Reviews Tech Tech Reviews Technology UniFi

Zyxel Nebula Review – Cloud Network Management

Zyxel Nebula Review - Cloud Network Management

This submit might include affiliate hyperlinks. Please learn my disclosure for more information.

Zyxel Nebula is a cloud-managed networking answer consisting of Wi-Fi entry factors, Ethernet switches, safety gateways, and a administration console. Zyxel developed Nebula to assist enterprise clients and their service suppliers to handle networking infrastructure extra value-successfully. For this assessment, I needed to learn how a lot worth Zyxel Nebula would offer to prosumers who can’t get the efficiency they want from shopper-grade gear in residential environments.

Word that I had examined and reviewed enterprise-class networking gear from Ubiquiti prior to now, and so I had properly-outlined necessities and reference factors, particularly relating to Wi-Fi efficiency and ease of use.

Reviewed Zyxel Nebula Gear

Product NSG200 Safety Gateway


NSW100-10P eight-Port Gigabit Change with PoE


NAP303 Managed Entry Level


NAP203 Managed Entry Level


NAP102 Managed Entry Level


Zyxel despatched me a safety gateway, two 10-port Ethernet switches, and 4 entry factors to exchange my present UniFi infrastructure for this assessment.

To be completely trustworthy, I used to be hesitant to “rip out” the prevailing infrastructure that each my spouse and I depend on, from a private and professional perspective. However this problem gave me a superb alternative to check Zyxel’s “Zero Touch” deployment declare.

Spoiler alert: The migration was a lot much less painful than what I had anticipated!

My Migration Technique

For these of you who haven’t adopted the evolution of my community infrastructure, here’s a fast overview of what I meant to switch.

I reside and work out of a three,300 sq. ft ranch-type house. My residence workplace is on one aspect of the home, and that’s the place AT&T’s fiber-optic Web connection enters the house. The household room, the place I spend most time once I’m not working, and the place we stream TV exhibits and films to an Apple TV, is on the other aspect of the home.

As is the case with many residential and business settings, a single wi-fi entry level or router doesn’t present correct Wi-Fi protection for the entire space. That’s why I received into mesh networking and later expanded to business Wi-Fi gear.

Earlier than migrating to Zyxel Nebula, I had my present modem, a safety gateway (router) and an eight-port change put in in my residence workplace. From there, I ran three CAT6 Ethernet cables into the attic the place they might terminate in a second change.

The second change feeds the quite a few Wi-Fi entry factors I had strategically positioned all through the home utilizing ceiling mounts. Moreover, the change additionally connects numerous residence safety cameras to my community, however these aren’t a part of this evaluation.

How I Executed the Migration

First, I downloaded the Zyxel Nebula app to my iPhone, created an account and began scanning each bit of kit I had acquired.

How to add new Nebula devicesHow you can add new Nebula units

Every Zyxel system has a label with a QR code which you could scan so as to add the hardware to your Nebula account. As quickly as you do this, Nebula provisions it with a default configuration. That’s what Zyxel calls “Zero Touch” deployment. In my checks that labored extremely properly and it sped up the entire course of.

Since Zyxel primarily designed Nebula for managed service suppliers who may help a number of shoppers and places, I needed to create an “organization” and a “site” as a part of the setup course of. Since I’m not an actual group and have solely a single website, I used “Kummer Household” and “Home” for these parameters. You’ll see these phrases in a number of the screenshots under.

Create Wi-Fi SSID

The very first thing I did after I had plugged within the safety gateway to my ISP’s modem and transferred all Ethernet cables from the previous to the brand new change was to arrange a Wi-Fi community. Since I didn’t need to reconfigure 40+ Wi-Fi-enabled units, I made positive to make use of the identical SSID and password I had used earlier than. That method, my computer systems, telephones, tablets and IoT units might simply reconnect as soon as the brand new entry factors got here on-line.

Set up Second Change

Subsequent, I put in the second change within the attic, which took lower than a minute. Just like putting in the first change in my workplace, all I needed to do was transfer the Ethernet cables over and join the system to the uninterruptible energy provide (UPS).

