In this article, we will look at the main difference between the old NSG and the New USG FLEX Series when it comes down to Features and onboarding to Nebula as well as "migrating" from NSG to USG Flex.
First off let's start with the Features
Feature-Overview Nebula
| Features | NSG | USG FLEX |
| Additional Port Grouping | ✔️ | |
| WAN Interface – MTU | ✔️ | |
| WAN Connectivity Check – 2nd IP Check | ✔️ | |
| 1:1 NAT – Allowed IP & Port | ✔️ | |
| VPN Orchestrator (Area) | ✔️ | ✔️ |
| Server and Client VPN | ✔️ | ✔️ |
| Remote Access VPN – Enable both VPN | ✔️ | ✔️ |
| Remote Access VPN – Dynamic DNS | ✔️ | |
| Remote Access VPN – Edit IPSec VPN proposal | ✔️ | |
| IPSec VPN with Google Auth. | ✔️ | |
| Anti-Malware: Scan Mode | ✔️ | |
| Content Filtering – Multiple Profiles | ✔️ | |
| Applications (Page) | ✔️ | ✔️ |
| Security Profile Sync | ✔️ | |
| Remote AP | ✔️ | |
| Collaborative Detection & Response | ✔️ | |
| Google Authentication | ✔️ |
As you can see, we have much more value-added features in the USG Flex and can as well leverage the renowned Anti Maleware features of the ATP Series.
When it comes to "migrating" from the NSG to the USG FLEX we have to redo the onboarding of the device.
Due to the massive difference in the Feature Set, we cannot "convert" the existing NSG config.
To onboard the USG FLEX to Nebula, have a look at the following Article:
How to register a USG FLEX/ATP/USG20(w)-VPN gateway in Nebula Control Center (NCC)
If you have any questions, feel free to contact our Support Team (How to contact Support Team?)