Cisco Meraki Cloud Managed Network Security & SD-WAN - Medium Branch

Cisco Meraki MX Security Appliances are ideal for organisations with large numbers of distributed sites. Since the MX is 100% cloud managed, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Hardware

Stateful firewall throughput: 250 Mbps
Recommended maximum clients: 50
Small form factor
Wireless

Dual-band, dual-concurrent: 2.4 & 5 GHz
2-stream 802.11ac and 802.11n, up to 1.2 Gbps
Supports up to 4 SSIDs
Cloud-based centralised management

Managed centrally over the Web
Classifies applications, users and devices
Zero-touch, self-provisioning deployments
Networking and security

Stateful firewall
Auto VPN™ self-configuring site-to-site VPN
Active Directory integration
Identity-based policies
Client VPN (IPsec)
3G / 4G failover via USB modem
Traffic shaping and application management

Layer 7 application visibility and traffic shaping
Application prioritisation
Advanced security services1

Content filtering
Google SafeSearch and YouTube for Schools
Intrusion detection & prevention (IDS/IPS)
Advanced Malware Protection (AMP)
Cisco Threat Grid2
1 Requires Advanced Security License
2 Requires additional licensing for Threat Grid Cloud

Cloud Managed Architecture

Built on Cisco Meraki’s award-winning cloud-managed architecture, the MX is the industry’s only 100% cloud-managed Unified Threat Management appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.

Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-consuming training.



Ironclad Security

The MX platform has an extensive suite of security features including IPS, content filtering, web search filtering, anti-virus / anti-phishing, geo-IP based firewalling and IPsec VPN connectivity, while providing the performance required for modern, bandwidth-intensive networks.

Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.

The integrated Sourcefire SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.0 compliance. The MX also uses the Webroot BrightCloud® URL categorisation database for CIPA / IWF compliant content-filtering, Kaspersky Safestream II® engine for anti-virus / anti-phishing, and MaxMind for geo-IP based security rules.

Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to  IT administrators.

Intelligent WAN Made Simple

Transport independence

Dual WAN ports with load balancing and failover enable the use of MPLS and redundant, commodity Internet connections, providing additional bandwidth and higher reliability.

3G / 4G failover

The Cisco Meraki MX supports 3G/4G service providers globally for WAN connection failover. Web caching temporarily stores video, media, and web documents, lowering bandwidth usage and accelerating the download speed of Internet content.

Application optimisation

Layer 7 traffic shaping, application prioritisation optimise the traffic for mission-critical applications and user experience.

Intelligent path control

Use dynamic VPN path selection to choose the best VPN uplink based on packet loss, latency, and jitter. Define policies for sending the right traffic through the appropriate path (e.g., send voice via MPLS, http via VPN over broadband).

Secure connectivity

Cisco Meraki’s unique auto provisioning site-to-site VPN (Auto VPN) connects branches securely with unmatched simplicity. MX Security Appliances automatically learn VPN parameters needed to establish and maintain VPN sessions using a 128-bit AES encryption. A unique cloud-enabled discovery mechanism enables automatic interconnection of VPN peers and routes across the WAN, and keeps them updated in dynamic IP environments.

Cisco Meraki MX Security Appliances are ideal for organisations with large numbers of distributed sites. Since the MX is 100% cloud managed, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks.

Stateful firewall throughput: 450 Mbps
Recommended maximum clients: 50
Small form factor
10 LAN ports, including 2 PoE+ ports
Cloud-based centralised management

Managed centrally over the Web
Classifies applications, users and devices
Zero-touch, self-provisioning deployments
Networking and security

Stateful firewall
Auto VPN™ self-configuring site-to-site VPN
Active Directory integration
Identity-based policies
Client VPN (IPsec)
3G / 4G failover via USB modem
Traffic shaping and application management

Layer 7 application visibility and traffic shaping
Application prioritisation
Advanced security services1

Content filtering
Google SafeSearch and YouTube for Schools
Intrusion detection & prevention (IDS/IPS)
Advanced Malware Protection (AMP)
Cisco Threat Grid2
1 Requires Advanced Security License
2 Requires additional licensing for Threat Grid Cloud



The MX68 includes two ports with 802.3at (PoE+). This built-in power capability removes the need for additional hardware to power critical branch devices.

2 802.at (PoE+) ports capable of providing a total of 60W
Power APs, phones, cameras, and other PoE enabled devices without the need for AC adapters, PoE converters, or unmanaged PoE switches.
The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Cloud Managed Architecture

Built on Cisco Meraki’s award-winning cloud-managed architecture, the MX is the industry’s only 100% cloud-managed Unified Threat Management appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.

Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-consuming training.

Ironclad Security

The MX platform has an extensive suite of security features including IPS, content filtering, web search filtering, anti-virus / anti-phishing, geo-IP based firewalling and IPsec VPN connectivity, while providing the performance required for modern, bandwidth-intensive networks.

Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.

The integrated Sourcefire SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.0 compliance. The MX also uses the Webroot BrightCloud® URL categorisation database for CIPA / IWF compliant content-filtering, Kaspersky Safestream II® engine for anti-virus / anti-phishing, and MaxMind for geo-IP based security rules.

Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to  IT administrators.

Intelligent WAN Made Simple

Transport independence

Dual WAN ports with load balancing and failover enable the use of MPLS and redundant, commodity Internet connections, providing additional bandwidth and higher reliability.

3G / 4G failover

The Cisco Meraki MX supports 3G/4G service providers globally for WAN connection failover. Web caching temporarily stores video, media, and web documents, lowering bandwidth usage and accelerating the download speed of Internet content.

Application optimisation

Layer 7 traffic shaping, application prioritisation optimise the traffic for mission-critical applications and user experience.

Intelligent path control

Use dynamic VPN path selection to choose the best VPN uplink based on packet loss, latency, and jitter. Define policies for sending the right traffic through the appropriate path (e.g., send voice via MPLS, http via VPN over broadband).

Secure connectivity

Cisco Meraki’s unique auto provisioning site-to-site VPN (Auto VPN) connects branches securely with unmatched simplicity. MX Security Appliances automatically learn VPN parameters needed to establish and maintain VPN sessions using a 128-bit AES encryption. A unique cloud-enabled discovery mechanism enables automatic interconnection of VPN peers and routes across the WAN, and keeps them updated in dynamic IP environments.

Cisco Meraki MX85 1U Firewall Cloud-Managed Security and SD-WAN The Cisco Meraki MX are multifunctional security and SD-WAN enterprise appliances with a wide set of capabilities to address multiple use cases–from an all-in-one device. Organizations of all sizes and across all industries rely on the MX to deliver secure connectivity to hub locations or multi-cloud environments, as well as application quality of experience (QoE), through advanced analytics with machine learning.

The MX is 100% cloud-managed, so installation and remote management is truly zero touch, making it ideal for distributed branches, campuses, and data center locations. Natively integrated with a comprehensive suite of secure network and assurance capabilities, the MX eliminates the need for multiple appliances. These capabilities include application-based firewalling, content filtering, web search filtering, SNORT®-based intrusion detection and prevention, Cisco Advanced Malware Protection (AMP), site-to-site Auto VPN, client VPN, WAN and cellular failover, dynamic path selection, web application health, VoIP health, and more.

SD-WAN can be easily be extended to deliver optimized access to resources in public and private cloud environments with virtual MX appliances (vMX). Public clouds supported with vMX include Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform, and Alibaba Cloud and private cloud support through Cisco NFVIS.

Secure Cisco SD-WAN powered by Meraki Secure Cisco SD-WAN powered by Meraki is delivered by the MX appliances. SD-WAN powered by Meraki has helped thousands of organizations rapidly save costs by reducing their dependence on MPLS without compromising on performance. As enterprises continue to shift from hub-centric architectures interconnected with VPN to ones that leverage public internet connectivity, SD-WAN powered by Meraki delivers advanced analytics with ML to monitor and optimize quality of experience (QoE) for applications, regardless of where they might be hosted.

Advanced quality of experience (QoE) analytics

End-to-end health of web applications at-a-glance across the LAN, WAN, and application server

Machine-learned smart application thresholds autonomously applied to identify true anomalies based on past behavioral patterns

Monitor the health of all MX WAN links, including cellular, across your entire organization

Detailed hop-by-hop VoIP performance analysis across all uplinks

Agile on-premises and cloud security capabilities informed by Cisco Talos

Next-gen layer 7 firewall for identity-based security policies and application management

Advanced Malware Protection with sandboxing; file reputation based protection engine powered by Cisco AMP

Intrusion prevention: PCI-compliant IPS sensor using industry-leading SNORT® signature database from Cisco

Granular and automatically updated category-based content filtering

Other capabilities: SSL decryption/inspection, data loss prevention (DLP), cloud access security broker (CASB), SaaS tenant restrictions, granular app control, file type control

Branch gateway services

Built-in DHCP, NAT, QoS, and VLAN management services

Web caching: accelerates frequently accessed content

Load balancing: combines multiple WAN links into a single high-speed interface, with policies for QoS, traffic shaping, and failover

