Stay Ahead of Cyberthreats with Collaborative Detection & Response (CDR) Licensing Requirements

Zyxel_JudyH

Collaborative Detection & Response (CDR) integrates Nebula firewalls and Nebula access points to deliver automated threat responses and mitigate risks. Powered by an advanced rule-based policy engine, the Nebula firewall detects cyberthreats and reports them to the Nebula cloud. The Nebula Control Center then automatically responds to these threats by isolating compromised endpoints at the network edge—specifically, at the access points in your network. CDR is the ideal solution for IT teams looking to secure decentralized network infrastructures.

🚩 Licensing Requirements

To fully leverage the powerful Collaborative Detection & Response (CDR) feature, you must operate a Nebula firewall with a valid Gold Security Pack or UTM Pack license in a Nebula Pro Organization.

If your Nebula firewall operates with a valid Gold Security Pack or UTM Pack license in a Nebula Base Organization, the "Containment" feature will not function.
A warning message will indicate this limitation, as shown below:

Reminder: The Containment Feature Quarantines Compromised Devices

The Containment feature isolates compromised endpoint devices, preventing cyberthreats from spreading across your network. Zyxel strongly recommends operating a Nebula firewall with a valid Gold Security Pack or UTM Pack license within a Nebula Pro Organization to unlock the full potential of the CDR feature.

If you operate a Nebula firewall without a valid Gold Security Pack or UTM Pack license in a Nebula Pro Organization, the "Containment" feature will not function. Without a valid license, the Nebula firewall ceases to detect cyberthreats, and the Nebula Control Center is unable to identify compromised devices within the network. As a result, the Containment feature will be disabled.

A warning message will indicate this limitation, as shown below:

Key Benefits of CDR:

• Automated Protection: CDR eliminates the need for manual intervention by automating threat detection and response. When combined with Zyxel’s ATP (Advanced Threat Protection) or USG FLEX firewalls, it instantly isolates compromised devices, minimizing potential damage.
• Real-Time Threat Collaboration: CDR enables your network devices to communicate, sharing and acting on security information across firewalls, access points, and switches. This ensures rapid, system-wide responses to threats.
• Seamless Integration with Nebula Cloud: CDR operates in both on-premises and cloud-managed environments. With Zyxel’s Nebula Cloud, CDR integrates effortlessly, offering complete visibility and control over your network, no matter where you are.
• Enhanced Threat Intelligence: Powered by machine learning, CDR analyzes traffic patterns to provide real-time insights into emerging threats. It continuously updates its threat database to protect your network from both known and unknown risks.

📢 For a guide on CDR configuration process, check out our [How-To Article] below:

[On-cloud firewalls]

[ On-premise firewalls]