MSP
Overview
The MSP (Managed Services Provider) menus allow you to view the summary of organizations and change the branding on NCC.
An MSP license that expires will keep the previous settings in MSP but disable the MSP features.
Note: To see these menus, assign an MSP license to your NCC login account.
MSP Portal
This screen lists every organization to which your account has at least read-only access.
To access this screen, select MSP portal from the Organization drop-down list box in the title bar, or click MSP > Monitor > MSP Portal in the navigation panel.
MSP > Monitor > MSP Portal Screen
The following table describes the labels in this screen.
Label | Description |
|---|---|
Organization type summary | This pie chart shows the total number of the organization mode (for example, x PRO, x Plus, x Base organizations). |
Device license status summary | This pie chart shows the total number of Nebula managed devices with NCC and ATP licenses only. You can select the organization to display in the drop-down list. Click a particular color in the pie chart to show the details of the licenses of the selected organizations. |
Tag | Assign a name to an organization or to a group of organizations. 1. Select the organizations. The Tag button will be enabled. 2. Click Tag. 3. In the Add field, enter a tag (up to 32 alphanumeric characters and spaces are allowed). 4. Click +Add new. Then Add to confirm. To remove the tag assigned to an organization or to a group of organizations. 1. Select the organization with an assigned tag. 2. Click Tag. 3. Enter the name of the tag. As you type along, NCC will automatically show the names of tags that matches. 4. Select the tag. Then click Remove. |
Search | Specify your desired filter criteria to filter the list of organizations. |
matches in | This shows the number of organizations that match your filter criteria after you perform a search. |
Organizations | This shows the number of organizations that you can manage. |
Status | This shows the status of Nebula Devices in the organization. • Green: All Nebula Devices are on-line and have no alerts. • Orange: Some Nebula Devices have alerts. • Red: Some Nebula Devices are off-line. • Gray: All Nebula Devices have been off-line for 7 days or more. • White: No Nebula Devices in this organization. |
NCC license status | This shows the license status of Nebula Devices in the organization. • Green: All Nebula Devices with over 1 year licenses. • Blue: Any Nebula Device with over 90 days but less than 1 year license together with another Nebula Device with over 1 year license. • Orange: Any Nebula Device with license that will expire in 90 days together with another Nebula Device with over 90 days license. • Red: Any Nebula Device with an expired license or is unlicensed. • Gray: No Nebula Devices in this organization. |
Security license status | This shows the license status of Security Gateways in the organization. • Green: All Security Gateways with over 1 year licenses. • Blue: Any Security Gateway with over 90 days but less than 1 year license together with another Nebula Device with over 1 year license. • Orange: Any Security Gateway license that will expire in 90 days together with another Nebula Device with over 90 days license. • Red: Any Security Gateway with an expired license or is unlicensed. • Gray: No Security Gateways in this organization. |
Organization | This shows the descriptive name of the organization. |
Type | This shows your NCC version type. |
Tag | This shows the tag name assigned to this organization. Otherwise, the organization does not have a tag. |
Sites | This shows the number of sites belonging to this organization. |
Devices online | This shows the number of Nebula Devices in this organization which are on-line (green), have recently had alerts (orange), recently went off-line (red), or have been off-line for more than 6 days (gray). |
AP | This shows the number of Nebula APs connected to the sites in this organization. |
SW | This shows the number of Nebula switches connected to the sites in this organization. |
SA | This shows the number of Nebula security appliances connected to the sites in this organization. |
Payment Mode | This shows the payment method of the NCC license if you arranged a special payment method with Zyxel. If you bought the license through the Zyxel webstore or a third-party vendor, the value will be blank. |
Next NCC license expiration date Next Security license expiration date Next Secure WiFi license expiration date | This shows the date when the license will expire, or N/A when there is no Nebula-managed device in the organization. For example, if you have two Nebula Devices in the organization: • Nebula Device 1 is with NCC license expiration date on 2021/10/1 • Nebula Device 2 is with NCC license expiration date on 2021/11/1 This field will show the nearest expiration date ‘2021/10/1’. |
# devices will expire in 90 days | This shows the number of Nebula-managed devices with licenses that will expire in 90 days or less in this organization. |
# unused NCC/NSS/UTM/RAP license | This shows the number of unused NCC (Nebula Control Center) / NSS (Nebula Security Service) / UTM (Unified Threat Management) / RAP (Remote Access Point) licenses in this organization. |
Export | Click this button to save the MSP Portal list as a CSV or XML file to your computer. |
MSP Branding
The Dashboard logo section of this screen allows organization owners to replace the Nebula Control Center logo with a new MSP logo. The Support contact section allows addition of a customized message or MSP contact information in the Help > Support request page. To access this screen, click MSP > Configure > MSP branding.
