White label SD-WAN for service providers: India's multi-tenant platform
Sell managed SD-WAN, firewall, ZTNA and 4G/5G connectivity under your name. You get a multi-tenant console, a subdomain per customer, flat per-device pricing and an Indian OEM behind you.
Key facts
- Multi-tenancy
- MSP console with organisations nested to any depth and customer-scoped roles; multi-tenant REST API with OpenAPI
- Your brand
- Dedicated subdomain, TLS certificate and console per customer; the service carries your name and SLA
- Catalogue
- SD-WAN (Nexapp Controller), NGFW, SSE/ZTNA, Instaroute 4G/5G routers, Enterprise Wi-Fi, all on NexappOS
- Pricing
- Flat per-device pricing for router management, no data metering; licence pools per customer
- Scale
- Up to 100,000 devices per SDWAN Lite 2.0 deployment; 75,000+ Nexapp devices deployed
- Hosting
- Nexapp-hosted in India, or self-hosted in your data centre
- Last mile
- Nexapp Connectivity Suite: 10,000+ service providers across 100,000+ pin codes
- Operations backing
- 24×7 NOC in Pune; country-wide field operations; one SLA across hardware, firmware and platform
- Make in India
- Class-I local supplier under the PPP-MII Order; local-content declaration and certificate with each bid
- Customers
- Jio, BSNL, Wipro, Atos
What white label SD-WAN means, and what to check
Your customers buy your service. They should see your name, not your supplier's. A white label platform lets you run many customers as your own managed service, with your SLA, your support desk and your commercial terms. Before you choose one, check these points.
| Question to ask a platform vendor | What you get from Nexapp |
|---|---|
| Can I run many customers from one console, with strict separation? | Yes. Multi-tenant MSP console, organisations nested to any depth, customer-scoped roles |
| Does each customer get its own login and address? | Yes. A dedicated subdomain, TLS certificate and console per customer |
| Can I connect billing, ticketing and my NMS? | Yes. Multi-tenant REST API with OpenAPI |
| Does my platform cost rise when customer traffic grows? | No. Router management is flat per device, with no data metering |
| Where does the platform run? | Nexapp-hosted in India, or self-hosted on your infrastructure |
| Is there a path from one router to full SASE? | Yes. Routers, SD-WAN, NGFW and SSE/ZTNA run on one operating system family from one vendor |
| Who backs me at 3 am? | Nexapp's 24×7 NOC in Pune, with field teams across India, behind your service desk |
| Is the encryption ready for post-quantum rules? | Yes. Hybrid ML-KEM key exchange (NIST FIPS 203) and ML-DSA authentication on tunnels, post-quantum TLS 1.3 on consoles and APIs |
Services you can sell on Nexapp
Start with the service your customers already ask for, then add the next one. Every service below runs on the same platform and the same firmware.
| Service you sell | Built on | Typical buyer |
|---|---|---|
| Managed 4G/5G internet and backup | Instaroute routers with dual-SIM arbitration, managed from SDWAN Lite 2.0 | Retail chains, ATMs, small offices |
| Managed SD-WAN | Nexapp Controller with application-aware steering, SLA tiers and sub-second failover | Enterprises replacing MPLS |
| Managed firewall | NGFW on the same edge: IPS, antivirus, web filtering, application control | Branch networks, SMBs |
| Managed ZTNA and SSE | Nexapp SSE: ZTNA, SWG, CASB, DLP, FWaaS and sandbox, multi-tenant | Firms retiring VPNs |
| Managed IoT and M2M connectivity | Industrial Instaroute routers with Modbus, DNP3 and IEC 60870-5-101/104 | Utilities, manufacturers, smart-city projects |
| Network as a Service | Links, hardware, security, deployment and NOC on one per-site subscription | Customers that want one bill and one SLA |
| Managed Wi-Fi | Staff and guest Wi-Fi with the InstaWave captive portal | Stores, hotels, campuses |
For telcos and ISPs: bundle the edge with your connectivity
Your link is only half of what an enterprise buys. Bundle a managed, secure edge with your connectivity, and you sell a service rather than a pipe. Instaroute routers support dual-SIM arbitration by signal, latency or data usage, so your links stay primary and failover stays under your control. APN settings are configured per SIM. You can offer managed SASE from an Indian OEM, hosted in India or on your own infrastructure. For Network as a Service, the Nexapp Connectivity Suite adds last-mile links from 10,000+ service providers across 100,000+ pin codes. That lets you serve sites outside your own footprint under one contract.
