NCC Portal Overview
The following summarizes how to navigate the Nebula web site from the Dashboard screen. The NCC portal screen is divided into these parts:
NCC Overview
• A – Title Bar
• B – Navigation Panel
• C – Main Screen
Title Bar
The title bar provides common links and is always at the top of NCC.
NCC Title Bar
The icons provide the following functions.
Label | Description |
|---|---|
Group | This shows the name of the groups you are managing, if your NCC account has an MSP license. Click to choose another group if you have multiple groups.  To create a group, you must be the owner of two or more Pro pack organizations that are not currently assigned to a group, as discussed in Creating a Group. |
Organization | This shows the name of the organization you are managing. Click to choose another organization, access the MSP portal or create a new organization. |
Site | This shows the name of the site you are managing. Click to choose another site if you have multiple sites in the selected organization. |
Search | Use this to search for managed Nebula Devices by model, description or MAC address. |
Help | Click this to view the documentation for NCC and NCC-compatible devices. For example, to view the Security Firewall Series configuration and hardware information, locate the documents under Security Appliance. |
More | Click this to view your account information, login history and active sessions. You can also view your Nebula Devices and manage NCC licenses linked to your account. |
Notification | Click this to view log messages. |
Settings | Click this to select a display language for the screens, or change the theme between dark and light mode. |
Applications | Click this to open a list of links to different Zyxel sites, such as myZyxel, Nebula, SecuReporter, Astra, Circle, Marketplace, Store, Education, and the Community. |
Account | Click this to manage your NCC account settings, or to sign out of NCC. |
If the browser window is too narrow, the layout of the title bar changes and some settings are hidden under the More menu.Layout of the Title Bar
Site/Organization/Group
Select the site, organization and group that you want to manage.
• If you select a group, you can only select organization in that group. Select List all Groups from the Group drop-down list to view all organizations and group.
• If you have multiple organizations, select MSP Portal from the Organization drop-down list box to view your organization summary (see MSP Portal).
You need to have an MSP license to view the MSP Portal.• If you need to have more organizations, select Create organization from the Organization drop-down list box to create a new one (see Create Organization).
• If you need to have more sites, select Create site from the Site drop-down list box to create a new one.
NCC Title Bar: Group/Organization/Site
Search
Click this to search for NCC-managed devices by model, description or MAC address. You can enter partial search criteria.
Search
More
Click the More icon at the top right-hand corner of the Dashboard screen to view and configure account settings.
More
The following table describes this menu.
Label | Description |
|---|---|
Profile | This shows account information, such as name, address, and phone number. |
My devices & services | This shows a list of all Nebula Devices in NCC that have your login account as the owner. You can filter the list of Nebula Devices by name, serial number, model, or organization. You can also register licenses to your account, such as an MSP license. |
Active sessions | Shows all active web browser sessions for this login account. Click End Session to close a session and force the user to log into NCC again in that browser. |
Recent logins | Shows the login history for this user account, including IPv4 address, location, and time. |
Click My devices & services and the following screen appears. Click Devices to view all Nebula Devices of the user account which can be managed by NCC, and/or all Nebula Devices not registered to this user account but with a Full (Delegated) administrator privilege. See the table on MSP cross-org > MSP cross-org manage > Admins & teams > Admins in Admins Screen for details on the organization privileges.
My Devices
Click Services to view and configure the start dates, end dates, registered dates, activated dates and statuses of an MSP license, purchase or register a license key, and export the list of MSP licenses in CSV/XML format.
My Services
Click Purchase history to view the order ID, purchase date, number of licenses, statuses of purchased MSP license(s), and export the information in CSV/XML format.
Purchase History
Notifications
Click this alert icon to view log messages for the selected site.
NCC Notification
Settings
Click the Settings icon at the top right-hand corner of the screen to view and configure NCC settings.
Settings
The following table describes this menu.
Label | Description |
|---|---|
Dark mode | Click this to apply a black background and white text to the white background and black text on the NCC screen. |
Language | Select the NCC display language. At the time of writing, the following languages are available: English, Chinese, Japanese, German, Russian, French. |
Dark Mode
Applications
Click this to display a list of related NCC links.
Related NCC Links
Account
Click the Account icon at the top right-hand corner of the screen to view and configure NCC account settings.
Account
The following table describes this menu.
Label | Description |
|---|---|
Manage account | Click this to edit your account settings at myZyxel. |
Sign out | Sign out of NCC. |
Navigation Panel
Use the NCC menu items to configure network management for each site, organization and/or Nebula Device. Click the arrow (
) on the upper right corner of the navigation panel to collapse or expand the navigation panel menus.