MSP > Configure > MSP branding
The following table describes the labels in this screen.
Label | Description |
|---|---|
Dashboard logo | |
Upload new logo | Click this to browse for the location of the image file to be used as your dashboard logo. • Allowed image file formats: JPG/JPEG, PNG, GIF. • Maximum image file size: 200 KB. • NCC converts the image file to a 160 x 44 pixel logo after uploading. |
Replace this logo | Click this to browse for the location of the image file to replace your current dashboard logo. |
Remove this logo | Click this to remove your current dashboard logo. |
Apply to | Select All current and new PRO organizations to apply the logo to all Nebula Professional Pack organization dashboards. Select Custom to choose which Nebula Professional Pack organization to apply the logo. Select None if you only wish to upload the image file but will not apply it yet. |
Support contact | |
Support request page | |
Show default Zyxel support cases | Select ON to display the standard Zyxel support contact information in the Help > Support request screen. Organization owners can choose to hide the default Help > Support screen section to only show their information to clients. But the organization owner and administrators with full privilege will still see the hidden default screen section. |
Customized MSP support contact information | Create your own support contact information. Enter up to 1000 characters in this field including special characters inside the square quotes [~!@#$%^&*()_+{}|:”<>?–=[]\;’,./]. |
Apply to | Select All current and new PRO organizations to apply the support contact information to all Nebula Professional Pack organization Help > Support request screens. Select Custom to choose which Nebula Professional Pack organization to apply the support contact information. Select None if you only wish to save the settings but will not apply it yet. |
Admins & Teams
The Admins & teams enables you to assign an administrator or a group of administrators (a team) to multiple organizations at the same time. This is faster than configuring administrators for each organization at Organization-wide > Configure > Administrators, especially if you have a large number of organizations.
Administrator Privilege Priority
You can configure organization administrator privileges on the following screens:
• MSP > Configure > Admins & teams > Admins
• MSP > Configure > Admins & teams > Teams
• Group-wide > Configure > Administrators
• Organization-wide > Configure > Administrators
If an NCC account has different administrator privileges configured on different screens, then the highest privilege level takes priority.
Example, account User1 has four different privilege levels configured for organization Org1 on the four screens above: None, Read-Only, Full, Full (Delegate). User1’s final privilege level for Org1 is Full (Delegate).
Admins Screen
The admins screen allows you to assign an administrator account to multiple organizations. To access this screen, click MSP > Configure > Admins & teams > Admins.
MSP > Configure > Admins & teams > Admins
The following table describes the labels in this screen.
