Working with a group of distributed Edge Controllers (VSM), the CSP is the cloud controller of Abloomy’s private cloud solution, empowered by our Smart-Edge technology. By pushing cloud-managed functions to Edge Controllers (VSM), it provides customers with end-to-end solutions that enable them to keep up with the trend of digital transformation in the age of cloud computing. These cloud-managed functions include WiFi, routing, NAT, firewalls, NAC, and etc. In WiFi application scenarios, CSP provides one-stop solutions which cover network management and optimization, security, portal, authentication and WiFi marketing functions.

With the distributed architecture of CSP and VSM, Abloomy provides customers with large-capacity and cross-regional networks. Plug-and-play devices simplify deployment and setup, deep visibility and self-optimization guarantee networks performance and stability, and role-based network access control and anti-attack functions ensure security. CSP also offers abundant WiFi marketing tools.



Both Abloomy APs and VSMs support zero-touch provisioning. When an AP or VSM registers in the cloud platform, the platform will push predefined configurations to the device, avoiding on-site work.

Scalable Network Architecture

Abloomy adapts a distributed WiFi network architecture based on our Smart-Edge technology, creating a flexible, modularized management system for both network functions and applications. The distributed VSM layer can be scaled seamlessly and automatically creates N+N redundancy backups.

RF Channel Optimization

Interference in WLAN radio affects AP’s normal operation. The Abloomy platform optimizes AP’s radio allocation through adaptive channel selection, avoiding interference from neighboring APs.

Seamless Roaming

The Abloomy centralized architecture easily allows roaming. The CSP series controller supports roaming across subnets without re-authentication.

Multiple Authentication Methods

Multiple authentication methods are included, such as Facebook, Google+, 802.1X, username and password, non-authentication, automatic authentication and more. After the first SMS/Social media authentication, subsequent access does not require authentication, which not only improves the user experience, but also saves on SMS expenses.

URL Access Control

The VSM can capture and filter browsed URL information based on firewall policies from the CSP.

Role Based Access Control

Role based access control is the main advantage of Abloomy products. The platform can define different levels of access roles and authorize differentiated services for the users.

Flexible Data Forwarding

Based on the policies, the data forwarding can be done either locally by AP or centrally by VSM.

Ads and Content Operation

Abundant portal templates are available for customers to customize their ad page. The customer can use single page or multi-page portals to present more information.          
By caching content locally, customers can save bandwidth by embedding content URL links in the portal page and enabling their Wi-Fi users to locally access videos, articles, and apps, creating a much better user experience. Meanwhile, the backend system will record statistics on viewed and downloaded content to better understand user preferences and fine-tune marketing strategies.

Social Media Operation

Social media integration improves the interactions and relationships between businesses and customers, building up long-term marketing strategies.

Hardware Compare

AppearanceVSM_VSM3000(400x400) .png
Interface6*10/100/1000 Base-T Ethernet ports
1*console port
2*USB 2.0 ports
AP License Options8, 16, 32, 64, 128, 256, 512
VSM limits16
AP limits512
Disk64G SSD
Power Supply110-240V AC
Operating temperature0°C~40°C (32°F~104°F)
Storage temperature-20°C~80°C (-68°F~176°F)
Humidity10% ~ 90%, non-condensing



AC Discovery

Broadcast discovery
DHCP option 43 discovery
DNS discovery
Configure manually


Support AP and probe mode
Support manual / automatic channel selection
Configure RF TX/RX manually
Configure channel size 20M/40M/80M manually
Support manual /auto TX power configuration

Data Forwarding Mode

Central forwarding mode
Distributed NAT forwarding mode
Local transparent forwarding mode
Support each SSID with Local forwarding VLAN
Concurrent local and central forwarding mode


L2 roaming between APs

Network Protocol

Policy routing
DHCP server
IGMP Snooping
OSPF dynamic routing
DHCP relay
DHCP Relay to multiple servers


Open system
Preshare PSK
WPA2 encryption
Combined Encryptions


Radius Server
Built-in role-based access control
User’s MAC address based authentication
802.1X authentication
Social media authentication (Facebook, Google+, etc.)
SMS authentication
Customer’s APP authentication
UMS ( Authentication & Accounting & Authorization)
Support multiple authentications concurrently


Hidden SSID, Rouge AP detection
User isolation and Network isolation
Url capture
Black/white list
MAC and IP address binding
DoS attack protection

Access Management

Automatically disconnect idle traffic user
Role-based access control
Time-based access control
Location-based access control
Combine Role/Time/Location based access control

Load Balance

Load balance based on user
Load balance based on traffic


Stateful Firewall


Service types can be configurable

Content Platform

APP distributed as a content
Ads can be inserted in the content page
Support localized content storage
Support remote content redirection
Historical record of content downloads

Ads Module

Multiple built-in Portal templates
Ads browsing PV/UV statistics
Historical Ads reports

Logs and Alerts

Local logs, external log server
Device state alerts, email alerts

System Management

WEB, SSH, Console