) on the upper right corner of the navigation panel to collapse or expand the navigation panel menus.Label | Description |
|---|---|
Use these menus to set up customer networks. | |
Site-wide | Manage Nebula Devices in a site. |
Organization-wide | Manage multiple network sites within an organization. |
Group-wide | Manage settings for multiple organizations and create VPN links between groups in the organization. Two or more Pro tier organizations can be a group. |
MSP | Create multiple organizations and change the branding and assign administrators to multiple organizations. |
Use these menus to set up customer Nebula Devices. | |
Mobile router | Manage the Zyxel LTE/NR devices. |
Security router | Manage the SCR 50AXE. |
Security gateway | Manage the ZyWALL NSG devices. |
Firewall | Manage the ZyWALL ATP, USG FLEX, and USG20(W)-VPN devices (firewalls). |
Switch | Manage the Zyxel Switches. |
Access point | Manage the Zyxel APs (Access Points). |
Help center | Access the Zyxel community forum, submit a support ticket, view User Guides for Nebula managed devices, view ports used by Nebula, view Nebula privacy policies, and view devices/features that can be managed by Nebula. |
This is a summary of the menu details.
Level 1 | level 2 / level 3 | Function |
|---|---|---|
Site-wide | Dashboard | Use this menu to view Nebula Device connection status and traffic summary. |
Topology | Use this menu to view Nebula managed-device connections in your network. | |
Devices | ||
Add devices | Click + to register a Nebula Device and add it to the site. | |
Access points / Switches / Security router / Firewall / Security gateway / Mobile router | Use this menu to view Nebula Device connection status and traffic summary. | |
Map & floor plans | Use this menu to locate Nebula Devices on a world map or on a floor plan. | |
Clients | ||
Client list | Use this menu to view the connection status and detailed information of all wired and WiFi clients connected to Nebula Devices (Access Points, Switches, Security Appliances) in the site. | |
WiFi Aid | Use this menu to display an overview of the AP’s WiFi clients connection issues, as an aid to troubleshooting. | |
Connection log | Use this menu to view all related event logs between Access Points and WiFi clients, and DHCP logs of Nebula Security Appliances (NSG, ZyWALL USG FLEX, ATP, and USG20(W)-VPN). Association, Authentication, Disconnection, and DHCP event logs that occur are summarized in chronological order to aid in troubleshooting. | |
Applications usage | Use this menu to view usage of applications such as Social Network, Telephony (VoIP), Advertising, News, Web Services in the network. | |
Summary report | Use this menu to view network statistics for a site, such as bandwidth usage, power usage, top Nebula Devices, top clients and/or top SSIDs. | |
Monitor | ||
Access points | ||
Event log | Use this menu to view all events on the Access Point. An event is something that has happened to a Nebula managed device. | |
Vouchers | Use this menu to create and manage vouchers that allow WiFi network access | |
Wireless health | Use this menu to view health of the WiFi networks for the supported Access Points and connected clients. | |
Summary report | Use this menu to view network statistics specific to Access Points in the site. | |
Switches | ||
Event log | Use this menu to view all events on the Switch. An event is something that has happened to a Nebula managed device. | |
Surveillance | Use this screen to view information about Powered Devices (PDs) connected to ports on the Switch. | |
IPTV report | Use this menu to view available IPTV channels and client information. | |
Summary report | Use this menu to view network statistics specific to Switches in the site. | |
Security router | ||
Event log | Use this menu to view all events on the Security router. An event is something that has happened to a Nebula managed device. | |
Threat report | Use this menu to view statistics for threat management categories. | |
VPN connections | Use this menu to view status of the site-to-site VPN connections. | |
Firewall | ||
Event log | Use this menu to view all events on the Security Firewall. An event is something that has happened to a Nebula managed device. | |
VPN connections | Use this menu to view status of the site-to-site VPN connections. | |
SecuReporter | Use this menu to view the statistics report for NSS (Nebula Security Service), such as content filtering, Intrusion Detection and Prevention (IDP), application patrol, and anti-virus. | |
Summary report | Use this menu to view network statistics specific to the Security Firewall in the site. | |
Security gateway | ||
Event log | Use this menu to view all events on the Security Appliance. An event is something that has happened to a Nebula managed device. | |
VPN connections | Use this menu to view status of the site-to-site VPN connections. | |
NSS analysis report | Use this menu to view the statistics report for NSS (Nebula Security Service), such as content filtering, Intrusion Detection and Prevention (IDP), application patrol, and anti-virus. | |
Summary report | Use this menu to view network statistics specific to the Security Appliance in the site. | |
Containment list | Use this menu to view and manage Nebula Devices contained by CDR (Collaborative Detection & Response). | |