Label | Description |
|---|---|
Activation | Click this button to Activate/Deactivate the selected accounts. Then, click Update. |
Delete | Click this button to remove group administrator privileges for the selected accounts. |
Search | Specify your desired filter criteria to filter the list of administrator accounts. |
N administrators | This shows the number of administrator accounts (N) in the list. |
Import | Click this button to create administrator accounts in bulk by importing a complete list of all new administrators in an Excel file. |
Add | Click this button to create a new group administrator account. |
Name | This shows the name of the administrator account. |
Email address | This shows the email address of the administrator account. |
Organization | This shows the name of the organization in which the privileges apply. |
Organization type | This shows the license tier of the organization. |
Org. privilege | This shows the privileges the administrator has within the specified organization. Full: the administrator can edit settings, create or delete other administrator accounts, create or delete a site, and add or renew licenses for Nebula Devices in the organization. Read-only: the administrator account has no write access to the organization, but can be a site administrator. Delegate owner’s authority: The administrator account has delegated owner privileges. This type of account can perform all of the same actions as the organization owner, except for the following: • Delete organization • Transfer organization ownership • Assign delegate owner privileges to an administrator account |
Account status | This shows whether the administrator account has been validated (OK). It shows Deactivated if an administrator account has been created but cannot be used. This may happen since you can only have up to 5 active administrator account in NCC base tier. |
Last access time (UTC) | This shows the last date and time traffic was sent from the administrator account. |
Create date (UTC) | This shows the date and time the administrator account was created. |
Status change date (UTC) | This shows the last date and time the administrator account status was changed. |
Creator | This shows the name of the MSP user account that added the privilege settings. |
 | Click this icon to display a greater or lesser number of configuration fields. |
Create/Update Administrator
In the MSP > Configure > Admins & teams > Admins screen, click the Add button to add a new administrator account, or double-click an existing account entry to modify the account settings.
MSP > Configure > Admins & teams > Admins: Create/Update administrator
The following table describes the labels in this screen.
Label | Description |
|---|---|
Name | Enter a descriptive name for the administrator account. Enter up to 100 characters in this field including special characters inside the square quotes [~!@#$%^&*()_+{}|:”<>?–=[]\;’,./]. |
Email address | Enter the email address of the administrator account, which is used to log into the NCC. This field is read-only if you are editing an existing account. |
Assign privilege | |
Organization | Select one or more organizations to assign the account privileges to. Only organization(s) belonging to an MSP account with full privileges can be selected.  If no organization is selected, then the administrator cannot access any organization until an organization is assigned full privileges. |
Privilege | Select the privileges the administrator has within the selected organizations. Full: the administrator can edit settings, create or delete other administrator accounts, create or delete a site, and add or renew licenses for Nebula Devices in the organization. Read-only: the administrator account has no write access to the organization, but can be a site administrator. |
Activate | Select Yes to enable the account or No to temporarily disable the account. |
 | Click the remove icon to delete the current set of admin privileges. |
Add | Add administrator privileges for an organization. |
Close | Click this button to exit this screen without saving. |
Create admin/Update admin | Click this button to save your changes and close the screen. |
Teams Screen
The team screen allows you to assign administrator privileges to a group of NCC accounts (a team). To access this screen, click MSP > Configure > Admins & teams > Teams.
MSP > Configure > Admins & teams > Teams
The following table describes the labels in this screen.
Label | Description |
|---|---|
Delete | Click this button to remove the selected teams. |
Search | Specify your desired filter criteria to filter the list of teams. |
N teams | This shows the number of teams (N) in the list. |
Add | Click this button to create a new administrator team. |
Select an entry’s check box to select a specific team. Otherwise, select the check box in the table heading row to select all teams. | |
Name | This shows the name of the team. |
Description | This shows a description of the team. |
Org. privilege | This shows the privileges the team has within the specified organizations. Full: the administrator can edit settings, create or delete other administrator accounts, create or delete a site, and add or renew licenses for Nebula Devices in the organization. Read-only: the administrator account has no write access to the organization, but can be a site administrator. |
Organization | This shows the names of the organizations in which the privileges apply. |
Administrator | This shows a list of the administrators in the team. |
Create date (UTC) | This shows the date and time the team was created. |
Status change date (UTC) | This shows the last date and time the team status was changed. |
Creator | This shows the name of the MSP user account that added the privilege settings. |
| Click this icon to display a greater or lesser number of configuration fields. |
Create/Update Team
In the MSP > Configure > Admins & teams > Teams screen, click the Add button to add a new administrator team, or double-click an existing team entry to modify its settings.
MSP > Configure > Admins & teams > Teams: Create/Update Team
The following table describes the labels in this screen.