Set up Entry Factors

Probably the most time-consuming a part of the migration was to exchange the prevailing entry factors. I want I might have reused the mounting brackets from my Ubiquiti APs, however, apparently, that wasn’t the case.

For this evaluation, I didn’t need to rip out the previous mounting brackets and drill new holes, which might have concerned crawling round within the attic.

I attempted 3M mounting tape first, hoping it will maintain the load of the entry factors, however that didn’t work as you possibly can see within the photograph.

Zyxel Access Point hanging from ceilingZyxel Entry Level hanging from the ceiling

So I ended up leaving the previous mounting brackets on the ceiling, and I put in the brand new brackets on prime of the previous ones. I nonetheless needed to drill holes for that, however, no less than, I didn’t should go to the attic to take away the Ubiquiti bracket that “sandwiches” the drywall.

Cosmetically, it’s not wanting nice as a result of you possibly can see a transparent hole between the entry level and the ceiling. However for this evaluation, my spouse was OK with that.

Check Connectivity

As soon as all of the hardware was in place, most of my units might reconnect to the brand new entry factors with none troubles. Just some IoT units, comparable to sensible mild switches and bulbs required an influence cycle earlier than they might reconnect to Wi-Fi.

General, I used to be impressed by the convenience of deploying the Nebula gear. All units labored out of the field and with out requiring configuration modifications. The one setup step I needed to carry out was to create an SSID (Wi-Fi community) to match the previous one.

Zyxel Nebula Cloud Managed Platform

Zyxel Nebula PlatformZyxel Nebula Platform


  • Environment friendly Deployment (Zero Contact)
  • Highly effective Management Console
  • Multi-Consumer/Multi-Tenant Help


  • Business Design
  • Some Options Require a Paid License

Most of the community administration capabilities of Zyxel’s Nebula platform are overkill for what I want. I’m not a service supplier, and I don’t work with one to assist handle my community, so this evaluate doesn’t go into the small print of these options. However since they could be a deciding issue for a lot of business clients, I needed to share a number of highlights:

  • Licenses keep on with the group and switch from system to system. So you possibly can improve the hardware with out dropping your funding within the license.
  • Zyxel provides a free subscription tier to take care of full management of your gear. Some aggressive options gained’t help you make configuration modifications and not using a legitimate (paid) subscription.
  • Nebula helps a number of tenants and websites beneath one administration console
  • “Zero touch” makes deploying new units a breeze and reduces the price of possession.

The rationale why I’ve talked about the phrases “subscription” and “license” a number of occasions is that the Nebula Cloud Management Platform is a subscription-based mostly service that lets you handle all supported units. You’ll be able to select between a free license and knowledgeable pack. The latter provides further options and reporting.

Nebula is a Cloud Network Management Answer that brings the advantages of the cloud to your community. The Nebula Management Middle provides centralized, straightforward to make use of, management over all Nebula wired and wi-fi networking units from a single pane of glass, from any system. Nebula simplifies your corporation infrastructure and provides easy, intuitive and scalable administration for networks of all sizes.

Zyxel’s cloud administration platform is extremely highly effective and have-wealthy. So it takes some getting used, particularly should you just lately upgraded from shopper-grade gear.

What Does Cloud-Managed Imply?

The time period cloud managed signifies that as an alternative of managing your units regionally (on the Native Space Network), you do it by way of a platform that Zyxel operates in its knowledge facilities. Any modifications you make get then pushed right down to your units. In consequence, you may typically see a delay of 1 to 2 minutes for modifications to take impact.

The benefit of that cloud-based mostly strategy is which you could hand off community administration to an exterior service supplier. That’s notably helpful in case you are small- or medium-sized enterprise with out an inner IT employees; or in case you are an enormous-shot enterprise proprietor who works from house, appreciates dependable networking infrastructure however wants a educated relative or worker who can configure and troubleshoot all these devices with out having to be onsite.

Nebula Management Console

Zyxel Nebula Management ConsoleZyxel Nebula Management Console

To entry the administration portal, open a browser and level it to Alternatively, you need to use a cellular app out of your platform’s App Retailer. The first advantage of the cellular app is to control the standing of your units. If you wish to make configuration modifications to your gear, you need to use the online console. One of many few exceptions is sustaining wi-fi community settings, which you are able to do by way of the cellular app.

