Instaroute SDWAN Lite 2.0: router fleet management

Many cloud router managers bill each device by the month and meter the data used for remote access. The bill grows with every support session, and a large ATM or meter estate is hard to budget.

SDWAN Lite 2.0 charges one flat price per device. There are no credit packs to top up, no per-GB charges for remote access or VPN, and no cut-off when a licence pool runs dry. Finance gets one number per device for the life of the contract.

Choose where your fleet data lives.

• Nexapp-hosted in India. We run the platform for you on Nexapp's India-resident cloud, with your own console, subdomain and TLS certificate, operated 24×7 by the Nexapp NOC. Your configuration, logs and telemetry stay in India.
• Self-hosted. Install the same container stack on your own virtual machine, data centre or private cloud when policy requires management on your premises. Start on a single VM and add high availability as the fleet grows, without a reinstall or migration.

Retention is configurable. By default the platform keeps 30 days of telemetry and 180 days of alarm history, and every log stream exports to your SIEM as RFC 5424 syslog. Both options help you meet CERT-In's requirement to keep ICT logs in India for 180 days. They also answer the question every bank and payment operator asks first: where does the management and log data live?

NexParth AI answers questions about your fleet from live data. Ask "Which sites lost cellular signal overnight?" in plain language, and it answers by correlating device detail, topology, alarms and signal history from live fleet tools, not from a generic model.

When NexParth finds a problem, it proposes a fix and waits. Nothing changes until an operator approves it, and every action is logged. The flow is: ask → understand → recommend → approve → execute → audit.

NexParth runs on an open-weight model on the customer's own GPU host, grounded in Nexapp product documentation. Fleet data never leaves your deployment.

1. Import. Upload the router serial numbers from your purchase order as a CSV, choose a configuration template and set per-site variables (hostname, APN, VLANs, IPsec peer) in one form.
2. Zero-touch. Routers are shipped straight to site. At power-on, each one calls home, is recognised by its serial number, receives its full configuration and comes online. No engineer needs to configure it on site.
3. Configure. Set policy across about 20 configuration domains, from WAN and dual-SIM rules to VPN and firewall. Review the CLI preview before every push, so you see exactly what will change.
4. Monitor. 23 alarm metrics and 15 ready-made rules, including signal-quality alarms and per-SIM data-plan tracking. Alarms reach your team by email through your own mail server, by webhook or in the console, immediately or as a digest.
5. Update. Roll out signed firmware to a canary group first, then progressively to the fleet, with a health window between waves. Pause, resume or roll back at any wave.
6. Reach any device. Open browser SSH or the router's web UI from the console. Out-of-band device management (OOBDM) works even when the router has no public IP. SD-LAN reaches the cameras, PLCs and ATMs behind the router.

• Multi-tenant MSP console. Manage many customers from one deployment, with each customer's fleet kept separate.
• InstaAccess client. Secure remote access for your engineers to sites and devices over SSL VPN or IPsec VPN, and ZTNA/SSE from the same client.
• IPAM. Plan and track address space across thousands of sites.
• Post-quantum management plane. Console and device connections use post-quantum TLS 1.3 (X25519MLKEM768), with hybrid ML-KEM (NIST FIPS 203) key exchange on management tunnels and post-quantum-signed firmware and configuration. Post-quantum mode is on by default.
• Growth path. When a site needs full SD-WAN, security and SSE, it moves to the Nexapp Controller and an Enterprise X Series edge on the same NexappOS. Start with one router. Grow to full SASE.

Nexapp has deployed 75,000+ devices for 400+ enterprise and banking customers since 2014. In one programme, Nexapp moved 2,500 ATM sites from VSAT to dual-LTE with zero-touch provisioning from day one. Operations are backed by a 24×7 NOC in Pune and one SLA across hardware, firmware and platform.