Cambium Network Service Edge 4000 10 Gbps Firewall and SD-WAN Router

The Cambium Network Service Edge 4000 10 Gbps Firewall and SD-WAN Router delivers unified threat management and SD-WAN for small and medium enterprises, educational institutions, and other distributed organizations.

Unified Threat Management
• With a single click, enable intrusion detection or intrusion prevention and let the industry-leading IDS/IPS engine protect your network against threats.
• Create advanced firewall Layer-3 and application-based rules to protect your network. Use geo-based IP filters to deny or allow traffic to/from specific countries.
• Audit security vulnerabilities with always-on LAN vulnerability scans and get notified when critical ones are discovered.
• Filter malware and undesired content with the DNS content filter. Select options to block from over 88+ categories of domain names. This helps you enforce CIPA guidelines for K–12 education deployments.
• Create secure tunnels between multiple sites or connect securely to a central site with site-to-site VPN.

SD-WAN and Traffic Engineering:
• Set up WAN links to share traffic or configure them in an active-backup fashion.
• Share traffic on both WAN links and specify the traffic share.
• Tracks WAN link health and automatically fails over traffic to the performing link.
• Prioritize business-critical applications and restrict bandwidth for non-critical apps.
• Easily prioritize and allot reserved bandwidth for time-sensitive voice applications.

Auto VPN, Site-to-Site, and Remote Access VPN
• Auto-VPN: Effortlessly create secure tunnels between multiple sites or connect tens of remote sites to a central hub with just a couple of clicks.
• Enable remote workers to log in to your network securely from any device. NSE supports industry standard WireGuard, L2TP-IPSec, and IKEv2-EAP protocols for remote access VPN.
• Turn on multi-factor authentication to enhance password-based authentication. Offers MFA via Google Authenticator.

Analytics
• Get a comprehensive overview and security analysis of all the devices on your network via Cambium’s cnMaestro cloud management platform.
• Use the intrusion prevention dashboard to gain insight on intrusion attempts. Use the insight to refine prevention policy and enhance intrusion rule sets.
• Get a network security audit of all devices on your network. Patch and remediation measures are provided to help you secure your devices
• Get deep insight into all the application traffic on your network. Use the insight to craft granular policies to prioritize and allocate sufficient bandwidth to business-critical apps.

Network Services
• Create separate networks for employees, guests, and IoT devices with ease. Our VLAN and DHCP configuration make this setup a breeze.
• Enable traffic shaping and rate-limiting policies to cap internet bandwidth for guests.
• Use the on-box RADIUS server to create user accounts and set up secure network authentication for all the users and devices on your network.
• NSE supports Dynamic DNS updates for WAN interfaces. Create easy-to-remember host names to expose on-premise services.
• NSE keeps all databases current and always updated—intrusion rules, vulnerability reports, device signatures, Geo-IP databases, malware sites database.