Nebula 20.00 - Firewall config scheduled backup with Nebula Pro for the entire ORG?

GiuseppeR

Hello everyone,

A client of mine has a Gold Security Pack license activated to his firewall, so Nebula Pro included. He has NOT Nebula Pro for the rest of his network.

I went to check the firewall scheduled backup and Nebula says “no license”:

Is it mandatory to have the Nebula Pro Pack also on the APs to backup the config of the firewall?

Zyxel_Judy

Hi @GiuseppeR ,

To enable features marked with the diamond icon (like Scheduled Backup), the Nebula organization must maintain Nebula Pro status, it means every device registered within that organization must have a valid Nebula Pro Pack license.

Even though your client's firewall has a Gold Security Pack (which includes Nebula Pro), the presence of APs without Pro licenses causes the organization to downgrade to the Base Pack level. This disables Pro-level features across the entire organization, including scheduled backups for the firewall.

There are two solutions:

1. [Recommended] Purchase and assign Nebula Pro Pack licenses to each Access Point (AP) as well. This ensures your customer has full access to Pro features across both the firewall and AP.
2. Move the firewall to its own dedicated Nebula Organization where it is the only device. Since it has the Gold Security Pack, that specific organization will then reach Pro status, and firewall scheduled backups will become available.

Zyxel_Judy

Hi @GiuseppeR ,

You may use the Site Replicate feature for this. You can find it at:

MSP > MSP Cross-Org Manage > Config Management > Replicate/ move sites

Please note that the configurations available for replication depend on the firewall model of your customer's organization. Please refer to the article below for a full list of supported configurations.

Detail configuration list processed in “Replicate site-wide/switch configuration” function — Zyxel Community

MSP license is required to access this feature.

Zyxel_Judy

Hi @GiuseppeR ,

To enable features marked with the diamond icon (like Scheduled Backup), the Nebula organization must maintain Nebula Pro status, it means every device registered within that organization must have a valid Nebula Pro Pack license.

Even though your client's firewall has a Gold Security Pack (which includes Nebula Pro), the presence of APs without Pro licenses causes the organization to downgrade to the Base Pack level. This disables Pro-level features across the entire organization, including scheduled backups for the firewall.

There are two solutions:

1. [Recommended] Purchase and assign Nebula Pro Pack licenses to each Access Point (AP) as well. This ensures your customer has full access to Pro features across both the firewall and AP.
2. Move the firewall to its own dedicated Nebula Organization where it is the only device. Since it has the Gold Security Pack, that specific organization will then reach Pro status, and firewall scheduled backups will become available.

GiuseppeR

Thanks @Zyxel_Judy

for the clarification.

When I move his FW to another ORG to have the full GSP services, is the firewall able to maintain every config like PPPoE connection, DHCP reservation and Security Policies?

Zyxel_Judy

Hi @GiuseppeR ,

You may use the Site Replicate feature for this. You can find it at:

MSP > MSP Cross-Org Manage > Config Management > Replicate/ move sites

Please note that the configurations available for replication depend on the firewall model of your customer's organization. Please refer to the article below for a full list of supported configurations.

Detail configuration list processed in “Replicate site-wide/switch configuration” function — Zyxel Community

MSP license is required to access this feature.