[Release Note] Nebula Control Center - 19.10 software Release!

Zyxel_CSO

Zyxel Nebula Control Center Release Note

Common NCC (Organization,Site-wide,etc.):

1. The MSP Admins & teams feature sets have been redesigned. The new roles not only have clear definitions and a hierarchical structure but also facilitate operational automation such as ownership transfer of customer organizations. This makes it significantly easier for the MSP to manage their own admins & teams and their corresponding customer organizations & groups and centrally manage all the administrators in their customer organizations in a simpler and more intuitive way, and scale business seamlessly. (Nebula MSP Pack license is required)
2. Together with Circle, Pay-as-You-Go (PAYG) mode is added to ease the license renewal process for partners.
3. Org-wide configuration management supports synchronizing settings: SSID Profile, Switch Port Profile and Switch PoE Schedule. (Nebula Pro Pack license is required)
   
   
4. Topology (Nebula Plus/Pro Pack license is required)
   - Enhanced the device icons to mirror the actual product image.
   - Now supports PoE connectivity, trace client path and refresh button.
   
   
   
   - The uplink device's name and notes are now editable.
   
   
5. Demo users can now see more settings than before, though they remain read-only.
6. Wireless client data retrieval has been improved for faster updates.
   
   

Wireless LAN (WLAN):

1. The following new AP models are now supported in this release: NWA50BE, NWA50BE PRO, NWA90BE, and NWA90BE PRO. These models are Small Business-class Wi-Fi 7 NebulaFlex Access Points, supporting both standalone mode and nebula cloud-managed mode.
2. Added support for the Administrative Access feature on supported models. This feature allows access to device services (e.g., SSH, HTTPS) only from trusted IP addresses.
   
   ⚠️ Important: After upgrading to firmware version 7.20, if you have previously configured Switch Access Management on the Nebula Control Center, your managed access points will only be manageable from trusted IP addresses.
3. A configurable syslog prefix is now available for external syslog servers.
   
   
   
4. With the release of firmware version 7.20, Zyxel Access Points operating in 802.11be (Wi-Fi 7) mode now comply with enhanced security requirements in accordance with the IEEE 802.11be standard — including support in mesh mode. For more detail, please visit Zyxel Community post. https://community.zyxel.com/en/discussion/28852/

Switching:

1. New models added: XMG2230-28HP and XMG2230-52HP.
2. Port Advisor continuously monitors network port health, bandwidth and security, delivering alerts and detailed analysis to quickly identify and diagnose issues, empowering users to take effective action. (Nebula Pro Pack license is required)
   
   
   
3. Relocate the ‘Access management’ setting to a site-wide configuration panel 'Administrative Access', adding control options to restrict access to device services (e.g., SSH, HTTPS) based on authorized IP addresses.
   
   
4. To enhance security, the Telnet service will also be disabled on all switches.

Security Firewall:

1. When on-boarding USG Flex H series, the initial configuration can be provisioned from Nebula pre-configuration or from the local configuration.

Security Router:

1. Support Traffic Log Archiving to SecuReporter. (Nebula Pro Pack or Elite Pack license is required)
2. Added Captive Portal and authentication utilizing Microsoft Entra ID for USG Lite 60AX. (Nebula Pro Pack license is required for Entra ID auth.)

Mobile Router:

1. Support the new MR model. The Nebula FWA515 is added to Nebula in this release.

Accessory enhancements:

N/A

dukisha016

"The following new AP models are now supported in this release: NWA50BE, NWA50BE PRO, NWA90BE, and NWA90BE PRO. These models are Small Business-class Wi-Fi 7 NebulaFlex Access Points, supporting both standalone mode and nebula cloud-managed mode."

APs above are not available to the public but spark the interest nonetheless. Could you provide a datasheet or any other piece of information regarding the access points above, just to satisfy my curiosity.

john32

Can you add to that request the FWA515? A shinny new mobile router about to drop?? 

Zyxel_Melen

Hi @dukisha016 & @john32

Thanks for asking, but sorry, the datasheet for the models you inquired about is not ready at this moment. If I get any further information, I will update you.

AndyY

1. When on-boarding USG Flex H series, the initial configuration can be provisioned from Nebula pre-configuration or from the local configuration.

that is a very interessting point, so an existing configuration on the usg flex h will be deleted to nebula default, when the firewall is assigned to a new site

was: actually that the configuration on the usg flex h was pushed to nebula was a nice feature, not only to replace old firewall models

is: now the configuration is pushed from nebula to firewall, can this be deactivated?

question: what do you mean with: or from the local configuration, how is this possible

question: how does it work to replace an atp now? without having long down times in the network?

Zyxel_Melen

Hi @AndyY

When setup, you can choose to start with Nebula pre-configuration or with local web GUI configuration from V1.35.

is: now the configuration is pushed from nebula to firewall, can this be deactivated?

Since USG FLEX H series is hyprid mode (you can configure on Nebula or local web GUI), so the configuration will sync between Nebula and local web GUI. This can't be deactivated.

question: what do you mean with: or from the local configuration, how is this possible

As I mentioned in the beginning, now you can choose Nebula pre-configure or local web GUI configure in the first start. And after that, you can still choose to configure on one side.

question: how does it work to replace an atp now? without having long down times in the network?

• Your ATP is on-premise mode:
  Backup your configuration > use the configuration converter to convert the configuration for your H series > choose the "Web Configurator" and select "Restore from a file" to restore the converted configuration.
• Your ATP is Nebula mode:
  Create a new site > follow this post to pre-configure on Nebula as your ATP > connect your USG FLEX H to the network and wait for the device online.

Additionally, if you encounter any questions, please feel free to post your question in the related category.