Cradlepoint NetCloud Manager: What Happens When Your Device is not Licensed?

What is NetCloud Manager?

Cradlepoint NetCloud Manager is a cloud-based network management solution that provides businesses with a single pane of glass for managing and monitoring their Cradlepoint networking devices. The platform allows IT administrators to configure, monitor, and troubleshoot their network devices from a single dashboard, regardless of their location.

NetCloud Manager Licensing States

At its core, Cradlepoint NetCloud Manager is designed to simplify network management for businesses. The platform provides comprehensive features and tools that make it easy to manage and monitor devices, including routers, access points and IoT gateways. Within NetCloud Manager, endpoints are categorized into one of three licensing states: Licensed, Non-Compliant and Unlicensed.

These states determine what features and tools the user has access to with their device(s).

What’s the Difference Between Licensed, Non-Compliant and Unlicensed Endpoints?

It’s important to know about the licensing states within NetCloud Manager in order to use its features correctly.

  • Licensed Devices: An endpoint that has a license to an active NetCloud Manager subscription.
  • Non-Compliant: An endpoint automatically becomes “Non-compliant” when the following occurs:
    • An endpoint (router, gateway, or access point) does not have a compatible purchased license to an active NetCloud Manager subscription.
    • OR, the number of endpoints is greater than the number of active subscription licenses for a given account. It is within the 30-day remediation period following the subscription’s expiration.
  • Unlicensed: If an endpoint does not have a license after the 30-day remediation period it becomes “Unlicensed.” Unlicensed endpoints lose additional functionality after the 30-day remediation period ends, and the NetCloud service locks the endpoint into its last known basic configuration.
    • The count for each license state is visible within NetCloud Manager on the Subscriptions dashboard. Click Account > Subscriptions to view the dashboard.
    • NOTE: NetCloud Manager Administrator permissions at the root level of the account are required to view the Subscriptions dashboard.

Reduced Functionality of Non-Compliant Endpoints

Non-compliant endpoints have a 30-day remediation period during which the licensing issue must be corrected. While in the non-compliant state, endpoints will maintain their current routing capabilities, NetCloud functionality and NetCloud Essentials functionality. They will, however, lose access to certain Advanced Add-On features.

The reduced services a customer will experience with non-compliant endpoints include:

  • Features in the Advanced Add-On plan (including advanced security packages like CP Secure Threat Management, Cradlepoint Secure Web Filter and Zscaler)
  • NetCloud Edge Connector
  • SDK, if applicable.

Refer to the following three lists for details about non-compliant endpoints’ reduced functionality during the 30-day non-compliance remediation period. Information has been included for non-compliant branch and mobile endpoints, non-compliant LTE-Adapter endpoints and non-compliant IoT endpoints.

Non-Compliant Branch and Mobile Endpoints Lose Access to:

  • Branch or Mobile Advanced Plans, including CP Secure Threat Management and CP Secure Web Filter, Zscaler, NetCloud Edge Connector and SDK, if applicable
  • Geoview and dashboards for modem usage, health and clients
  • Remote connect and Out-of-Band Management (OOBM)

Non-Compliant LTE-Adapter Endpoints Lose Access to:

  • LTE-Adapter Advanced Plan, including Remote Connect and Out-of-Band Management (OOBM)
  • Advanced, real-time endpoint and network interface status
  • Dashboards for health and modem data usage

Non-Compliant IoT endpoints lose access to:

  • IoT Advanced Plan features, including advanced VPN and tunneling, Remote Connect, Out-of-Band management (OOBM) and NetCloud Edge Connector
  • Advanced real-time endpoint and network interface status
  • Dashboards for health, client and modem data usage

Reduced Functionality of Unlicensed Endpoints

Once an endpoint is unlicensed following the 30-day remediation period, it loses access to NetCloud Manager. Certain features such as remote connect, client/traffic analytics, and location services, will also be taken away. The device will maintain basic configurations and essential routing capabilities.

An unlicensed endpoint is no longer able to do the following:

  • Be managed in NetCloud Manager (for device or group configurations)
  • Upgrade its NetCloud OS (firmware)
  • Support NetCloud Perimeter
  • Use API and SDK applications
  • Act as a hub in Auto VPN
  • Connect as a spoke
  • Configure changes
  • Run the NetCloud software at full function

For Branch and Mobile Unlicensed endpoints, the following configurations continue to work but are locked:

  • Enterprise routing
  • Some VPN protocols
  • Zone firewall
  • Basic URL web filtering
  • Most LAN protocols
  • Wi-Fi

Across all subscription plans, the following features are removed from unlicensed endpoints:

  • Remote Connect
  • Out-of-Band Management
  • Alerts/Reports/Logs
  • NetCloud API
  • All dashboards in NetCloud Manager, except the Subscription dashboard
  • Real-time diagnostics and troubleshooting (minimized)
  • Full endpoint functionality will be restored when proper licensing is applied

For more information about NetCloud Manager and to ensure your endpoints are in compliance with this service, please contact 5Gstore.