Smart connection monitoring provides automatic detection of layer 2 and layer 3 outages and fast failover, including the option of integrated LTE Advanced or 3G/4G modems

Industry-leading cloud management

Unified firewall, switching, wireless LAN, and mobile device management through an intuitive web-based dashboard

Template-based settings scale easily from small deployments to tens of thousands of devices

Role-based administration, configurable email alerts for a variety of important events, and easily auditable change logs

Summary reports with user, device, and application usage details archived in the cloud

Intelligent site-to-site VPN with Cisco SD-WAN powered by Meraki

Auto VPN allows automatic VPN route generation using IKE/IKEv2/IPsec setup; runs on physical MX appliances and as a virtual instance in public and private clouds

SD-WAN with active / active VPN, policy-based-routing, dynamic VPN path selection, and support for application-layer performance profiles to ensure prioritization of applications types that matter

Interoperates with all IPsec VPN devices and services

Automated MPLS to VPN failover within seconds of a connection failure

L2TP IPsec remote client VPN included at no extra cost with support for native Windows, Mac OS X, iPad, and Android clients

Support for Cisco AnyConnect remote client VPN(AnyConnect license required)

Specifications

Model MX85 Recommended use cases Small to medium branch with up to 250 users Stateful firewall throughput 1 Gbps Advanced security throughput 750 Mbps Maximum site-to-site VPN throughput 500 Mbps Maximum site-to-site VPN tunnels 200 WAN interfaces
(dedicated) 2x 10GbE SFP
2x GbE RJ45 (1x PoE+)
1x USB (cellular failover) LAN interfaces
(fixed) 8x GbE RJ45
2x GbE SFP Mounting 1U rack Dimensions
(w x d x h) 19" x 9.8" x 1.7"
(484.6 mm x 250 mm x 43.8 mm) Weight 8.2 lbs
(3.7 kg) Power supply Internal 100-127VAC, 200-240VAC
(50/60Hz) Power load
(idle/max) 12W/55W Operating temperature 32°F to 104°F
(0°C to 40°C) Humidity 5% to 95%

Cisco Meraki MX Security Appliances are ideal for organisations with large numbers of distributed sites. Since the MX is 100% cloud managed, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Hardware

Stateful firewall throughput: 450 Mbps
Recommended maximum clients: 50
Small form factor
10 LAN ports, including 2 PoE+ ports
Wireless

Dual-band, dual-concurrent: 2.4 & 5 GHz
2-stream 802.11ac and 802.11n, up to 1.3 Gbps
Supports up to 4 SSIDs
Cloud-based centralised management

Managed centrally over the Web
Classifies applications, users and devices
Zero-touch, self-provisioning deployments
Networking and security

Stateful firewall
Auto VPN™ self-configuring site-to-site VPN
Active Directory integration
Identity-based policies
Client VPN (IPsec)
3G / 4G failover via USB modem
Traffic shaping and application management

Layer 7 application visibility and traffic shaping
Application prioritisation
Advanced security services1

Content filtering
Google SafeSearch and YouTube for Schools
Intrusion detection & prevention (IDS/IPS)
Advanced Malware Protection (AMP)
Cisco Threat Grid2
1 Requires Advanced Security License
2 Requires additional licensing for Threat Grid Cloud



The MX68W integrates Cisco Meraki’s award-winning wireless technology with the powerful MX network security features in a compact form factor ideal for branch offices or small enterprises.

The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Dual-band 802.11n/ac, 2x2 MIMO with 2 spatial streams
Unified management of network security and wireless
Integrated enterprise security and guest access
The MX68W includes two ports with 802.3at (PoE+). This built-in power capability removes the need for additional hardware to power critical branch devices.
2 802.at (PoE+) ports capable of providing a total of 60W
Power APs, phones, cameras, and other PoE enabled devices without the need for AC adapters, PoE converters, or unmanaged PoE switches.
Cloud Managed Architecture

Built on Cisco Meraki’s award-winning cloud-managed architecture, the MX is the industry’s only 100% cloud-managed Unified Threat Management appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.

Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-consuming training.

Ironclad Security

The MX platform has an extensive suite of security features including IPS, content filtering, web search filtering, anti-virus / anti-phishing, geo-IP based firewalling and IPsec VPN connectivity, while providing the performance required for modern, bandwidth-intensive networks.

Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.

The integrated Sourcefire SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.0 compliance. The MX also uses the Webroot BrightCloud® URL categorisation database for CIPA / IWF compliant content-filtering, Kaspersky Safestream II® engine for anti-virus / anti-phishing, and MaxMind for geo-IP based security rules.

Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to  IT administrators.

