/B28 B38+B38; B40+B40; B41+B41 Yes Yes 2×2 Yes Yes Yes Yes Yes Up to 32 1GbE x4 1GbE x1 (reuse LAN 1) Micro SIM DC 12V –

* The maximum data rate is a theoretical value. The actual data rate depends on the operator.

30 Solution Guide Nebula Secure Cloud Networking Solution

License information

Per-device License Model

Nebula’s per-device licensing allows IT teams to maintain various expiration dates across devices, sites or organizations. Each Organization can have a single

shared expiration, which will be manageable through our new Circle license management platform for channel partners, namely Subscription Alignment.

Flexible Management License Subscription

Nebula Control Center (NCC) offers subscription options to fit your needs–from a basic free plan for easy peace of mind to advanced cloud network management with greater control and visibility. Nebula is here to help.
Base/Plus/Pro Pack is on a per-device license basis and mandates that all devices within an organization use

the same license type, ensuring a simplified, seamless cloud management experience across the entire organization.
Nebula MSP Pack enables cross-organization management, helping MSPs streamline multi-tenant, multi-site deployments and deliver superior service.

MSP Pack

Per-admin user account license that includes cross-org management features tailored for MSPs, and is used in conjunction with org-based management features/licenses (Base/Plus/Pro Pack).

· MSP portal · Admins & teams · Cross-org synchronization · Backup & restore

· Alert templates · Firmware upgrades · Change log · MSP branding

Base Pack
License-free feature set/service with a rich set of
management features

Plus Pack
Add-on feature set/service with all Nebula Base Pack features plus popular advanced features for enhanced network control
and visibility.

Pro Pack
Full feature/service with all Nebula Plus Pack features plus advanced tools for maximum
NCC manageability across devices, sites, and organizations.

Solution Guide Nebula Secure Cloud Networking Solution 31

NCC Organization Management License Pack Feature Table

M R F S W Feature Name

Unlimited Registration & Central Management

(Configuration, Monitoring, Dashboard, Location Map &

Floor Plan Visual) of Nebula Devices

Zero Touch Auto-Deployment of Hardware/Configuration from Cloud

Over-the-air Firmware Management

IOS and Android APP (Deployment, Management and Push Notifications)

Central Device and Client Monitoring (Log and Stat Information) and Reporting

Admin Accounts per Organization (Full Access for Administration Rights)

User Authentication Entries (via built-in Nebula Cloud Authentication Server)

Network Function Scheduling (SSID/PoE/Firewall Rules)

MAC-Based and 802.1X Authentication

Captive Portal Authentication

Email Users and Alert Notifications

Exempted from Cloud Saving Mode

Advanced Firmware Scheduling (Org/Site/Device)

Advanced Reporting Features (including Export/Email Reports/Scheduled Reports Custom Logo)

Automatic Network Topology (Visual and Actionable)

WiFi Vouchers (Auto-Gen Vouchers for Access/ Authentication with User Defined Time Limits)
Advanced Switch Control (Vendor Based VLAN, Auto PD Recovery)

Organizational User Audit/Change Logs

M = Management Feature (NCC) R = 5G/4G Mobile Router Feature F = Firewall Feature S = Switch Feature W = Wireless Feature

Base Pack Plus Pack Pro Pack

24HR (Rolling)
5

7D (Rolling)
8

1YR (Rolling)
NO LIMIT

100

NO LIMIT

32 Solution Guide Nebula Secure Cloud Networking Solution

M R F S W Feature Name

Organizational-wide Configuration Sync, Replicate, and Template

Configuration Backup/Restore

Base Pack Plus Pack Pro Pack

Remote CLI Access/Configurator

Priority Nebula Support Request (Direct NCC incl. Web Chat)

Open API for Ecosystem Partner Application Integration

Advanced Client Connection Monitoring & Trouble Shooting (WiFi Aid, Connection Log)

Advanced WiFi AAA Security (Dynamic Personal PSK,

Dynamic VLAN Assignment via NCAS, 3rd Party AAA

Integration incl. Captive Portal MAC Auth. Fallback)

Advanced WiFi Control & Management

(RSSI Threshold Setting per AP, Export NAT AP Traffic Log,

Programmable SSID & PSK)

Advanced Client Connection Monitoring & Trouble Shooting (WiFi Aid, Connection Log)

WiFi Health Monitoring and Report (AI/Machine Learning for Wireless)

Switch IP Interfacing & Static Routing

Switch Stacking (Physical Stacking)

Switch Surveillance Monitoring

Switch IPTV Feature Set (Advanced IGMP, IPTV Report w. AI/ML Alert)

Switch Port Advisor (Health & Security Analysis Monitoring and Alerting)