In case you are on the paid subscription tier, Nebula can ship you “push notifications” to your cell phone to provide you with a warning in case your uplink or any of the units have gone offline. I want Zyxel would make that function a part of the free license as a result of such notifications are helpful for nearly everyone.

Zyxel Nebula Safety Gateway

Zyxel Nebula Safety Gateways


  • Gigabit Firewall Efficiency
  • Respectable VPN and IDP Throughput
  • Two WAN Ports for Fail-over Help


  • Wall-mounting solely an choice for NSG50
  • Energy Plug Simply Comes Unfastened
  • Restricted AV Throughput

Zyxel provides three fashions of its cloud-managed safety gateway that principally differ in efficiency, variety of ports and mounting choices. I obtained to check the highest-tier NSG200.


The NSG200 Zyxel gave me for this assessment has a ton of helpful options that the majority (enterprise) customers can profit from. Consequently, a few of the “cons” I discussed above, won’t apply to you. They impression me as a result of I don’t have a server rack to mount my NSG200. So I might have most popular a wall-mounting choice, which is simply obtainable for the NSG50.

Moreover, my fiber-optic web add gives virtually 1,000 megabits per second (Mbps) of bandwidth. That’s over twice as quick because the NSG200 can deal with whenever you allow anti-virus scanning and intrusion detection and prevention (IDP). In consequence, I don’t use a few of these security measures.

The opposite function I might have favored to have is help for X.509 certificates-based mostly authentication for the location-to-website VPN. That method, I might completely join the NSG200 to our company community and wouldn’t have to fret about utilizing a software program VPN shopper on my iMac.

However to be truthful, my Ubiquiti safety gateway doesn’t have any of these lacking options both. So I’m not dropping something with the Zyxel gateway.

In case your website requires an all the time-on Web connection, you’ll recognize that the NSG200 helps as much as two WAN uplinks with visitors shaping and fail-over. Earlier than I switched to a fiber-optic connection, I typically had points with Comcast’s unreliable and analog cable hyperlink. Throughout that point, I thought-about signing up for backup DSL service, however I didn’t have the router to help two uplinks.

Apart from the aforementioned advantages, the NSG200 helps all of the options you’d anticipate from a mid-tier router and extra, together with:

  • Stateful firewall
  • Customized routing choices
  • Content material and safety filtering
  • Website-to-Website VPN
  • L2TP over IPSEC shopper (VPN)
  • Walled Backyard
  • Captive portal
  • Visitors shaping
  • Exterior authentication (AD, Radius) and exterior DNS server help

Technical Specs

NSG50 NSG100 NSG200 10/100/1000 Mbps RJ-45 ports four x LAN (GbE)
2 x WAN (1x SFP, 1x GbE) four x LAN (GbE)
2 x WAN (GbE) 5 x LAN (GbE)
2 x WAN (GbE) USB ports 1 2 2 SPI firewall throughput (Mbps) 300 450 1,250 VPN throughput (Mbps) 100 150 500 IDP throughput (Mbps) 110 160 500 AV throughput (Mbps) 50 90 300 SP throughput (Mbps, AV and IDP) 50 90 300 Max. TCP concurrent periods 20,000 40,000 80,000 Max. TCP session fee 2,000 2,000 eight,000 Max. concurrent IPsec VPN tunnels 10 40 200 VLAN interface eight 16 16 Fan-much less ● ● ✘ Mounting Choices Wall Rack Rack Worth (incl. 1 Yr Subscription) $229.99 $400.00 $650.00

General, the NSG200 is a strong mid-tier safety gateway and router with a ton of straightforward-to-use configuration choices.

Zyxel Nebula Switches

Zyxel Nebula SwitchesZyxel Nebula Switches


  • Strong Switching Efficiency
  • Ethernet and SFP Ports
  • Optionally available Energy-over-Ethernet (PoE) Ports


  • You Can’t Wall-mount Them
  • The Fan is Noisy (PoE Fashions)

For this assessment, Zyxel has despatched me two of their NSW100-10P switches. The quantity 10 indicated the variety of ports the change has and “P” signifies Energy-over-Ethernet (PoE) help. The latter is beneficial for wi-fi entry factors and safety cameras as a result of it allows me to energy them over Ethernet, as an alternative of getting to attach the units to a standard energy outlet.

