category | Included Zyxel Devices |
---|---|
Hybrid Mobile Routers | LTE/NR Indoor/Outdoor Models |
Security Router | SCR 50AXE, USG LITE 60AX |
Security Gateways | NSG Series |
Hybrid Security Firewalls | ZyWALL ATP / USG FLEX / USG FLEX H / USG20(W)-VPN Series ![]() • USG FLEX 50 • USG FLEX 100 rev 2.0 • ATP100 rev 2.0 |
Hybrid Switches | NSW / GS / XGS / XS Series |
Hybrid APs (Access Point) | NAP / NWA / WAC / WAX Series |
Accessories | PoE12-3PD |
License | Category | Assign to | Description |
---|---|---|---|
Nebula Professional Pack | Organization | Any NCC-managed devices | Unlocks all advanced features within the Nebula Device’s organization. For details on Pro features, see Organization License Tiers. |
Nebula Plus Pack | Organization | Any NCC-managed devices | Unlocks certain advanced features within the Nebula Device’s organization. ![]() For details on Plus features, see Organization License Tiers. |
MSP | MSP | NCC user account | Unlocks the MSP menu and MSP features for an NCC user account. |
MSP Trial | MSP | NCC user account | Unlocks the MSP menu and MSP features but is available only once per NCC account for 30 days. Go to More > My devices & services > Services: Activate trial for MSP. ![]() |
Organization Trial | Organization | Organization | Available when creating a new organization. Unlocks all Nebula Professional Pack and Nebula Security Pack (NSS) features in the organization for 30 days. There are no restrictions on the allowed number of Nebula Devices or sites. ![]() |
Nebula Security Pack (Nebula Security Service) | Security Service | Nebula Security Gateway (NSG) devices | Unlocks security services, such as anti-virus and anti-malware. You can use these security services within the NSG’s site. |
UTM Security Pack | Security Service | USG FLEX devices | Unlocks security services, such as anti-malware, content filter, URL threat filter, IP reputation, sandboxing, IPS (Intrusion Prevention System), application patrol, SecuReporter, CDR (Collaborative Detection & Response), and security profile sync (see Security Profile Sync for more information), on a Security Firewall. You can then use these security services within the Security Firewall’s site. |
Gold Security Pack | Organization and Security Service | ATP devices | Unlocks security services, such as content filter, application patrol, DNS/URL threat filter, IPS (Intrusion Prevention System), Reputation filter, anti-malware with hybrid mode, sandboxing, CDR (Collaborative Detection & Response), security profile sync, Secure WiFi, SecuReporter, and all advanced features of a Nebula Professional Pack license. |
Gold Security Pack | Organization and Security Service | USG FLEX devices except USG20-VPN / USG20W-VPN / USG FLEX 50 | Unlocks security services, such as content filter, application patrol, DNS/URL threat filter, IPS (Intrusion Prevention System), Reputation filter, anti-malware, sandboxing, CDR (Collaborative Detection & Response), security profile sync, Secure WiFi, SecuReporter, and all advanced features of a Nebula Professional Pack license. |
Secure WiFi | Security Service | USG FLEX devices except USG FLEX 50 | Unlocks the Remote AP feature. |
Content Filter Pack | Security Service | USG VPN devices | Unlocks security services, such as content filter, SecuReporter, and security profile sync on USG FLEX 50 / USG20-VPN / USG20W-VPN devices. |
Connect & Protect (CNP) | Security Service | NWA1123-ACv3, WAC500, WAC500H | Unlocks security services, such as threat protection using DNS and IP reputation filters. |
Connect & Protect Plus (CNP+) | Security Service | NWA110AX, NWA210AX, WAX510D, WAX610D, WAX630S, WAX650S | Unlocks security services, such as application visibility and threat protection using DNS and IP reputation filters. |
Elite Pack | Organization and Security Service | SCR 50AXE, USG LITE 60AX | Unlocks security services, such as web filtering, Ransomware Prevention Premium, and all advanced features of a Nebula Professional Pack license. For details on Pro features, see Organization License Tiers. |
Entry Defense Pack | Security Service | USG FLEX H devices | Unlocks security services, such as DNS/URL threat filter, Reputation filter, SecuReporter, and Priority support requests. |