Zyxel CNM SecuReporter Traffic Log Archiving

Firewall Advanced VPN Feature Set (VPN Topology, VPN

Traffic Usage, SD-VPN, L2TP/IPSec VPN Client Script

Provisioning)

Collaborative Detection & Response (CDR) with Automatically Respond Action (USG FLEX & ATP Series Only)

Client Device Heartbeat (LAN Device Alive Monitoring)

M = Management Feature (NCC) R = 5G/4G Mobile Router Feature F = Firewall Feature S = Switch Feature W = Wireless Feature

Solution Guide Nebula Secure Cloud Networking Solution 33

Flexible Security License Subscription

With the addition of ATP, USG FLEX and USG FLEX H series firewall to the Nebula cloud management family, Nebula security solution further expands its offerings with holistic security and protection for SMB business networks.

Furthermore, the new cloud-based access point security service — Connect & Protect (CNP) provides a valueadded protection to ensure a secure and smooth small business WiFi.

Gold Security Pack A complete feature set for ATP, USG FLEX and USG FLEX H series to perfectly fit SMBs’ requirements as well as to enable the maximum performance and security with an all-in-one appliance. This pack not only supports all Zyxel security services but also Nebula Professional Pack.

Elite Pack Security Router license to provide access to full Web Filtering, categories, allowing for tracking and regulating website access based on content. It also upgrades Ransomware Prevention Premium for real-time threat intelligence and unlocks advanced Nebula Pro features.

Entry Defense Pack Entry Defense Pack offers fundamental protection for USG FLEX H series. It features Reputation Filter to block cyberthreats, SecuReporter for clear visual insights into your network’s security, and Priority Support for expert assistance when you need it most.

Secure WiFi “An a la carte” USG FLEX license to manage remote access points (RAP) with the support of secured tunnel to extend corporate network to remote workplace.

UTM Security Pack All-in-one UTM security service license add-on(s) to USG FLEX Series Firewall, which includes Web Filtering, IPS, Application Patrol, Anti-Malware, SecuReporter, Collaborative Detection & Response, and Security Profile Sync.

Connect & Protect (CNP) Cloud-mode access point license to provide Threat Protection & App Visibility with throttling to ensure a secure and smooth wireless network.

Content Filter Pack Three-in-one security service license add-on(s) to USG FLEX 50, which includes Web Filtering, SecuReporter, and Security Profile Sync.
34 Solution Guide Nebula Secure Cloud Networking Solution

Service related information

30-day Free Trial

Nebula offers the flexibility, on a per organization basis, to users for them to decide which license(s) they want to trial and when they want to trial according to their needs. For both new and existing organizations, users

can freely choose the license(s) they want to trial at their preferable time as long as they didn’t use the license(s) before.

Nebula Community Support Request

The Nebula community is a great place where users can come together to share tips and ideas, get problems solved and learn from fellow users around the world. Join the conversations to know more about everything the Nebula products can do. Visit Nebula community to explore more.
URL: https://community.zyxel.com/en/categories/nebula

The Support Request channel allows users to submit request tickets directly on NCC. It is a tool that provides an easy way for users to send and track an inquiry for help on a problem, request or service, to find answers to their questions quickly. The request will go directly to the Nebula support team, and will be reviewed and followed by a dedicated group until the proper resolutions are found.
* Available for Professional Pack users.

Solution Guide Nebula Secure Cloud Networking Solution 35

Corporate Headquarters
Zyxel Networks Corp. Tel: +886-3-578-3942 Fax: +886-3-578-2439 Email: sales@zyxel.com.tw www.zyxel.com

Europe
Zyxel Belarus Tel: +375 25 604 3739 Email: info@zyxel.by www.zyxel.by

Zyxel Norway Tel: +47 22 80 61 80 Fax: +47 22 80 61 81 Email: salg@zyxel.no www.zyxel.no

Asia
Zyxel China (Shanghai) China Headquarters Tel: +86-021-61199055 Fax: +86-021-52069033 Email: sales@zyxel.cn www.zyxel.cn

Zyxel Middle East FZE Tel: +971 4 372 4483 Cell: +971 562146416 Email: sales@zyxel-me.com www.zyxel-me.com

The Americas
Zyxel USA North America Headquarters Tel: +1-714-632-0882 Fax: +1-714-632-0858 Email: sales@zyxel.com us.zyxel.com

Zyxel BeNeLux Tel: +31 23 555 3689 Fax: +31 23 557 8492 Email: sales@zyxel.nl www.zyxel.nl www.zyxel.be

Zyxel Poland Tel: +48 223 338 250 Hotline: +48 226 521 626 Fax: +48 223 338 251 Email: info@pl.zyxel.com www.zyxel.pl