Label | Description |
|---|---|
Name | Enter a descriptive name for the team. Enter up to 15 characters in this field including special characters inside the square quotes [~!@#$%^&*()_+{}|:”<>?–=[]\;’,./]. |
Description | Enter a description of the team, for example their role or membership. Enter up to 64 characters are allowed for this field including special characters inside the square quotes [~!@#$%^&*()_+{}|:”<>?–=[]\;’,./]. |
Assign privilege | Select the privileges the team members have within the selected organizations. Full: Each member of the team can edit settings, create or delete other administrator accounts, create or delete a site, and add or renew licenses for Nebula Devices in the organization. Read-only: Each member of the team has no write access to the organization, but can be a site administrator. |
Organization | Select one or more organizations to assign the team privileges to. An organization can belong to multiple teams. |
Members | |
Name | Enter a descriptive name for the members. Enter up to 15 characters are allowed for this field including special characters inside the square quotes [~!@#$%^&*()_+{}|:”<>?–=[]\;’,./]. |
Email address | Enter the email address of the members who can log into the NCC. |
| Click the remove icon to delete the current set of admin privileges. |
Add | Add another NCC account to this team. |
Close | Click this button to exit this screen without saving. |
Create/Update | Click this button to save your changes and close the screen. |
Cross-org synchronization
The Cross-org synchronization screen allows you to copy settings or a site from one organization to another.
Cross-Org setting sync
Cross-org sync copies the following items from one organization to another organization:
• Organization-wide settings
• Administrators
• Cloud Authentication accounts (Users and MAC)
• Configuration templates
Your account must have owner or organization-full privileges in both source and destination organizations. When copying organization-wide settings, the following settings will not be overwritten if they are already configured in the destination organization:
• Organization-wide > Configure > Settings > Country
• Organization-wide > Configure > Settings > Login IP ranges
• Administrators privileges (when source and destination organizations have the same admin account)
• Cloud Authentication account privileges (when source and destination organizations have the same Cloud Authentication account)
When copying configuration templates:
• No sites are bound to the new template site.
• If the destination organization has a template with the same name, then the new template will have a number appended to the end of its name.
Cross-Org site clone
Cross-org site clone copies a site and all of its settings from one organization to another. Your account must have owner or organization-full privileges in both source and destination organizations.
If the destination organization has a site with the same name, then the new site will have a number appended to the end of its name.
Cross-org synchronization Screen
Use this screen to configure cross-org synchronization and cross site clones.
MSP > Configure > Cross-org synchronization
The following table describes the labels in this screen.
Label | Description |
|---|---|
Cross-Org setting sync | |
From source organization | Select the organization to copy settings from. |
Org. setting | Select the settings that you want to copy from the source to the destination organization. Select All org-wide settings to copy everything. |
To dest. organization | Select the organization to copy settings to. |
Sync | Click this to copy the selected settings from the source to the destination organization. |
Cross-Org setting sync | |
From source organization | Select the organization to copy settings from. |
Org. setting | Select the settings that you want to copy from the source to the destination organization. Select All org-wide settings to copy everything. |
To dest. organization | Select the organization to copy settings to. |
Sync | Click this to copy the selected settings from the source to the destination organization. |
Cross-Org site clone | |
From source organization | Select the organization to copy sites from, and then select one or more sites. Select All sites to copy all sites from the source to the destination organization. |
To dest. organization | Select the organization to copy the selected sites to. |
Clone | Click this to copy the selected sites from the source to the destination organization. |
MSP Alerts
The MSP administrator can configure MSP alerts to monitor Nebula Devices for unexpected events (for example, on-line / off-line events). This screen will list the alert templates you have created. See Alert Settings for details on creating an alert template.
To access this screen, click MSP > Configure > MSP alerts in the navigation panel.
MSP > Configure > MSP alerts
The following table describes the labels in this screen.