Intelligent WAN Made Simple

Transport independence

Dual WAN ports with load balancing and failover enable the use of MPLS and redundant, commodity Internet connections, providing additional bandwidth and higher reliability.

3G / 4G failover

The Cisco Meraki MX supports 3G/4G service providers globally for WAN connection failover. Web caching temporarily stores video, media, and web documents, lowering bandwidth usage and accelerating the download speed of Internet content.

Application optimisation

Layer 7 traffic shaping, application prioritisation optimise the traffic for mission-critical applications and user experience.

Intelligent path control

Use dynamic VPN path selection to choose the best VPN uplink based on packet loss, latency, and jitter. Define policies for sending the right traffic through the appropriate path (e.g., send voice via MPLS, http via VPN over broadband).

Secure connectivity

Cisco Meraki’s unique auto provisioning site-to-site VPN (Auto VPN) connects branches securely with unmatched simplicity. MX Security Appliances automatically learn VPN parameters needed to establish and maintain VPN sessions using a 128-bit AES encryption. A unique cloud-enabled discovery mechanism enables automatic interconnection of VPN peers and routes across the WAN, and keeps them updated in dynamic IP environments.

Cisco Meraki MX Security Appliances are ideal for organisations with large numbers of distributed sites. Since the MX is 100% cloud managed, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Hardware

Stateful firewall throughput: 450 Mbps
Recommended maximum clients: 50
Small form factor
2 PoE+ ports
LTE Advanced

While all MX models feature a USB port for 3G/4G failover, the MX68CW includes a SIM slot and internal LTE modem. This integrated functionality removes the need for external hardware and allows for cellular visibility and configuration within the Meraki dashboard. 1 x CAT 6, 300 Mbps LTE modem
1 x Nano SIM slot (4ff form factor)
Wireless

Dual-band, dual-concurrent: 2.4 & 5 GHz
2-stream 802.11ac Wave 2 and 802.11n, up to 1.3Gbps
Supports up to 4 SSIDs
Cloud-based centralised management

Managed centrally over the Web
Classifies applications, users and devices
Zero-touch, self-provisioning deployments
Networking and security

Stateful firewall
Auto VPN™ self-configuring site-to-site VPN
Active Directory integration
Identity-based policies
Client VPN (IPsec)
3G / 4G failover via USB modem
Traffic shaping and application management

Layer 7 application visibility and traffic shaping
Application prioritisation
Advanced security services1

Content filtering
Google SafeSearch and YouTube for Schools
Intrusion detection & prevention (IDS/IPS)
Advanced Malware Protection (AMP)
Cisco Threat Grid2
1 Requires Advanced Security License
2 Requires additional licensing for Threat Grid Cloud



The MX68CW integrates Cisco Meraki’s award-winning wireless technology with the powerful MX network security features in a compact form factor ideal for branch offices or small enterprises.

The MX68CW includes two ports with 802.3at (PoE+). This built-in power capability removes the need for additional hardware to power critical branch devices.
2 802.at (PoE+) ports capable of providing a total of 60W
Power APs, phones, cameras, and other PoE enabled devices without the need for AC adapters, PoE converters, or unmanaged PoE switches.
The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Dual-band 802.11n/ac, 2x2 MIMO with 2 spatial streams
Unified management of network security and wireless
Integrated enterprise security and guest access
Cloud Managed Architecture

Built on Cisco Meraki’s award-winning cloud-managed architecture, the MX is the industry’s only 100% cloud-managed Unified Threat Management appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.

Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-consuming training.

Ironclad Security

The MX platform has an extensive suite of security features including IPS, content filtering, web search filtering, anti-virus / anti-phishing, geo-IP based firewalling and IPsec VPN connectivity, while providing the performance required for modern, bandwidth-intensive networks.

Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.

The integrated Sourcefire SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.0 compliance. The MX also uses the Webroot BrightCloud® URL categorisation database for CIPA / IWF compliant content-filtering, Kaspersky Safestream II® engine for anti-virus / anti-phishing, and MaxMind for geo-IP based security rules.

Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to  IT administrators.

Intelligent WAN Made Simple

Transport independence

Dual WAN ports with load balancing and failover enable the use of MPLS and redundant, commodity Internet connections, providing additional bandwidth and higher reliability.

3G / 4G failover

The Cisco Meraki MX supports 3G/4G service providers globally for WAN connection failover. Web caching temporarily stores video, media, and web documents, lowering bandwidth usage and accelerating the download speed of Internet content.

Application optimisation

Layer 7 traffic shaping, application prioritisation optimise the traffic for mission-critical applications and user experience.

