Nebula Base Pack
License-free feature set/service with a rich set of management features
Cloud Networking Management
Nebula Control Center
Find the Best Plan for
Your Cloud Networking Management
Nebula MSP Pack
Per-admin user account license that includes cross-org management features tailored for MSPs, and is used in conjunction with org-based management features/licenses (Base/Plus/Pro Pack).
Nebula Plus Pack
Add-on feature set/service with all Nebula Base Pack features plus popular advanced features for enhanced network control and visibility.
Nebula Pro Pack
Full feature/service with all Nebula Plus Pack features plus advanced tools for maximum NCC manageability across devices, sites, and organizations.
Base/Plus/Pro Pack is on a per-device license basis and mandates that all devices within an organization use the same license type, ensuring a simplified, seamless cloud management experience across the entire organization.
Nebula Base Pack
Free
- 1 Day Cloud Log, Stat, Report
- 5 Org Admins max.
- 50 Nebula Cloud Auth. Server Entries max. per Org
License-free with a rich set of management features, includes:
- Zero-Touch Provisioning of Nebula Devices
- Site-wide Dashboard, Configure, Monitor, Map & Floor plans, Summary Report
- Site-wide Firmware Management
- Site-wide Alert: Emails and App Push Notifications
- Scheduling SSID, PoE, and Firewall rules
- MAC-Based and 802.1X Authentication: AP & Switch
- Captive Portal Authentication: AP & Firewall
Nebula Plus Pack
Get Pricing on Marketplace
- 7 Day Cloud Log, Stat, Report
- 8 Org Admins max.
- 100 Nebula Cloud Auth. Server Entries max. per Org
Everything in Nebula Base Pack, plus:
- Exempt from Cloud Saving Mode (CSM)
- Advanced Reporting by Export or Email (with Scheduling & Custom Logo)
- Advanced Firmware Management (per-device Scheduling, Org-wide)
- Site-wide Topology
- AP - WiFi Vouchers
- Switch - Vendor-based VLAN, Auto PD Recovery
Nebula Pro Pack
Get Pricing on Marketplace
- 1 Year Cloud Log, Stat, Report
- Unlimited Org Admins
- Unlimited Nebula Cloud Auth. Server Entries per Org
Everything in Nebula Plus Pack, plus:
- Org-wide Configuration Management (Sync., Replicate, Backup & Restore, Template)
- Org-wide Change Log, Login IP Ranges
- Priority Support Request via NCC and Chat
- OpenAPI Integration Access
- Device Remote SSH/Configurator Access
- AP - Advanced WiFi Security (DPPSK, CP Sign-on w/ MS EntraID, NCAS User Client Dynamic VLAN Assignment, 3rd Party RADIUS & CP Custom Integration)
- AP - Advanced WiFi Control (Programmable SSID/PSK, per-AP RSSI Threshold, User Group Traffic Shaping, NAT AP Traffic Logging)
- AP - Advanced WiFi Troubleshooting (WiFi Aid & Connection Log, Wireless Health)
- Switch - IP & Routing, Stacking, Surveillance Monitor, IP Source Guard, Advanced IGMP, IPTV Report
- Firewall - SecuReporter Traffic Log Archiving, Org-wide VPN Orchestrator, L2TP VPN Client Script Provisioning, Containment from Collaborative Detection & Response (CDR)
- Mobile Router - LAN Client Device Status Monitoring, Configuration Backup, Download and Restore
| Nebula Base Pack Free |
Nebula Plus Pack Get Pricing on Marketplace |
Nebula Pro Pack Get Pricing on Marketplace |
|
|---|---|---|---|
| General Management | |||
| Register and Centrally Manage Organizations, Sites, and Nebula Devices | Unlimited | Unlimited | Unlimited |
| Zero-Touch Provisioning of Nebula Devices |  |
|
|
| Site-wide Dashboard | |
|
|
| Monitoring Device & Client Status and Information | |
|
|
| Live Device Troubleshooting Tools | |
|
|
| Map & Floor Plan for Device Location on Google Map and Floor Plan | |
|
|
| Site-wide Firmware Management | |
|
|
| Site-wide Alert: Emails and App Push Notifications | |
|
|
| Org Access Control by Two Factor Authentication (2FA) Status of Admin Account | |
|
|
| Historical Device & Client Stats, Site-wide Feature Logs & Summary Reports Stored | 1D | 7D | 1YR |
| Org Admins max. | 5 | 8 | Unlimited |
| Nebula Cloud Auth. Server (NCAS) Supporting 802.1x, VPN, Captive Portal and MAC Auth. and Entries max. per Org | 50 | 100 | Unlimited |
| Photo Uploaded max. per Device | 1 | 1 | 5 |
| Exempt from Cloud Saving Mode | |
|
|
| Site-wide Topology | |
|
|
| Advanced Reporting by Export (CSV/XML) or Email (with Scheduling & Custom Logo) | |
|
|
