With a variety of security features, including an ICSA-certified firewall, IPsec VPN connectivity, Intrusion Detection and Prevention (IDP), and Application Patrol, the NSG50 Nebula Cloud Security Gateway from Zyxel offers enhanced security while providing intuitive remote management functionality.

With the Nebula Cloud, network admins can manage multiple Nebula gateways from a single point with the ability to manage event logs, monitor traffic statistics, and more. Once configured, the Nebula Cloud Security Gateway offers enhanced firewall functionality with a variety of features, including stateful packet inspection, VLAN support, PPPoE, static route support, and much more. Additionally, this gateway offers streamlined policy management including a unified policy management interface, IDP, application protocol, and firewall (ACL) features, along with source and destination IP addressing and destination port and time policy criteria.

The NSG50 Nebula Cloud Security Gateway comes equipped with four Gigabit LAN ports, a single SFP WAN port, and a single GbE WAN port. Alongside the network ports is a single USB port and a single RJ45 console port. Installation is simple, as the gateway comes wall mountable and features a fanless design for quiet operation.

4 x Gigabit Ethernet LAN Ports    2 x WAN Ports (1 x SFP, 1 x GbE)    1 x USB Port    1 x RJ45 Console Port    Wall Mountable    Zero-Touch Site-to-Site VPN    Enhanced Firewall Functionality    Built-In DHCP, NAT, QoS, VLAN Management    Static Route and Dynamic DNS Support    Identity-Based Security Policies

The Zyxel NSG50 can be easily deployed at a remote location through nearly zero-touch cloud provisioning. It automatically pulls policies and configuration settings, and receives seamless

firmware upgrades and security signature updates from the cloud without the need for on-site networking expertise.

Traditional gateways require administrators to perform configuration and to manage security policies on each device one by one which costs considerable time and effort. The Zyxel Nebula provides a single point of management to all the Nebula gateways for administrators to synchronize security settings across thousands of sites to every device all at once. The cloud interface provides site-wide visibility and control that enable administrators to manage event logs, traffic statistics, bandwidth consumption, networked clients, and application usage without access to the individual devices.

Establish a VPN to keep branch locations securely connected. With the Zyxel Nebula Security Gateway, either site-to-site or hub-and-spoke VPN connections can be

configured with complete simplicity through few clicks in the Nebula Control Center, without complex VPN configuration steps. The intuitive cloud management interface gives administrators

a real-time view to monitor VPN connectivity between multiple locations.

The Zyxel Nebula Security Gateway streamlines configuration of your firewall and security features for faster, easier, and more consistent policy settings by supporting object-based

management and a unified configuration. Moreover, any configuration made in the Nebula Control Center can automatically propagate to all the connected Nebula gateways.

Nebula's IDP (Intrusion Detection and Prevention) system scans multiple layers and protocols to inspect vulnerabilities invisible to simple port- and protocol-based firewalls by utilizing Deep Packet Inspection (DPI) technology that eliminates false positives with a database of malware signatures and provides effective protection against intrusion from unknown back doors.

The Zyxel Nebula Security Gateway supports Application Patrol, which can identify, categorize, and control social, gaming, productivity, and other Web applications and behaviors. Users

can block undesirable applications to boost productivity and prevent bandwidth abuse.

• Stateful packet inspection

• User-aware policy enforcement

• VLAN

• PPPoE

• Static route

• Firewall

• Intrusion Detection and Prevention (IDP)

• Application Patrol

• Topology: Site-to-site, hubs-and-spoke

• Encryption: AES (256-bit), 3DES and DES

• Authentication: SHA-2 (512-bit), SHA-1 and MD5

• Perfect forward secrecy (DH groups) support 1, 2, 5, 14

• IPSec NAT traversal

• Dead peer detection and relay detection

• VPN auto-reconnection

• L2TP over IPSec

• Signature-based

• Behavior-based scanning

• Automatic signature updates

• Granular control over the most important applications

• Identifies and controls applications and behaviors

• Top application usage record

• Routing mode

• Ethernet and PPPoE

• NAT

• VLAN tagging (802.1Q)

• DHCP client/server/relay

• Dynamic DNS support

• Maximum bandwidth

• Bandwidth limit per client IP

• Microsoft Windows Active Directory integration

• External RADIUS user database

• Nebula Cloud (Nebula Control Center) authentication

• Web-based authentication

• Forced user authentication (transparent authentication)

• Sign-on or click-to-continue authentication

• Multiple instances of captive portal

• Customizable portal templates

• Internal or external captive portal redirect

• Walled garden support

• Cloud managed

• Role-based administration

• SNMP v2c (MIB-II)

• System configuration rollback

• Cloud firmware upgrade

• Comprehensive local logging

• Syslog (to up to 2 servers)

• Real-time traffic monitoring

Related Questions and Answers

Q: 1. Does this provide power over Ethernet?

A: No, the Ubiquiti Networks Cloud Gateway Ultra does not output PoE power.

Q: 2. Is this a world (international) version? I want to make sure that this model isn't locked for US only...

A: There is no indication that the Ubiquiti Networks Gateway Max can only be used in the US. You'd just need to adapt the plug to whatever is used in your location.

Q: 3. How do you purchase the Optional Meraki Go Security Subscription?

A: You can purchase the Security Subscription for the Cisco Meraki Go GX50 Firewall Plus 5-Port Router & Security Gateway at this link: https://www.bhphotovideo.com/c/product/1679591-REG/cisco_lic_gx_umb_1y_1_year_security_subscription_for.html?sts=pi

Q: 4. What is the throughput for the router? I have 1.2G from Xfinity and want to make sure I am getting at least gig speeds

A: The Cisco Meraki Go GX50 Firewall Plus 5-Port Router & Security Gateway's integrated firewall supports up to 500 Mb/s throughput.

Q: 5. what is network protocol, will this unit work with a unmanaged switch?

A: The Obsidian Netron EP4 Ethernet to DMX 4-Port Gateway can work with managed or unmanaged switches.

Q: 6. Will this work with a gigabit network (automatically sense the 1GB speed and adapt)?

A: The Ubiquiti Networks Gateway Max has five 2.5 Gb/s Ethernet ports, so it would work with a Gigabit Ethernet network.

Q: 7. is it support PPPOE?

A: Yes, the Cisco Meraki Go GX50 Firewall Plus 5-Port Router & Security Gateway can be configured for PPPoE.

Q: 8. Will this filter work with the Vaonis Vespera II ?

A: The Vaonis Vespera II Observation Station does not use eyepieces and therefore cannot use an eyepiece filter.

Q: 9. How does this compare to the dream machine pro se?

A: The UXG-PRO is primarily a security gateway router, while the Dream Machine Pro is a network control console which also has security gateway functionality. The UXG-PRO would be most ideal for customers who need a robust security gateway without the extra features and functions of the UDM Pro, and is more suited for integration into networks which already have a control/network management solution in place.

Q: 10. Is this full POE?

A: The ZyXEL GS1100 16-Port Gigabit Rackmountable Unmanaged Switch does not support POE.