Nile Service Block (NSB)

NSB Campus Zero Trust

The NSB architecture is based on a Layer 3 segmentation model and per-endpoint isolation of all user and IoT devices. Eliminating L2 VLAN-based policy enforcement radically reduces the complexity of enforcing Zero Trust security policies within the Nile Access Service.

Key capabilities of the Nile Service Block for enabling Campus Zero Trust security:

• Tamper-proof hardware with secure boot and up-to-date patches
• Encrypted management/control planes with mutual validation
• “Default: deny” policy requiring authentication before IP assignment
• No VLANs or ACLs, eliminating lateral movement of malware and other threats
• Layer 3 isolation for every connected device
• Continuous session verification with first-hop security
• Centralized encryption and firewalls for north-south traffic
• Microsegmentation securing east-west traffic

NSB Telemetry

Natively captured network and user data fuels our AI Automation model, driving Nile’s closed-loop automation framework. All telemetry is securely transmitted from the NSB to the Nile Services Cloud for analysis and automated actions. This enables real-time visibility and continuous optimization of Nile Service Blocks across campus and branch deployments.

NSB Telemetry Framework

Sensor telemetry is continuously transmitted from the NSB to the Nile Services Cloud to automate operations, orchestrate remediation or repairs, and report on the status of Nile’s NSB Performance Guarantee. Health data such as Wi-Fi signal quality and environmental data, including power/voltage fluctuations, cabling issues, and RF interference, are used to monitor the status of the NSB.

Three types of sensors transmit real-time network performance and security data.

• Dedicated 3rd Radio AP Sensors are integrated into all Nile access points, and a dedicated radio is used to monitor the Nile Service and wireless medium.

• Virtual Sensors are embedded in NSE devices to monitor infrastructure components such as DHCP, DNS, RADIUS, internet connectivity, and internet application health.

• Physical Sensors are wall-mounted devices connected to the Nile network via Wi-Fi and deployed in network environments when necessary to deliver added fidelity against Nile’s Performance Guarantee. They transmit network and user experience health and performance data every minute to the Nile Services Cloud for continuous analysis.