The drawback of Zyxel’s PoE switches is that their constructed-in fan is comparatively loud. They don’t seem to be annoyingly loud, however the noise is noticeable and greater than what I’m used to from the Ubiquiti switches.

The NSW100-10P switches I used to be testing, have all of the options you’d anticipate from units of this class:

  • Port Aggregation and Bonding
  • Cable Diagnostics
  • VLAN Tagging
  • IP Filtering
  • Radius Insurance policies for MAC-based mostly Authentication
  • PoE Schedules
  • High quality of Service (QoS) for VLANs

Technical Specs

NSW100-10 NSW100-10P NSW100-28 NSW100-28P NSW200-28P 10/1000 Mbps Ports eight ✘ 24 ✘ ✘ 10/1000 Mbps PoE Ports ✘ eight ✘ 24 24 10 Gigabit SFP+ ✘ ✘ ✘ ✘ four Gigabit combo (SFP/RJ-45) 2 2 four four ✘ Switching Capability (Gbps) 20 20 56 56 128 Forwarding Fee (Mbps) 14.88 15 41.67 41.67 95.2 Packet Buffer (KB) 448 448 1536 1536 1536 Acoustic Noise (dBA) zero 37.7 zero 59.6 42.075 Complete PoE energy finances (Watt) ✘ 180 ✘ 375 375 Worth (incl. 1 Yr Subscription) $139.99 $220.00 $217.43 $385.00 $500.00

General, I’m proud of the function-set and efficiency of Zyxel’s Nebula switches. My recommendation is to select a fan-much less mannequin for those who don’t want PoE and in case you don’t have a devoted server room the place noise is just not a problem.

Zyxel Nebula Entry Factors

Zyxel Nebula Access PointsZyxel Nebula Entry Factors


  • MU-MIMO for Enhanced Efficiency
  • Versatile Mounting Choices
  • Help for Up To Eight SSIDs


  • Business Design
  • Throughput Restricted to 900 Mbps

Zyxel presents 4 cloud-managed entry factors, together with an outside mannequin with exterior antenna help that I haven’t examined. For this evaluate, Zyxel despatched me one NAP303, one NAP203, and two NAP102 entry factors.

Just like what I did with Ubiquiti’s APs, I put in probably the most highly effective AP (NAP303) in our household room, the place we spend loads of time and stream films. The mid-tier NAP203 I put in in our front room to cowl a bulk of our IoT units (thermostats…) and the NAP102 I positioned in my workplace. The rationale for that’s as a result of my iMac is hardwired to the change, and so I don’t want the most effective Wi-Fi efficiency in my workplace.

The 2 issues I observed instantly when putting in the NAPs was their barely taller type issue and “old school” business design. In fact, neither has any impression on their efficiency, and just a few customers would care about that outdoors of a residential setting.

Past that, the entry factors have carried out in addition to I had anticipated. The set up was simple, and past creating an SSID, there was no configuration required.

Roaming and Handoff

Apart from spotless protection, one of many main ache factors with Wi-Fi I’ve had prior to now was roaming and handover. I typically make or settle for a name within the kitchen or household room whereas my iPhone is related to the closest entry level in that space. If I then stroll into my workplace to proceed the dialog, I would like my telephone to handoff to the entry level in my workplace for the absolute best connection.

Most shopper-grade Wi-Fi gear doesn’t help that. Zyxel presents numerous options that allow and encourage units handy off to the closest entry level with no or little interruption, corresponding to dropped packages. Roaming and handoff are very a lot shopper-dependent, and newer shoppers supply higher and extra seamless help than older shoppers. However the wonderful thing about Zyxel’s implementation is that the corporate has carried out options to make the handoff course of extra dependable for a variety of units by providing:

  • Sensible steering based mostly on sign thresholds
  • Assisted roaming utilizing 802.11okay/v protocols

Technical Specs

NAP102 NAP203 NAP303 WLAN Most Throughput 450 Mbps 900 Mbps 900 Mbps MIMO Channels 2×2 three×three three×three Antennas 1 2 6 Energy-over-Ethernet ● ● ● Variety of LAN Ports 1 2 2 Antenna Achieve 2.four GHz three dBi
5 GHz four dBi Ceiling: 2.four GHz three dBi
5 GHz four dBi
Wall: 2.four GHz four dBi
5 GHz 5 dBi 2.four GHz, four dBi
5 GHz, 6 dBi Mounting Choices Ceiling Ceiling or Wall Ceiling or Wall Worth (incl. 1 Yr Subscription) $129.99 $159.99 $465.00

General, I used to be impressed by the efficiency and ease-of-deployment of the Nebula entry factors.