Intelligent path control

Use dynamic VPN path selection to choose the best VPN uplink based on packet loss, latency, and jitter. Define policies for sending the right traffic through the appropriate path (e.g., send voice via MPLS, http via VPN over broadband).

Secure connectivity

Cisco Meraki’s unique auto provisioning site-to-site VPN (Auto VPN) connects branches securely with unmatched simplicity. MX Security Appliances automatically learn VPN parameters needed to establish and maintain VPN sessions using a 128-bit AES encryption. A unique cloud-enabled discovery mechanism enables automatic interconnection of VPN peers and routes across the WAN, and keeps them updated in dynamic IP environments.

Cisco Meraki MX Security Appliances are ideal for organisations with large numbers of distributed sites. Since the MX is 100% cloud managed, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Hardware

Stateful firewall throughput: 450 Mbps
Recommended maximum clients: 50
Small form factor
LTE Advanced

While all MX models feature a USB port for 3G/4G failover, the MX67C includes a SIM slot and internal LTE modem. This integrated functionality removes the need for external hardware and allows for cellular visibility and configuration within the Meraki dashboard. 1 x CAT 6, 300 Mbps LTE modem
1 x Nano SIM slot (4ff form factor)
Cloud-based centralised management

Managed centrally over the Web
Classifies applications, users and devices
Zero-touch, self-provisioning deployments
Networking and security

Stateful firewall
Auto VPN™ self-configuring site-to-site VPN
Active Directory integration
Identity-based policies
Client VPN (IPsec)
3G / 4G failover via USB modem
Traffic shaping and application management

Layer 7 application visibility and traffic shaping
Application prioritisation
Advanced security services1

Content filtering
Google SafeSearch and YouTube for Schools
Intrusion detection & prevention (IDS/IPS)
Advanced Malware Protection (AMP)
Cisco Threat Grid2
1 Requires Advanced Security License
2 Requires additional licensing for Threat Grid Cloud



The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Dual-band 802.11n/ac, 2x2 MIMO with 2 spatial streams
Unified management of network security
Integrated enterprise security and guest access
Cloud Managed Architecture

Built on Cisco Meraki’s award-winning cloud-managed architecture, the MX is the industry’s only 100% cloud-managed Unified Threat Management appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.

Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-consuming training.

Ironclad Security

The MX platform has an extensive suite of security features including IPS, content filtering, web search filtering, anti-virus / anti-phishing, geo-IP based firewalling and IPsec VPN connectivity, while providing the performance required for modern, bandwidth-intensive networks.

Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.

The integrated Sourcefire SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.0 compliance. The MX also uses the Webroot BrightCloud® URL categorisation database for CIPA / IWF compliant content-filtering, Kaspersky Safestream II® engine for anti-virus / anti-phishing, and MaxMind for geo-IP based security rules.

Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to  IT administrators.

Intelligent WAN Made Simple

Transport independence

Dual WAN ports with load balancing and failover enable the use of MPLS and redundant, commodity Internet connections, providing additional bandwidth and higher reliability.

3G / 4G failover

The Cisco Meraki MX supports 3G/4G service providers globally for WAN connection failover. Web caching temporarily stores video, media, and web documents, lowering bandwidth usage and accelerating the download speed of Internet content.

Application optimisation

Layer 7 traffic shaping, application prioritisation optimise the traffic for mission-critical applications and user experience.

Intelligent path control

Use dynamic VPN path selection to choose the best VPN uplink based on packet loss, latency, and jitter. Define policies for sending the right traffic through the appropriate path (e.g., send voice via MPLS, http via VPN over broadband).

Secure connectivity

Cisco Meraki’s unique auto provisioning site-to-site VPN (Auto VPN) connects branches securely with unmatched simplicity. MX Security Appliances automatically learn VPN parameters needed to establish and maintain VPN sessions using a 128-bit AES encryption. A unique cloud-enabled discovery mechanism enables automatic interconnection of VPN peers and routes across the WAN, and keeps them updated in dynamic IP environments.

Cisco Meraki MX Security Appliances are ideal for organisations with large numbers of distributed sites. Since the MX is 100% cloud managed, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks.

Stateful firewall throughput: 450 Mbps
Recommended maximum clients: 50
Small form factor
Cloud-based centralised management

Managed centrally over the Web
Classifies applications, users and devices
Zero-touch, self-provisioning deployments
Networking and security

Stateful firewall
Auto VPN™ self-configuring site-to-site VPN
Active Directory integration
Identity-based policies
Client VPN (IPsec)
3G / 4G failover via USB modem
Traffic shaping and application management

Layer 7 application visibility and traffic shaping
Application prioritisation
Advanced security services1

Content filtering
Google SafeSearch and YouTube for Schools
Intrusion detection & prevention (IDS/IPS)
Advanced Malware Protection (AMP)
Cisco Threat Grid2
1 Requires Advanced Security License
2 Requires additional licensing for Threat Grid Cloud



The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Cloud Managed Architecture

Built on Cisco Meraki’s award-winning cloud-managed architecture, the MX is the industry’s only 100% cloud-managed Unified Threat Management appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.

Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-consuming training.

Ironclad Security

The MX platform has an extensive suite of security features including IPS, content filtering, web search filtering, anti-virus / anti-phishing, geo-IP based firewalling and IPsec VPN connectivity, while providing the performance required for modern, bandwidth-intensive networks.

Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.

The integrated Sourcefire SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.0 compliance. The MX also uses the Webroot BrightCloud® URL categorisation database for CIPA / IWF compliant content-filtering, Kaspersky Safestream II® engine for anti-virus / anti-phishing, and MaxMind for geo-IP based security rules.

Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to  IT administrators.

Intelligent WAN Made Simple

Transport independence

Dual WAN ports with load balancing and failover enable the use of MPLS and redundant, commodity Internet connections, providing additional bandwidth and higher reliability.

3G / 4G failover

The Cisco Meraki MX supports 3G/4G service providers globally for WAN connection failover. Web caching temporarily stores video, media, and web documents, lowering bandwidth usage and accelerating the download speed of Internet content.

Application optimisation

Layer 7 traffic shaping, application prioritisation optimise the traffic for mission-critical applications and user experience.

Intelligent path control

Use dynamic VPN path selection to choose the best VPN uplink based on packet loss, latency, and jitter. Define policies for sending the right traffic through the appropriate path (e.g., send voice via MPLS, http via VPN over broadband).

Secure connectivity

Cisco Meraki’s unique auto provisioning site-to-site VPN (Auto VPN) connects branches securely with unmatched simplicity. MX Security Appliances automatically learn VPN parameters needed to establish and maintain VPN sessions using a 128-bit AES encryption. A unique cloud-enabled discovery mechanism enables automatic interconnection of VPN peers and routes across the WAN, and keeps them updated in dynamic IP environments.

Description

Cisco Meraki MX Security & SD-WAN Appliances are ideal for organizations considering a Unified Threat Managment (UTM) solution, for distributed sites, campuses or datacenter VPN concentration. Since the MX is 100% cloud managed, installation and remote management are simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances.

These services include SD-WAN capabilities, application-based firewalling, content filtering, web search filtering, SNORT® based intrusion detection and prevention, Cisco Advanced Malware Protection (AMP), web caching, 4G cellular failover and more. Auto VPN and SD-WAN features are available on our hardware and virtual appliances, configurable in Amazon Web Services or Microsoft Azure.

Specifications

Software type: License
License quantity: 1 license(s)
License term in years: 10 Years
Compatibility: Cisco Meraki MX67W
Ironclad Security

The MX platform has an extensive suite of security features including IDS/IPS, content filtering, web search filtering, antimalware, geo-IP based firewalling, IPsec VPN connectivity and Cisco Advanced Malware Protection, while providing the performance required for modern, bandwidth-intensive networks. Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.

The integrated Cisco SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.2 compliance. The MX also uses the Webroot BrightCloud® URL categorization database for CIPA / IWF compliant content-filtering, Cisco Advanced Malware Protection (AMP) engine for anti-malware, AMP Threat Grid Cloud, and MaxMind for geo-IP based security rules.

Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to IT administrators.

Cisco Meraki MX Security & SD-WAN Appliances are ideal for organizations considering a Unified Threat Managment (UTM) solution, for distributed sites, campuses or datacenter VPN concentration. Since the MX is 100% cloud managed, installation and remote management are simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances.

These services include SD-WAN capabilities, application-based firewalling, content filtering, web search filtering, SNORT® based intrusion detection and prevention, Cisco Advanced Malware Protection (AMP), web caching, 4G cellular failover and more. Auto VPN and SD-WAN features are available on our hardware and virtual appliances, configurable in Amazon Web Services or Microsoft Azure.

Specifications

Edition type: Enterprise
Software type: License
License quantity: 1 license(s)
License term in years: 7 Years or 10 Years
Compatibility: Cisco Meraki MX67W
Ironclad Security

The MX platform has an extensive suite of security features including IDS/IPS, content filtering, web search filtering, antimalware, geo-IP based firewalling, IPsec VPN connectivity and Cisco Advanced Malware Protection, while providing the performance required for modern, bandwidth-intensive networks.

Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth. The integrated Cisco SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.2 compliance. The MX also uses the Webroot BrightCloud® URL categorization database for CIPA / IWF compliant content-filtering, Cisco Advanced Malware Protection (AMP) engine for anti-malware, AMP Threat Grid Cloud, and MaxMind for geo-IP based security rules.

Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to IT administrators.

Cisco Meraki MX Security Appliances are ideal for organisations with large numbers of distributed sites. Since the MX is 100% cloud managed, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Hardware

Stateful firewall throughput: 450 Mbps
Recommended maximum clients: 50
Small form factor
Wireless

Dual-band, dual-concurrent: 2.4 & 5 GHz
2-stream 802.11ac and 802.11n, up to 1.3 Gbps
Supports up to 4 SSIDs
Cloud-based centralised management

Managed centrally over the Web
Classifies applications, users and devices
Zero-touch, self-provisioning deployments
Networking and security

Stateful firewall
Auto VPN™ self-configuring site-to-site VPN
Active Directory integration
Identity-based policies
Client VPN (IPsec)
3G / 4G failover via USB modem
Traffic shaping and application management

Layer 7 application visibility and traffic shaping
Application prioritisation
Advanced security services1

Content filtering
Google SafeSearch and YouTube for Schools
Intrusion detection & prevention (IDS/IPS)
Advanced Malware Protection (AMP)
Cisco Threat Grid2
1 Requires Advanced Security License
2 Requires additional licensing for Threat Grid Cloud



The MX65W integrates Cisco Meraki’s award-winning wireless technology with the powerful MX network security features in a compact form factor ideal for branch offices or small enterprises.

The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Dual-band 802.11n/ac, 2x2 MIMO with 2 spatial streams
Unified management of network security and wireless
Integrated enterprise security and guest access
Cloud Managed Architecture

Built on Cisco Meraki’s award-winning cloud-managed architecture, the MX is the industry’s only 100% cloud-managed Unified Threat Management appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.

Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-consuming training.

Ironclad Security

The MX platform has an extensive suite of security features including IPS, content filtering, web search filtering, anti-virus / anti-phishing, geo-IP based firewalling and IPsec VPN connectivity, while providing the performance required for modern, bandwidth-intensive networks.

Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.

The integrated Sourcefire SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.0 compliance. The MX also uses the Webroot BrightCloud® URL categorisation database for CIPA / IWF compliant content-filtering, Kaspersky Safestream II® engine for anti-virus / anti-phishing, and MaxMind for geo-IP based security rules.

Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to  IT administrators.

Intelligent WAN Made Simple

Transport independence

Dual WAN ports with load balancing and failover enable the use of MPLS and redundant, commodity Internet connections, providing additional bandwidth and higher reliability.

3G / 4G failover

The Cisco Meraki MX supports 3G/4G service providers globally for WAN connection failover. Web caching temporarily stores video, media, and web documents, lowering bandwidth usage and accelerating the download speed of Internet content.

Application optimisation

Layer 7 traffic shaping, application prioritisation optimise the traffic for mission-critical applications and user experience.

Intelligent path control

Use dynamic VPN path selection to choose the best VPN uplink based on packet loss, latency, and jitter. Define policies for sending the right traffic through the appropriate path (e.g., send voice via MPLS, http via VPN over broadband).

Secure connectivity

Cisco Meraki’s unique auto provisioning site-to-site VPN (Auto VPN) connects branches securely with unmatched simplicity. MX Security Appliances automatically learn VPN parameters needed to establish and maintain VPN sessions using a 128-bit AES encryption. A unique cloud-enabled discovery mechanism enables automatic interconnection of VPN peers and routes across the WAN, and keeps them updated in dynamic IP environments.

Cisco Meraki MX95 1U Firewall Cloud-Managed Security and SD-WAN The Cisco Meraki MX are multifunctional security and SD-WAN enterprise appliances with a wide set of capabilities to address multiple use cases–from an all-in-one device. Organizations of all sizes and across all industries rely on the MX to deliver secure connectivity to hub locations or multi-cloud environments, as well as application quality of experience (QoE), through advanced analytics with machine learning.

The MX is 100% cloud-managed, so installation and remote management is truly zero touch, making it ideal for distributed branches, campuses, and data center locations. Natively integrated with a comprehensive suite of secure network and assurance capabilities, the MX eliminates the need for multiple appliances. These capabilities include application-based firewalling, content filtering, web search filtering, SNORT®-based intrusion detection and prevention, Cisco Advanced Malware Protection (AMP), site-to-site Auto VPN, client VPN, WAN and cellular failover, dynamic path selection, web application health, VoIP health, and more.

