Usg flex series management

mluy

Hi All,

What do you prefer in managing/configuring USG FLEX series? Nebula or On-Prem

Thanks,

Zyxel_Jeff

Hi @mluy

Welcome to the Zyxel community.

Regarding this question, the choice depends on your specific requirements for firewall management.

The benefits of the Nebula mode include:

(1). You can manage Nebula devices through the Nebula Control Center website or Nebula APP.
If you have multiple Nebula devices (such as firewalls, switches, and WLAN APs), you can centrally manage them across all organizations and sites.
(2). All configurations are saved on the Nebula Control Center, and you manage configuration templates within Nebula.

You can refer to this introduction for more references.

The benefits of the on-premise mode include:

(1). Currently, the On-Premise mode offers more advanced features (such as Device-HA, IPv6) and you can configure the device even when it cannot access the internet.
(2). The on-Premise mode supports Nebula Monitor mode, allowing users to manage the firewall via remote SSH or remote Web-GUI.

You can refer to this introduction for more references.

Therefore, you should evaluate which mode is suitable for you based on your actual requirements. Thank you.

Zyxel_Jeff

Hi @mluy

Welcome to the Zyxel community.

Regarding this question, the choice depends on your specific requirements for firewall management.

The benefits of the Nebula mode include:

(1). You can manage Nebula devices through the Nebula Control Center website or Nebula APP.
If you have multiple Nebula devices (such as firewalls, switches, and WLAN APs), you can centrally manage them across all organizations and sites.
(2). All configurations are saved on the Nebula Control Center, and you manage configuration templates within Nebula.

You can refer to this introduction for more references.

The benefits of the on-premise mode include:

(1). Currently, the On-Premise mode offers more advanced features (such as Device-HA, IPv6) and you can configure the device even when it cannot access the internet.
(2). The on-Premise mode supports Nebula Monitor mode, allowing users to manage the firewall via remote SSH or remote Web-GUI.

You can refer to this introduction for more references.

Therefore, you should evaluate which mode is suitable for you based on your actual requirements. Thank you.

PeterUK

I wouldn't mind Nebula if it had all the settings or just linked to USG with the monitoring but I wounder what happens if Nebula goes down or how it loads a config like is the last config saved on the USG that it loads from before connecting to Nebula for changes?

Zyxel_Jeff

Hi @PeterUK

Thanks for your inquiry. In the event that the Nebula Control Center goes down for any reason (such as server maintenance), the USG Flex/ATP device can still retain its current configuration and internet service. However, if the user wishes to make adjustments to their configuration, they will need to wait until the Nebula Control Center service is restored. Thanks.