Feature | Base | Plus | Professional | Location | Notes |
---|---|---|---|---|---|
Group-wide menu (Monitor – Overview, Inventory, Change log, and Configure – Settings, Org-to-Org VPN, and Administrators) | No | No | Yes | Group-wide | To create a group, you must be an NCC admin and the owner of two or more Professional organizations. |
Organization change logs | No | No | Yes | Organization-wide > Organization-wide manage > Change log | |
Login IPv4 address ranges for an organization | No | No | Yes | Organization-wide > Organization-wide manage > Organization settings | |
Number of admin accounts | 5 | 8 | Unlimited | Organization-wide > Administrators | |
Number of cloud authentication accounts | 50 | 100 | Unlimited | Organization-wide > Organization-wide manage > Cloud authentication | |
Cloud authentication users with VLAN attribute | No | No | Yes | Organization-wide > Organization-wide manage > Cloud authentication (Account type: User) | |
Cloud Authentication DPPSK account type | No | No | Yes | Organization-wide > Organization-wide manage > Cloud authentication (Account type: DPPSK) | |
Site-wide settings sync | No | No | Yes | Organization-wide > Organization-wide manage > Configuration management | |
Switch settings clone | No | No | Yes | Organization-wide > Organization-wide manage > Configuration management | |
Site/Switch configuration backup and restore | No | No | Yes | Organization-wide > Organization-wide manage > Configuration management | |
Configuration templates | No | No | Yes | Organization-wide > Organization-wide manage > Configuration templates | At the time of writing, gateway and mobile router configuration templates are not available |
Add client to block list/allow list | No | No | Yes | Site-wide > Clients | |
WiFi aid | No | No | Yes | Site-wide > Clients | |
Connection log | No | No | Yes | Site-wide > Clients | |
Site-wide topology | No | Yes | Yes | Site-wide > Topology | |
Summary report email & schedule | No | Yes | Yes | Site-wide > Summary report Site-wide > Monitor > Access point / Switch / Security gateway / Firewall > Summary report | |
Time period for summary reports | 24 hours | 7 days | 365 days | Site-wide > Summary report Site-wide > Monitor > Access point / Switch / Security gateway / Firewall > Summary report | |
Time period for device monitoring statistics | 24 hours | 7 days | 365 days | Site-wide > Devices > Access point / Switches / Security router / Security gateway / Firewall > [Select Access Points / Switches] | |
Time period for client monitoring statistics | 24 hours | 7 days | 365 days | Site-wide > Clients > [Select client] | |
Time period for device event log access | 24 hours | 7 days | 365 days | Site-wide > Monitor > Site features logs | |
Export data to CSV/XML file | No | No | Yes | All monitoring pages with tables | |
Open API | No | No | Yes | All monitoring information | |
API access (for example, DPPSK third-party integration) | No | No | Yes | Site-wide > Configure > Site settings | |
Smart email alerts | Yes | Yes | Yes | Site-wide > Configure > Alert settings | |
Per-device firmware upgrade schedules | No | Yes | Yes | Site-wide > Configure > Firmware management | |
Org-wide firmware upgrade | No | Yes | Yes | Organization-wide > Organization-wide manage > Firmware management | |
Priority support requests from NCC portal or Nebula app | Yes | No | Yes | Help center > Support request | |
Web chat with tech support directly from NCC portal | No | No | Yes | Website footer | |
Maximum uploaded photos from phone through NCC app | 1 | 1 | 5 | Site-wide > Devices > [select Nebula Device for example, Access points] > Photo | |
Remote CLI access | No | No | Yes | Site-wide > Devices > Access Points / Security gateway / Firewall [Select AP] Live tools | |
Wireless health monitor and report | No | No | Yes | Site-wide > Monitor > Access points > Wireless health | |
Programmable SSID/PSK | No | No | Yes | Site-wide > Configure > SSID settings | |
Dynamic Personal Pre-Shared Key (DPPSK) | No | No | Yes | Site-wide > Configure > Access points > SSID advanced settings | |
Vouchers as WiFi authentication credentials | No | Yes | Yes | Site-wide > Monitor > Access points > Vouchers Site-wide > Configure > Site settings Site-wide > Configure > Access points > SSID advanced settings Site-wide > Configure > Access points > Captive portal customization > [portal theme] | |