Zyxel Nebula Licensing

Zyxel Nebula Subscription TiersZyxel Nebula Subscription Tiers

Every Zyxel Nebula units comes with a free license that must be enough for many non-business customers.

In case you want further options, resembling consumer auditing, notifications & alerts, superior VPN options, and so forth., you possibly can improve to knowledgeable license pack. You’ll be able to subscribe to the Skilled Pack on an annual foundation, or you should purchase a lifetime license.

Under are examples of how a lot a Zyxel Nebula Lifetime License prices per gadget for the next gadget varieties:

Gadget Sort Entry Level Lifetime License


Safety Gateway Lifetime License


Ethernet Change Lifetime License


Points Encountered

The Zyxel Nebula platform labored general nicely and met most of my expectations. I did run into a number of points that I needed to level out:

The Energy Cable Of The Safety Gateway Is Lose

The rounded energy plug of the Zyxel NSG200 is extremely unfastened and comes out with solely the slightest pull. I by accident unplugged the gateway a number of occasions by simply lifting it and shifting it to a different place. Zyxel is conscious of the difficulty, and they’re engaged on a repair.

Cellular App Retains Logging Me Out

The cellular app retains logging me out each 24 hours or so. Consequently, I’ve to re-authenticate each time I need to use the app. Whereas that’s solely a minor inconvenience, I hope it doesn’t intrude with the supply of push notifications. However both approach, Zyxel ought to repair that and in addition add TouchID of FaceID on iOS to take away the necessity for username and password.

Random System Disconnects

Through the first few days of testing, I observed that a few of my units, comparable to my iPhone and residential safety cameras would randomly disconnect from Wi-Fi or lose web connectivity. The reason for the latter was as a consequence of my ISPs modem going offline for a minute at four AM. The Wi-Fi disconnects have been possible brought on by configuration modifications I had made.

After the preliminary setup, I clicked by way of the administration console and made modifications with out studying the documentation. You realize, that’s what execs do 🙂

One of many settings I messed with was shopper steering, dynamic channel switching (DCS), and dynamic frequency choice (DFS).

The latter allows an entry level to mechanically change channels if it detects radar or interference that appears like a radar sign. When it does, any related system may go offline for a number of seconds earlier than it might reestablish connectivity utilizing a unique channel. To resolve that drawback, I turned DFS off. Most shopper-grade Wi-Fi shoppers don’t help DFS channels anyway, so turning that setting of gained’t have an effect on me.

I additionally made positive that I enabled “DCS client aware” to stop my entry factors from choosing higher channels whereas shoppers are related to it. You possibly can learn extra about these radio settings within the on-line assist.

Notice that anytime you make modifications to these settings, your APs might drop all shoppers. Most computer systems and smartphones instantly reconnect with none points, however I’ve observed that some IoT units don’t. As an example, a few of my LIFX sensible bulbs don’t reconnect till you energy cycle them. That’s a bit annoying, however an issue LIFX has to repair.


With its Nebula product line, Zyxel presents a simple-to-handle cloud platform and combines superior options and speedy deployment capabilities. In consequence, it’s not solely a superb match for small- and medium-sized companies but in addition for residential environments and prosumers which have excessive calls for on networking gear and Wi-Fi protection.

The place does that depart me? Properly, I already personal a ton of Ubiquiti units, and my funding goes past networking infrastructure. So I’ll persist with what I’ve, however for a brand new deployment, I’d significantly contemplate Zyxel’s Nebula platform and so do you have to.

What networking gear do you employ at your small business or house? And what do you want/dislike about it? Let me know by leaving a remark under!

report this advert