Site features logs | Use this menu to view log messages about configuration changes made by the NCC for the site. | |
Configure | ||
WiFi SSID settings | Use this menu to view and configure SSID settings and authentication methods. | |
Access points | ||
SSID advanced settings | Use this menu to configure network access, traffic options and advanced settings for SSID profiles. | |
Captive portal customization | Use this menu to configure captive portal settings for SSID profiles. | |
SSID availability | Use this menu to configure SSID visibility settings and set whether the SSID is enabled or disabled on each day of the week. | |
Radio settings | Use this menu to configure global radio settings, such as maximum output power or channel width, and enable smart client steering for all Access Points in the site. | |
Traffic shaping | Use this menu to configure the maximum bandwidth and load balancing. | |
Security service | Use this menu to enable application visibility and optimization, and IP reputation filter on the managed Access Point. | |
AP & port settings | Use this menu to configure load balancing settings and enable or disable a port on the managed Access Point and configure the port’s VLAN settings. | |
Switches | ||
Switch ports | Use this menu to view the Switch port statistics and configure Switch settings for the ports. | |
ACL | Use this menu to configure the access control list in order to control access to the Switches. | |
IP & Routing | Use this menu to configure layer 3 features such as creating IP interfaces and static routes on the Switch. | |
ONVIF discovery | Use this menu to enable ONVIF and configure ONVIF VLAN ID for the selected Switch. | |
Advanced IGMP | Use this menu to enable and configure IGMP snooping and create IGMP filtering profiles. | |
Authentication | Use this menu to configure authentication servers and policies. | |
PoE schedules | Use this menu to set the schedule for Switches in distributing power to powered devices. | |
Switch settings | Use this menu to configure global Switch settings, such as (R)STP, QoS, port mirroring, voice VLAN and DHCP white list. | |
Security router | ||
Interface | Use this menu to configure interface address, subnet mask and VLAN ID settings on the Security Router. | |
Threat management | Use this menu to enable threat management categories, configure exception list using client’s name/IP address, and allowed/blocked domain name list. | |
Traffic management | Use this menu to manage the use of various applications on the network and control access to specific web sites or web content. | |
Firewall | Use this menu to configure firewall rules for outbound traffic, create new NAT rules and edit/delete existing NAT rules. | |
Site-to-Site VPN | Use this menu to configure VPN rules between Security Routers. | |
SSID advanced settings | Use this menu to configure WiFi security, band selection, assisted roaming and U-APSD (Unscheduled automatic power save delivery) settings for the SSID profiles. | |
Radio settings | Use this menu to configure global radio settings, such as maximum output power or channel width, and enable smart client steering for all Security Routers in the site. | |
Router settings | Use this menu to configure DNS settings. | |
Firewall | ||
Port | Use this menu to configure network mode and port grouping on the Security Firewall. | |
Interface | Use this menu to configure interface address, subnet mask and VLAN ID settings on the Security Firewall. | |
Routing | Use this menu to view and configure policy routes, static routes and WAN load balancing. | |
NAT | Use this menu to view and configure virtual servers and NAT settings. | |
Site-to-Site VPN | Use this menu to configure VPN rules between Security Firewalls. | |
Remote access VPN | Use this menu to enable and configure IPsec VPN or L2TP VPN rules from off-site clients to an on-site Security Firewall. | |
Security policy | Use this menu to configure firewall rules for outbound traffic, application patrol, schedule profiles and port forwarding rules for inbound traffic. | |
Security service | Use this menu to enable content filtering and block access to specific web sites. You can also enable Anti-virus and Intrusion Detection and Prevention (IDP) on the Security Firewall. | |
Captive portal | Use this menu to configure captive portal settings for each Security Firewall interface. | |
Authentication Method | Use this menu to configure network access settings through a captive portal or Nebula Cloud Authentication. | |
Wireless | Use this menu to configure different SSID profiles for your ZyWALL USG FLEX 100W and USG20W-VPN. This menu only appears for the ZyWALL USG FLEX 100W and USG20W-VPN. | |
Firewall settings | Use this menu to configure the DNS server and address records and also set the external AD (Active Directory) server or RADIUS server that the Security Firewall can use in authenticating users. You can also specify walled garden web site links for all interfaces on the Security Firewall. | |
Security gateway | ||
Interface addressing | Use this menu to configure network mode, port grouping, interface address, static route and DDNS settings on the Security Appliance. | |
Policy route | Use this menu to view and configure policy routes. | |
Firewall | Use this menu to configure firewall rules for outbound traffic, application patrol, schedule profiles and port forwarding rules for inbound traffic. | |