RADIUS accounting for captive portal | No | No | Yes | Site-wide > Configure > Access points > SSID advanced settings | |
Customize RADIUS NAS ID | No | No | Yes | Site-wide > Configure > Access points > SSID advanced settings | |
Customize portal redirect URL parameter | No | No | Yes | Site-wide > Configure > Access points > Captive portal customization | |
Smart steering per AP | No | No | Yes | Site-wide > Configure > Access points > Radio settings > [Edit the selected Access Point] | |
Bandwidth Management by VLAN interface | No | No | Yes | Site-wide > Configure > Access points > Traffic shaping | Currently supported on NWA1123ACv3, WAC500, WAC500H, NWA110AX, NWA210AX, WAX510D, WAX610D, WAX630S, WAX650S |
AP traffic log | No | No | Yes | Site-wide > Configure > Site settings | |
IPTV report | No | No | Yes | Site-wide > Monitor > Switches > IPTV report | |
Advanced IGMP | No | No | Yes | Site-wide > Configure > Switches > Advanced IGMP | |
Switch Surveillance Monitoring with ONVIF | No | No | Yes | Site-wide > Monitor > Switches > Surveillance | Currently only supported on GS1350 series switches |
Extended PoE range | Yes | Yes | Yes | Site-wide > Configure > Switches > Switch ports > [select port] | Currently only supported on GS1350 series switches |
Automatic PoE device recovery | No | Yes | Yes | Site-wide > Configure > Switches > Switch ports > [select port] | |
Port bandwidth control | Yes | Yes | Yes | Site-wide > Configure > Switches > Switch ports > [edit the selected port] | |
Vendor ID-based VLAN | No | Yes | Yes | Site-wide > Configure > Switches > Switch settings | |
IP interface and static route | No | No | Yes | Site-wide > Configure > Switches > IP & routing | |
Remote SSH in Live tools | No | No | Yes | Site-wide > Devices > Switches: Switch Details > Live tools > Remote SSH | |
IP Source Guard | No | No | Yes | Site-wide > Configure > Switches > Switch settings | |
Nebula cloud authentication | Yes | Yes | Yes | Site-wide > Configure > Switches > Authentication | |
Cloud Stacking | No | No | Yes | Site-wide > Configure > Switches > Stacking management | |
Time period for security service (AV/App Patrol/CF/IDP/NSS) analysis report | 24 hours | 7 days | 365 days | Site-wide > Monitor > Security gateway > NSS analysis report | Requires Nebula Security Gateway (NSG) Nebula Security Service (NSS) – Security Pack (SP) license |
Traffic log archiving | No | No | Yes | Site-wide > Monitor > Firewall > SecuReporter | |
VPN topology with traffic usage | No | No | Yes | Organization-wide > Organization-wide manage > VPN Orchestrator | |
Smart VPN | No | No | Yes | Organization-wide > Organization-wide manage > VPN Orchestrator | |
VPN provision script email | No | No | Yes | Site-wide > Configure > Security gateway / Firewall > Remote access VPN (L2TP/IPSec) | |
Collaborative Detection & Response (CDR) with automatic respond action | No | No | Yes | Site-wide > Configure > Collaborative detection & response | Requires Security Firewall UTM Security Pack license |
Smart mesh with manual select of mesh controller (root) and automatic fall back to auto mode | Yes | Yes | Yes | Site-wide > Devices > Access points | Currently supported on NWA110AX, NWA210AX, WAX510D, WAX610D, WAX630S, WAX650S, NWA1123ACv3, WAC500, and WAC500H APs |
Traffic logs to SecuReporter | No | No | Yes | Site-wide > Configure > Site settings | Also available for Gold Security Pack, UTM Security Pack, and Content Filter Pack |
Home networking | Yes | Yes | Yes | Site-wide > Devices > Mobile Router > Configuration | Currently only supported on NR5101, FWA510 and LTE3301-PLUS |
Cellular IP Passthrough | No | No | Yes | Site-wide > Devices > Mobile Router > Configuration | Currently only supported on NR7101 and LTE7461 |
Remote configurator in Live tools | No | No | Yes | Site-wide > Devices > Mobile Router > Live tools > Remote configurator | Requires LTE or NR cellular 5G indoor or outdoor router running the latest firmware |
Client device heartbeat | No | No | Yes | Site-wide > Devices > Mobile Router > Client device heartbeat | Currently only supported on FWA510 and LTE3301-PLUS |