---
title: "Ericsson NetCloud Service Gateway"
url: "https://cradlepoint.ericsson.com/products/endpoints/netcloud-service-gateway/"
description: "Appliance that enables NetCloud zero trust and SD-WAN"
content_type: "pim_endpoint"
product_code: "Service Gateway"
product_status: "Active"
product_class: "Appliance"
use_cases:
  - "Sites/Locations"
  - "Vehicles"
endpoint_types:
  - "Virtual Appliances"
breadcrumb: "[Home](https://cradlepoint.ericsson.com/) › Products › [Endpoints](https://cradlepoint.ericsson.com/products/endpoints/) › Ericsson NetCloud Service Gateway"
gated: false
---

# Ericsson NetCloud Service Gateway

Enabling zero trust and SD-WAN services

- **Deployment flexibility**
- **Scalability: 250 Mbps – 4 Gbps**
- **Redundancy option**

## Integrate SD-WAN and zero trust security across your Wireless WAN

NetCloud Service Gateway strengthens the security, resilience, and performance of Ericsson wireless and hybrid WANs. It integrates with Cradlepoint IoT, mobile, and branch routers to deliver zero‑trust and SD‑WAN services on‑premises for organizations that prefer not to deploy through Ericsson’s global cloud.

Deploy it in your own compute environment with our virtual instances or leverage our preloaded hardware appliances in your data centers or private cloud environments.

## Benefits

- Augments Ericsson Cradlepoint routers with advanced security and SD-WAN services including Secure Connect, SD-WAN, and Zero Trust Network Access (ZTNA).
- Designed from the ground up to meet zero-trust principles.
- Flexible deployment in a customer-hosted data center, private cloud, or delivered from the cloud.
- Optional redundancy with active / standby configuration.

### NetCloud Services Gateway services

The NetCloud Service Gateway allows organization to deploy zero-trust and SD-WAN services within Ericsson WAN architectures. These services can be deployed independently or together, allowing organizations to modernize their networks at their own pace. A centralized policy engine and unified user experience streamline administration, making it easier for lean IT teams to enhance WAN security and resiliency without sacrificing operational simplicity.

Supported services:

#### Secure Connect

A policy-driven zero trust WAN service that replaces complex VPN and private APN architectures. Secure Connect can be orchestrated cross Ericsson wireless and hybrid WAN environments in less than six minutes.

#### ZTNA

Provides secure remote access to corporate applications and assets through the NetCloud client. Designed to facilitate secure monitoring and maintenance of IoT and OT assets.

#### SD-WAN

Improves the resilience, application quality of experience in multi-WAN environments that include a mix of wired, cellular, Wi-Fi-as-WAN, and low-Earth-orbit (LEO) satellite connections. Intelligent WAN bonding capabilities help ensure performance and reliability for mission-critical and high-bandwidth applications.

![person sitting at a laptop](https://images.contentstack.io/v3/assets/blt2588e757607604a2/blt33ecc77e040a33a7/6a5026ccda4be781fdcd95c1/netcloud_manager-man_with_laptop_wide.jpg)

## Zero trust services, your way

![Customer hosted – virtual appliance](https://images.contentstack.io/v3/assets/blt2588e757607604a2/bltd4dd503bcd7e6350/6a2feda6406e8910a2fe11b8/SASE-customer-hosted-icon-0624.svg)

### Customer hosted – virtual appliance

For organizations preferring local deployment, NetCloud Service Gateway can be deployed on specified servers within the private data center or cloud environment. The full suite of SD-WAN and zero-trust services are all managed through NetCloud Manager.

![Customer hosted – pre-loaded hardware appliance](https://images.contentstack.io/v3/assets/blt2588e757607604a2/blte7c31eff1310f8ef/6a512e73218e7c4751831aa4/SASE-customer-hosted-SG4000-icon-0326.svg)

### Customer hosted – pre-loaded hardware appliance

For organizations preferring local deployment but requiring faster time to service, the pre-loaded hardware appliance is an ideal choice. This option delivers the full capabilities of the NetCloud Service Gateway virtual appliance, without the requirement to stand up and provision compute resources.

![Cloud delivered](https://images.contentstack.io/v3/assets/blt2588e757607604a2/blta0dd128c96e9cd92/6a2feda5fcbf1fec96c502fc/SASE-cloud-delivered-icon-0624.svg)

### Cloud delivered

For cloud-first organizations, the cloud-delivered option delivers zero trust security and SD-WAN through Ericsson’s global cloud and is managed via NetCloud Manager. This deployment option eliminates the need for a local service gateway.

## Virtual appliance

### Licensed capacities

- 250 Mbps
- 500 Mbps
- 1 Gbps
- 2 Gbps
- 4 Gbps

### System requirements

| Deployment | AWS | Azure | VMWare | KVM |
| --- | --- | --- | --- | --- |
| Instance | c5.2xlarge | Standard D8S v3 | ESXi 6.7 U3, vCenter 7.0.3.00500 | Proxmox 8.3.x |
| vCPUs | 8 | 8 | 8 | 8 |
| Memory | 16 GB | 32 GB | 16 GB | 16 GB |
| Minimum disk space | 16 GB | 16 GB | 16 GB | 16 GB |
| Concurrent tunnels | Up to 4,000 | Up to 4,000 | Up to 4,000 | Up to 4,000 |

## Hardware appliance specs

### Licensed capacities

- 500 Mbps
- 1 Gbps
- 2 Gbps
- 4 Gbps

### System capacities

| Deployment | Bare metal server, rack mount 1 RU |
| --- | --- |
| Concurrent tunnels | Up to 4,000 |

### Interfaces

| Processor | Intel 13th Gen Core i7-3700E |
| --- | --- |
| Memory | 64 GB DDR5 ECC UDIMM |
| Ethernet | 2x10GbE SFP+ 1 GbE RJ45 MGMT (Intel i226-LM) 1 GbE RJ45 IPMI (Intel i210) |

### Quick Start Guide

View a brief overview of this device, including what's inside the box and basic setup and installation instructions.

[Read guide](https://docs.cradlepoint.com/r/Configuring-NetCloud-Exchange-Secure-Connect)

### Data Sheet

View the technical specifications for this device, including accessories and warranty information.

[Read specs](/)