VNS3 Network Platform
Providing all cloud network functions via an observable, flexible virtual appliance. Have one consistent network experience across use-cases and clouds.
With the VNS3 Network Platform you get the right-sized solution for your needs. From streamlined, function-specific cloud controllers providing NAT, Firewall, IPsec VPN, etc. to full blown multicloud networks, each providing better pricing, better support and better visibility than the alternatives.
Cloud Edge Firewall
The VNS3 firewall leaves you in control: enforce layer 3-7 firewall policies, dynamically react with the API, segment your networks, and control user VPN access.
- Firewall & Segment: Segment and secure your networks with the VNS3 firewall.
- API: Configure, recover and react dynamically with the VNS3 API.
- NAT: Stop paying extra for network address translation with a simple VNS3 NAT rule.
Site-to-Site VPN
Connect any on-premise network into your global network. Secure your workforce’s connections at a fraction of the price of our competitors, with access policies enforced at the network level.
- Connect: Extend connectivity with VPN protocols like multicast, NAT-Traversal encapsulation or GRE over IPsec.
- Secure: Encrypt all data-plane traffic — no backdoors, no access to your VNS3.
- Monitor: Listen for tunnel outages and integrate with your monitoring or on-call solution.
Cloud NAT Gateway
VNS3 NATe provides NAT functions at a significantly cheaper price than cloud-provider alternatives — replace your existing NAT Gateways to save money, increase control, and get better support.
- Security: Built on the VNS3 Application Security Controller with a full firewall and plugin system.
- Price: Eliminate the cloud providers’ data-processing tax — reduce NAT Gateway costs by 70%.
- Support: US & UK-based support, available for fast, knowledgeable resolutions.
Cloud WAN
Build a secure global WAN with VNS3. Connect clouds, datacenters and devices securely with a single device, super-charged with a plugin system right on your edge.
- Encrypted Overlay Network: HIPAA and PCI compliance with a TLS-enabled overlay network.
- API Driven: Configure and automate your networks for reproducible infrastructure.
- Transit Hub: Manage your IPsec connections, VLAN peers and overlay networks.
People VPN
Securely connect your workforce. Integrate with your identity provider and enforce policies at your network edge.
- Edge entrypoint for a global, distributed workforce.
- Dynamic routing and policy enforcement at the network edge.
- Integrates with your identity provider for access control.
Network Edge Plugins
VNS3 supports running any containerized function in path, allowing full customization of your network edge — add intrusion detection, load balancing, monitoring and more.
- Datadog: Collect and send VNS3 metrics and telemetry data.
- Nginx: Load balancing or a web application firewall via ModSecurity.
- Suricata: Real-time intrusion detection and prevention.
Transit Gateway
Interconnect your cloud networks, data centers and client sites at a fraction of the cost and complexity. Inline an IDS, WAF, URL filtering, or any network function with the VNS3 plugin system.
- Easy-to-use console and API to connect the modern WAN.
- No pricing calculator needed — multicast, plugins and edge policy enforcement included.
- Inline any network function with the VNS3 plugin system.
Cloud Appliance Pricing
Base Edition
- 30-day Free Trial!
- Production License
- 1 Controller
- 3 Client Connections (Wireguard or OpenVPN)
- 1 IPsec Endpoint
- 32 Security Associations (Tunnels)
- 5 Firewall Objects
- 0 Plugins
- Upgrades available for all feature sets
Lite Edition
- 30-day Free Trial!
- Production License
- 1 Controller
- 10 Client Connections (Wireguard or OpenVPN)
- 4 IPsec Endpoints
- Unlimited Security Associations
- 25 Firewall Objects
- 2 Plugin Slots
- 1 Device Link
- Upgrades available for all feature sets
SME Edition
- 30-day Free Trial!
- Production License
- 2 Controllers
- 25 Client Connections (Wireguard or OpenVPN)
- 8 IPsec Endpoints
- Unlimited Security Associations
- 25 Firewall Objects
- 4 Plugin Slots
- 2 Device Links
- 1 GRE Connection
- 1 Geneve Connection
- 1 Vxlan Connection
- Upgrades available for all feature sets
NATe
- Pay-as-you-go
- Production License
- 1 Controller
- 1 Admin Client Connection
- 0 IPsec Endpoints
- 0 Security Associations
- 5 Firewall Objects
- 0 Plugin Slots
- 0 Device Links
- Upgrades available for all feature sets
People
- 30-day Free Trial!
- Production license
- 1 Controller
- 10 Client Connections(OpenVPN or Wireguard)
- 0 IPsec Endpoints
- 0 Security Associations
- 5 Firewall Objects
- 0 Plugin Slots
- 0 Device Links
- Upgrades available for all feature sets
Frequently Asked Questions
You’ve got questions. We’ve got answers.
How do I get a license?
Different editions of the VNS3 Network Platform virtual appliances are available in Amazon, Azure, Google cloud marketplaces without any need to contact Cohesive Networks (although always happy to hear from you!) We can support other clouds “on demand” (like Oracle, IBM, OVH, Vercel, Hetzner, Proxmox-based, VMware-based) via a number of forms of image sharing.
If a VNS3 image has been shared with you and you need a full license or a feature upgrade the Cohesive Networks support team will provide you a license in minutes. Get in touch.
How do I upgrade my license?
To receive a feature upgrade license contact Cohesive Support. They will need the “license keyset” field from the Licensing Page in the VNS3 appliance Web UI.
Mechanically, upgrading your VNS3 controller’s license by applying the license can be done via the VNS3 console or the API. Head over to our documentation page on upgrading for more.
Does the pricing include VM runtime costs?
No. You will still be liable to your cloud provider for the VNS3 virtual machine runtime costs.
What is an overlay network?
The VNS3 Overlay Network is an optional feature that provides end-to-end encryption, increased performance (in most cloud environments), and IP address mobility across regions and cloud providers.
An overlay network is layered over the native networking layers, but can be independent from all underlying hardware and software. The overlay is dependent on the native networking layers.
When VNS3 first came to market the concept was relatively unknown. You will also hear this type of capability described by other vendors as a “mesh overlay”.
Head over to our support knowledge base for more information on overlay networking.
What are clientpacks?
Clientpacks are the VPN device credentials associated with a specific Overlay Network IP address. They are used to construct a secure connection with VNS3 and the overlay network. The number of clientpacks you have will determine how many people, servers, or devices can directly join the Overlay Network.
We use the general term ‘clientpacks’ to cover both Wireguard and OpenVPN client credentials. Currently a specific Overlay Network only supports one type of credential, but then can be easily linked into one fabric which supports multiple credential types. Cohesive plans to support other client vpn types in future, as well as support multiple simultaneously on the same overlay.
Can you support UDP Multicast and/or UDP Broadcast in any form?
Depending on use-case and throughput demands VNS3 can support multicast and broadcast. However, there is an additional charge of $350 per month per VNS3 controller, although discounts are available.