For MSPs and IT services firms: run more customers with the same team
Margins depend on how many sites one engineer can run. The multi-tenant console, zero-touch provisioning and canary firmware rollout let a small team manage large estates. Out-of-band management reaches every router without a public IP, so many faults are fixed without a site visit. NexParth AI answers fleet questions from live data, proposes a fix and waits for your approval before acting. It runs on an open-weight model on your own GPU host. See NexParth AI.
- Licence pools let you allocate, trial, extend and resize licences per customer.
- Hands-on onboarding of your first customer: we set up templates, alarms and reports with you, then hand the estate to your operations team.
- 25+ scheduled reports, including SLA violation, link availability and device uptime, delivered as PDF, XLSX or CSV.
For system integrators: OEM support in tenders
Bank and PSU tenders set gates that an SI cannot clear alone. Nexapp engineers help with solution design, bills of quantities and compliance annexures. Registered partners get a manufacturer authorisation form (MAF) for each bid. Nexapp is a Class-I local supplier under the Public Procurement (Preference to Make in India) Order, so you get a local-content declaration and certificate with each public-sector bid, plus certificate packs. Read Class-I local supplier and PPP-MII for network equipment. See certifications and government and PSU.
Rules that apply to service providers
Running a managed network service brings duties of its own. Check these with your legal team. We help with evidence and controls.
| Rule | What it means for you | How Nexapp helps |
|---|---|---|
| Trusted sources (DoT licence amendments, 2021) | Telecom licensees may connect only trusted products from trusted sources; the Trusted Telecom Portal has been live since 15 June 2021 | We state trusted-source status only for products listed on the portal. Ask us before you order for a licensed network |
| TEC MTCTE (portal) | Notified telecom equipment needs an MTCTE certificate before sale in India | Certificate 244903206 covers nine Instaroute router models, valid to March 2035 |
| CERT-In Directions (2022) | Report incidents within 6 hours; keep ICT logs for 180 days in India. Data centre, VPS, cloud and VPN service providers must keep subscriber records for 5 years or longer | Logs hosted in India or on your infrastructure, with configurable retention and syslog export; take legal advice on whether the records rule applies to your service |
| DPDP Rules 2025 | From May 2027, your customers must apply security safeguards; you may process their data on their behalf | Encryption on every tunnel, identity-based access and configurable log retention |
How the partnership works
- Apply. Tell us your business model, regions and target industries on the partner page.
- Qualify. A Nexapp partner manager reviews fit and agrees a tier.
- Enable. Your engineers train on NexappOS, the Nexapp Controller and SDWAN Lite 2.0. You get a partner console with demo routers and a licence pool.
- Sell. Register deals, request MAFs and bring Nexapp engineers into design reviews.
- Run. Deploy zero-touch and run customers from the multi-tenant console, with the Pune NOC behind you.
Frequently asked questions
What is white label SD-WAN?
It is an SD-WAN platform that a service provider runs as its own managed service, under its own name and SLA.
With Nexapp, each customer gets a dedicated subdomain, TLS certificate and console, and you run all of them from one multi-tenant MSP console.
Can an ISP offer managed SD-WAN on Nexapp?
Yes. Bundle Instaroute 4G/5G routers and the Nexapp Controller with your connectivity.
Dual-SIM arbitration keeps your links primary, and you can add NGFW and SSE/ZTNA later on the same platform.
How is the platform priced for MSPs?
Router management on Instaroute SDWAN Lite 2.0 is flat per device, with no data metering.
Your platform cost does not rise when your customers' traffic grows. Licence pools let you allocate and resize per customer.
Can we host the platform in our own data centre?
Yes. The Nexapp Controller and SDWAN Lite 2.0 can be self-hosted on your infrastructure, or hosted by Nexapp in India.
What is NaaS for telcos?
Network as a Service bundles links, hardware, SD-WAN and security, site deployment and NOC operations on one per-site subscription.
Nexapp adds last-mile links from 10,000+ service providers across 100,000+ pin codes, so you can serve sites outside your own network.
Who supports our customers after go-live?
You own the customer relationship and run the service desk.
Nexapp's 24×7 NOC in Pune and field teams back you under one SLA across hardware, firmware and platform.
Which service providers use Nexapp?
Jio, BSNL, Wipro and Atos are Nexapp customers.
Add a managed SD-WAN and SASE business under your own name, with an Indian OEM behind every deployment.
24×7 NOC in Pune · 75,000+ devices deployed · 400+ enterprise and banking customers since 2014.