Label | Description |
|---|---|
+ Create | Click this button to add a new alert template (see Alert Settings). |
Delete | Click this button to remove alert templates already created. |
Search | Specify your desired search criteria to filter the list of alerts. |
selected in | This shows the number of alerts that match your filter criteria after you perform a search. |
Template | This shows the number of alert templates you have created. |
Name | This shows a descriptive name of the alert template. |
Description | This shows more details on the alert template. |
Creator | This shows your email address. |
Bound organizations | This shows All organizations or a list of the selected organizations to send alerts to. |
Exclude sites | This shows the sites that will not receive any alerts. |
Enable | Click this to activate the alert template. |
| To edit the Name, Description, Creator, Bound organizations, and Exclude sites fields, just click the field and the Update alert screen will appear. | |
Alert Settings
Use this screen to set which alerts are created and emailed, and set the email addresses to which an alert is sent. Click MSP > Configure > MSP alerts > Create to access this screen.
Note: NCC’s Smart Alert Engine uses knowledge of network topology and cross-device functionality to only generate alerts for unexpected events. This helps avoids unnecessary emails and notifications.
For example, an AP is receiving power from a PoE switch. If the AP loses power because its Ethernet cable is disconnected, NCC generates an alert. If the AP loses power because the switch has a PoE schedule that disables power to the AP, NCC does not generate an alert.
For example, an AP is receiving power from a PoE switch. If the AP loses power because its Ethernet cable is disconnected, NCC generates an alert. If the AP loses power because the switch has a PoE schedule that disables power to the AP, NCC does not generate an alert.
MSP > Configure > MSP alerts > Create/Update alert
The following table describes the labels in this screen.
Label | Description |
|---|---|
General | |
Template name | Enter a descriptive name for the alert template (up to 64 alphanumeric characters including spaces). |
Description | Enter more details of the alert template (up to 64 alphanumeric characters including spaces). |
Email recipient | Enter the email addresses to which you want to send alerts. Recipients belonging to Base organizations will not receive email alerts, except if the recipient’s account includes an MSP license. In general, only the organizations with activated MSP license will receive email alerts.For example, ORG 1 is a Base tier organization, and ORG 2 is a Professional tier organization. An MSP alert template is created to monitor AP offline events. If there are 3 email recipients in both ORG 1 and ORG 2 with the following licenses: • REP 1 (recipient 1) has an account which includes an MSP license. • REP 2 (recipient 2)and REP 3 (recipient 3) has accounts which does not include an MSP license. When an AP offline event occurs, an email alert will only be sent to REP 1 in ORG 1. While an email alert will be sent to all recipients (REP 1, REP 2, and REP 3) in ORG 2. |
Apply to | Select All organizations or specify the selected organizations to send alerts to. |
Exclude sites | Select the sites in organizations that will not receive any alerts. |
Enable | Click this to activate the alert template. |
System alerts | |
Notification Type | For each alert, you can set how to receive alert notifications: • Email: Alert notifications are sent by email to configured recipients. • In-app Push: Alert notifications are sent to site administrators who are logged into the NCC mobile app. This type of notification is not available for some features. • Both: Alert notifications are sent by email and app notification. • Disabled: No alerts are sent. |
Show additional recipients | Add additional user accounts who will receive email and in-app notifications for the alert. |
System Alerts | |
Wireless | Specify how long in minutes the NCC waits before generating and sending an alert when an AP goes off-line. |
Switches | Specify how long in minutes the NCC waits before generating and sending an alert when a port or a switch goes off-line. |
Security gateway | Specify how long in minutes the NCC waits before generating and sending an alert when the following events occur: • A gateway device goes off-line. • Any DHCP pool on the gateway device runs out of IP addresses to assign. • A VPN connection to or from the gateway device is created or terminated. • The WAN connectivity goes off-line. |
Other alerts | Specify whether to send an alert each time configuration settings are changed. |
Security alerts | |
CDR containment | Specify whether to send an alert each time a CDR block or containment action is triggered. |
Show additional recipients | Add additional user accounts who will receive email and in-app notifications for the alert. |