Security service | Use this menu to enable content filtering and block access to specific web sites. You can also enable Anti-virus and Intrusion Detection and Prevention (IDP) on the Security Appliance. | |
Site-to-Site VPN | Use this menu to configure VPN rules. | |
Remote access VPN | Use this menu to enable and configure IPsec VPN or L2TP VPN settings. | |
Captive portal | Use this menu to configure captive portal settings for each Security Appliance interface. | |
Network access method | Use this menu to enable or disable web authentication on an interface. | |
Traffic shaping | Use this menu to configure the maximum bandwidth and load balancing. | |
Gateway settings | Use this menu to configure the DNS server and address records and also set the external AD (Active Directory) server or RADIUS server that the Security Appliance can use in authenticating users. You can also specify walled garden web site links for all interfaces on the Security Appliance. | |
Alert settings | Use this menu to set which alerts are created and emailed or sent by the Zyxel Nebula Mobile app. You can also set the email addresses to which an alert is sent. | |
Firmware management | Use this menu to upgrade firmware or schedule firmware upgrades for Nebula Devices in the site. | |
Cloud authentication | Use this menu to add user accounts and grant user access to the selected site through different authentication methods, such as the MAC-based authentication, captive portal or the IEEE 802.1x authentication method. | |
Collaborative detection & response | Use this menu to view and configure the policies and notification settings for malware, IDP and web threats and corresponding containment actions to quarantine, alert or block. This is only available for ZyWALL USG Flex Series and ZyWALL ATP Series at the time of writing. | |
Site settings | Use this menu to change the general settings for the site, such as the site name, Nebula Device login password, captive portal reauthentication, SNMP, AP traffic logs to a Syslog server, traffic logs to SecuReporter, WiFi network authentication voucher settings, and API access for DPPSK third-party integration. | |
Organization-wide | License & inventory | Use this menu to manage your licenses and view the summary of Nebula Devices which have been registered and assigned to the sites in the selected organization. |
Administrators | Use this menu to view, remove, or create a new administrator account for this organization. | |
Organization-wide manage | ||
Organization portal | Use this menu to view a list of sites belonging to the selected organization and detailed information about the Nebula Devices connected to the sites. | |
Configuration management | Use this menu to synchronize the configuration between sites or switch ports and back up or restore a configuration file. | |
Configuration templates | Use this menu to create or delete a configuration template or bind a site to the template. | |
VPN orchestrator | Use this menu to view and manage VPNs created for the selected organization. | |
Security profile sync | Use this menu to synchronize the settings of URL threat filter, anti-malware and content filtering on the selected gateways. | |
Firmware management | Use this menu to upgrade firmware or schedule firmware upgrades for Nebula Devices in the organization. | |
Cloud authentication | Use this menu to create or remove user accounts and grant user access to all sites in the selected organization through different authentication methods, such as MAC-based authentication, captive portal, or the IEEE 802.1x authentication method. | |
Change log | Use this menu to view log messages about configuration changes in this organization. | |
Organization settings | Use this menu to configure security settings or delete the organization. | |
Group-wide | Group-wide manage | |
Group portal | Use this menu to view organization and license details of a selected group. | |
Org-to-Org VPN | Use this menu to view and manage VPNs between members in the group. | |
Inventory | Use this menu to view Nebula Devices belonging to organizations. You may also export the list of Nebula Devices found to your computer. | |
Administrators | Use this menu to view, remove, or create a new administrator account for the selected group. | |
Change log | Use this menu to view log messages about configuration changes in the group. | |
Group settings | Use this menu to configure group information and group members. | |
MSP | MSP cross-org manage | |
MSP portal | Use this menu to create multiple organizations and change the branding and assign administrators to multiple organizations. | |
Cross-org synchronization | Use this menu to sync or clone organization-wide settings from a source organization to a destination organization. | |
Alert templates | Use this menu to configure MSP alert templates to monitor Nebula Devices for unexpected events (for example, online or offline events). | |
Admins & teams | Use this menu to create administrators or groups of administrators (teams) and view their login details. | |
Change log | Use this menu to view log messages about configuration changes in the Admins & teams and Cross-org synchronization screens. | |
MSP branding | Use this menu to upload/replace/remove the dashboard logo. You can also set the support contact details. | |