Zyxel China (Beijing) Tel: +86-010-62602249 Email: sales@zyxel.cn www.zyxel.cn

Zyxel Philippine Email: sales@zyxel.com.ph www.zyxel.com.ph

Zyxel Brazil Tel: +55 (11) 3373-7470 Fax: +55 (11) 3373-7510 Email: comercial@zyxel.com.br www.zyxel.com/br/pt/

Zyxel Bulgaria (Bulgaria, Macedonia, Albania, Kosovo) Tel: +3592 4443343 Email: info@cz.zyxel.com www.zyxel.bg

Zyxel Romania Tel: +40 770 065 879 Email: info@zyxel.ro www.zyxel.ro

Zyxel China (Tianjin) Tel: +86-022-87890440 Fax: +86-022-87892304 Email: sales@zyxel.cn www.zyxel.cn

Zyxel Singapore Tel: +65 6339 3218 Hotline: +65 6339 1663 Fax: +65 6339 3318 Email: apac.sales@zyxel.com.tw

Zyxel Czech Republic

Zyxel Russia

Tel: +420 725 567 244

Tel: +7 499 705 6106

Tel: +420 606 795 453

Email: info@zyxel.ru

Email: sales@cz.zyxel.com

www.zyxel.ru

Support: https://support.zyxel.eu

www.zyxel.cz

Zyxel India Tel: +91-11-4760-8800 Fax: +91-11-4052-3393 Email: info@zyxel.in www.zyxel.in

Zyxel Taiwan (Taipei) Tel: +886-2-2739-9889 Fax: +886-2-2735-3220 Email: sales_tw@zyxel.com.tw www.zyxel.com.tw

Zyxel Denmark A/S Tel: +45 39 55 07 00 Fax: +45 39 55 07 07 Email: sales@zyxel.dk www.zyxel.dk

Zyxel Slovakia Tel: +421 919 066 395 Email: sales@sk.zyxel.com Support: https://support.zyxel.eu www.zyxel.sk

Zyxel Kazakhstan Tel: +7 727 350 5683 Email: info@zyxel.kz www.zyxel.kz

Zyxel Thailand Tel: +66-(0)-2831-5315 Fax: +66-(0)-2831-5395 Email: info@zyxel.co.th www.zyxel.co.th

Zyxel Finland Tel: +358 9 4780 8400 Email: myynti@zyxel.fi www.zyxel.fi

Zyxel Sweden A/S Tel: +46 8 55 77 60 60 Fax: +46 8 55 77 60 61 Email: sales@zyxel.se www.zyxel.se

Zyxel Korea Corp. Tel: +82-2-890-5535 Fax: +82-2-890-5537 Email: sales@zyxel.kr www.zyxel.kr

Zyxel Vietnam Tel: (+848) 35202910 Fax: (+848) 35202800 Email: sales_vn@zyxel.com.tw www.zyxel.com/vn/vi/

Zyxel France Tel: +33 (0)4 72 52 97 97 Fax: +33 (0)4 72 52 19 20 Email: info@zyxel.fr www.zyxel.fr

Zyxel Switzerland Tel: +41 (0)44 806 51 00 Fax: +41 (0)44 806 52 00 Email: info@zyxel.ch www.zyxel.ch

Zyxel Malaysia Tel: +603 2282 1111 Fax: +603 2287 2611 Email: sales@zyxel.com.my www.zyxel.com.my

Zyxel Germany GmbH Tel: +49 (0) 2405-6909 0 Fax: +49 (0) 2405-6909 99 Email: sales@zyxel.de www.zyxel.de

Zyxel Turkey A.S. Tel: +90 212 314 18 00 Fax: +90 212 220 25 26 Email: bilgi@zyxel.com.tr www.zyxel.com.tr

Zyxel Hungary & SEE Tel: +36 1 848 0690 Email: info@zyxel.hu www.zyxel.hu

Zyxel UK Ltd. Tel: +44 (0) 118 9121 700 Fax: +44 (0) 118 9797 277 Email: sales@zyxel.co.uk www.zyxel.co.uk

Zyxel Iberia Tel: +34 911 792 100 Email: ventas@zyxel.es www.zyxel.es

Zyxel Ukraine Tel: +380 89 323 9959 Email: info@zyxel.eu www.zyxel.ua

Zyxel Italy Tel: +39 011 230 8000 Email: info@zyxel.it www.zyxel.it

5-000-00025001 07/25

Documents / Resources

ZYXEL NETWORKS Nebula AP Secure Cloud Networking Solution [pdf] Instructions
Nebula AP Secure Cloud Networking Solution, Nebula AP, Secure Cloud Networking Solution, Cloud Networking Solution, Networking Solution

References

User Manual

Leave a comment

Cancel reply