Zyxel Nebula Control Center Release Note

Common NCC (Organization,Site-wide,etc.):

1. The MSP Admins & teams feature sets have been redesigned. The new roles not only have clear definitions and a hierarchical structure but also facilitate operational automation such as ownership transfer of customer organizations. This makes it significantly easier for the MSP to manage their own admins & teams and their corresponding customer organizations & groups and centrally manage all the administrators in their customer organizations in a simpler and more intuitive way, and scale business seamlessly. (Nebula MSP Pack license is required)
2. Together with Circle, Pay-as-You-Go (PAYG) mode is added to ease the license renewal process for partners.
3. Org-wide configuration management supports synchronizing settings: SSID Profile, Switch Port Profile and Switch PoE Schedule. (Nebula Pro Pack license is required)
4. Topology (Nebula Plus/Pro Pack license is required)
   - Enhanced the device icons to mirror the actual product image.
   - Now supports PoE connectivity, trace client path and refresh button.
   - The uplink device's name and notes are now editable.
5. Demo users can now see more settings than before, though they remain read-only.
6. Wireless client data retrieval has been improved for faster updates.

Wireless LAN (WLAN):

1. The following new AP models are now supported in this release: NWA50BE, NWA50BE PRO, NWA90BE, and NWA90BE PRO. These models are Small Business-class Wi-Fi 7 NebulaFlex Access Points, supporting both standalone mode and nebula cloud-managed mode.
2. Added support for the Administrative Access feature on supported models. This feature allows access to device services (e.g., SSH, HTTPS) only from trusted IP addresses.
   ⚠️ Important: After upgrading to firmware version 7.20, if you have previously configured Switch Access Management on the Nebula Control Center, your managed access points will only be manageable from trusted IP addresses.
3. A configurable syslog prefix is now available for external syslog servers.
4. With the release of firmware version 7.20, Zyxel Access Points operating in 802.11be (Wi-Fi 7) mode now comply with enhanced security requirements in accordance with the IEEE 802.11be standard — including support in mesh mode. For more detail, please visit Zyxel Community post. https://community.zyxel.com/en/discussion/28852/

Switching:

1. New models added: XMG2230-28HP and XMG2230-52HP.
2. Port Advisor continuously monitors network port health, bandwidth and security, delivering alerts and detailed analysis to quickly identify and diagnose issues, empowering users to take effective action. (Nebula Pro Pack license is required)
3. Relocate the ‘Access management’ setting to a site-wide configuration panel 'Administrative Access', adding control options to restrict access to device services (e.g., SSH, HTTPS) based on authorized IP addresses.
4. To enhance security, the Telnet service will also be disabled on all switches.

Security Firewall:

1. When on-boarding USG Flex H series, the initial configuration can be provisioned from Nebula pre-configuration or from the local configuration.

Security Router:

1. Support Traffic Log Archiving to SecuReporter. (Nebula Pro Pack or Elite Pack license is required)
2. Added Captive Portal and authentication utilizing Microsoft Entra ID for USG Lite 60AX. (Nebula Pro Pack license is required for Entra ID auth.)

Mobile Router:

1. Support the new MR model. The Nebula FWA515 is added to Nebula in this release.

Accessory enhancements:

N/A