| Advanced Firmware Management (Site-wide Scheduling per Device; Org-wide) | |
|
|
| Org-wide Configuration Management (Sync., Replicate, Backup & Restore, Template) | |
||
| Org-wide Configuration Change Log | |
||
| NCAS User with DPPSK and VLAN Assignment Attributes | |
||
| Org Access Control by Login IP Ranges | |
||
| Priority Support Request via NCC and Chat | |
||
| OpenAPI Integration Access | |
||
| Access Point | |||
| Client Monitoring with Block/Bypass Web Auth./SSID Access Policy Control | |
|
|
| Map & Floor Plan for WiFi Floor Plan Heatmap | |
|
|
| SSID Scheduling | |
|
|
| MAC-Based and 802.1X Authentication (WPA Enterprise) | |
|
|
| Captive Portal Authentication | |
|
|
| Captive Portal Page Customization | |
|
|
| Assisted & Fast Roaming | |
|
|
| Site-wide Smart Client Steering | |
|
|
| AP Load Balancing (Client No./Smart Classroom Mode) | |
|
|
| Smart Mesh | |
|
|
| Historical APs Event Logs & Summary Reports Stored | 1D | 7D | 1YR |
| WiFi Vouchers | |
|
|
| Programmable SSID & PSK | |
||
| Dynamic Personal PSK Authentication | |
||
| Dynamic VLAN Assignment via NCAS User for 802.1x & DPPSK Authentication | |
||
| Sign-on with Microsoft Entra ID for Captive Portal Autehntication | |
||
| Sign-on with RADIUS for Captive Portal Authentication, Customizing with MAC Auth. Fallback, RADIUS Accounting and NAS ID Identifier Options | |
||
| Custom URL Parameters for External Captive Portal Authentication | |
||
| Per-AP Smart Client Steering | |
||
| User/User Group Traffic Shaping via Rate-limit VLAN Being Assigned | |
||
| AP Traffic Logging to Syslog Server for AP in NAT Mode | |
||
| Wireless Health | |
||
| WiFi Aid and Connection Logs | |
||
| Remote SSH to AP | |
||
| Automatically Block Wireless Client via Collaborative Detection & Response (CDR) Policy of USG FLEX & ATP Firewall Series | |
||
| Switch | |||
| Client Monitoring with Block Policy Control | |
|
|
| PoE Scheduling | |
|
|
| MAC-Based (w/ Port Security Option) and 802.1X Authentication | |
|
|
| Port Profiles | |
|
|
| Errdisable (Loop Guard/BDPU Guard) Recovery | |
|
|
| Switch Port Cable Diagnostic | |
|
|
| DHCP Server Guard | |
|
|
| Historical Switches Event Logs & Summary Reports Stored | 1D | 7D | 1YR |
| Vendor-based VLAN | |
|
|
| Auto PD Recovery | |
|
|
| ONVIF Discovery & Configuration | |
||
| IPCAM and Switch Surveillance Monitoring | |
||
| Switch Stacking | |
||
| IP Interfacing and Static Routing | |
||
| Site-wide & Per-Port Advanced IGMP Settings | |
||
| IPTV Report | |
||
| IP Source Guard (DHCP Snooping) | |
||
| Remote SSH to Switch | |
||
| Firewall | |||
| Client Monitoring with Block/Bypass Web Auth./Reserve IP Policy Control | |
|
|
| Policy Routing & Traffic Shaping | |
|
|
| Weighted Round Robin WAN Load Balancing | |
|
|
| Firewall Rules Scheduling | |
|
|
| Site-to-Site SD-VPN and Auto-Link VPN Provisioing | |
|
|
| Sign-on with NCAS with 2FA Option for Remote Access IPSec VPN | |
|
|
| Captive Portal Authentication | |
|
|
| Captive Portal Page Customization | |
|
|
| Sign-on with NCAS with 2FA Option for Captive Portal Authentication | |
|
|
| Site-wide VPN Connection Status Monitoring | |
|
|
| Historical Firewall Event Logs & Summary Reports Stored | 1D | 7D | 1YR |
| Org-wide VPN Topology with Traffic Usage | |
||
| Org-wide VPN Orchestrator SD-VPN and Auto-Link VPN Provisioing | |
||
| L2TP VPN Client Script Provisioning | |
||
| Zyxel CNM SecuReporter Traffic Log Archiving | |
||
| Remote SSH to Firewall | |
||
| Automatically Alert, Block or Quarantine Firewall Wired Client via Collaborative Detection & Response (CDR) | |
||
| * Multi-layered, AI-powered cloud cybersecurity protection, which includes features such as sandboxing, anti-malware, IP/DNS/URL threat filtering, IPS and Application Patrol, intelligent security and seamless security management require a Gold Security Pack (GSP) license per firewall device. | |||
| Mobile Router | |||
| Device Log Retrieving | |
|
|
| Historical Device Stats Stored | 1D | 7D | 1YR |
| LAN Client Device Status Monitoring | |
||
| Configuration Backup, Download and Restore | |
||
| Remote Configurator to Mobile Router | |
||
Nebula MSP Pack
Get Pricing on Marketplace
- MSP Portal
- Admins & Teams
- Cross-org Synchronization
- Backup & Restore
- Alert Templates
- Firmware Upgrades
- Change Log
- MSP Branding