SD-WAN can be easily be extended to deliver optimized access to resources in public and private cloud environments with virtual MX appliances (vMX). Public clouds supported with vMX include Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform, and Alibaba Cloud and private cloud support through Cisco NFVIS.

Secure Cisco SD-WAN powered by Meraki Secure Cisco SD-WAN powered by Meraki is delivered by the MX appliances. SD-WAN powered by Meraki has helped thousands of organizations rapidly save costs by reducing their dependence on MPLS without compromising on performance. As enterprises continue to shift from hub-centric architectures interconnected with VPN to ones that leverage public internet connectivity, SD-WAN powered by Meraki delivers advanced analytics with ML to monitor and optimize quality of experience (QoE) for applications, regardless of where they might be hosted.

Advanced quality of experience (QoE) analytics

End-to-end health of web applications at-a-glance across the LAN, WAN, and application server

Machine-learned smart application thresholds autonomously applied to identify true anomalies based on past behavioral patterns

Monitor the health of all MX WAN links, including cellular, across your entire organization

Detailed hop-by-hop VoIP performance analysis across all uplinks

Agile on-premises and cloud security capabilities informed by Cisco Talos

Next-gen layer 7 firewall for identity-based security policies and application management

Advanced Malware Protection with sandboxing; file reputation based protection engine powered by Cisco AMP

Intrusion prevention: PCI-compliant IPS sensor using industry-leading SNORT® signature database from Cisco

Granular and automatically updated category-based content filtering

Other capabilities: SSL decryption/inspection, data loss prevention (DLP), cloud access security broker (CASB), SaaS tenant restrictions, granular app control, file type control

Branch gateway services

Built-in DHCP, NAT, QoS, and VLAN management services

Web caching: accelerates frequently accessed content

Load balancing: combines multiple WAN links into a single high-speed interface, with policies for QoS, traffic shaping, and failover

Smart connection monitoring provides automatic detection of layer 2 and layer 3 outages and fast failover, including the option of integrated LTE Advanced or 3G/4G modems

Industry-leading cloud management

Unified firewall, switching, wireless LAN, and mobile device management through an intuitive web-based dashboard

Template-based settings scale easily from small deployments to tens of thousands of devices

Role-based administration, configurable email alerts for a variety of important events, and easily auditable change logs

Summary reports with user, device, and application usage details archived in the cloud

Intelligent site-to-site VPN with Cisco SD-WAN powered by Meraki

Auto VPN allows automatic VPN route generation using IKE/IKEv2/IPsec setup; runs on physical MX appliances and as a virtual instance in public and private clouds

SD-WAN with active / active VPN, policy-based-routing, dynamic VPN path selection, and support for application-layer performance profiles to ensure prioritization of applications types that matter

Interoperates with all IPsec VPN devices and services

Automated MPLS to VPN failover within seconds of a connection failure

L2TP IPsec remote client VPN included at no extra cost with support for native Windows, Mac OS X, iPad, and Android clients

Support for Cisco AnyConnect remote client VPN(AnyConnect license required)

Specifications

Model MX95 Recommended use cases Medium to large branch with up to 500 users Stateful firewall throughput 2 Gbps Advanced security throughput 1 Gbps Maximum site-to-site VPN throughput 800 Mbps Maximum site-to-site VPN tunnels 500 WAN interfaces
(dedicated) 2x 10GbE SFP+
2x 2.5GbE RJ45 (1x PoE+)
1x USB (cellular failover) LAN interfaces
(fixed) 4x GbE RJ45
2x 10GbE SFP+ Mounting 1U rack Dimensions
(w x d x h) 19.08" x 11.23" x 1.73"
(484.6 mm x 285.2 mm x 44 mm) Weight 6.99 lbs
(3.17 kg) Power supply Internal 100-127VAC, 200-240VAC
(50/60Hz) Power load
(idle/max) 42W/109W Operating temperature 32°F to 104°F
(0°C to 40°C) Humidity 5% to 95%

Cisco Meraki MX105 1U Firewall Cloud-Managed Security and SD-WAN The Cisco Meraki MX are multifunctional security and SD-WAN enterprise appliances with a wide set of capabilities to address multiple use cases–from an all-in-one device. Organizations of all sizes and across all industries rely on the MX to deliver secure connectivity to hub locations or multi-cloud environments, as well as application quality of experience (QoE), through advanced analytics with machine learning.

The MX is 100% cloud-managed, so installation and remote management is truly zero touch, making it ideal for distributed branches, campuses, and data center locations. Natively integrated with a comprehensive suite of secure network and assurance capabilities, the MX eliminates the need for multiple appliances. These capabilities include application-based firewalling, content filtering, web search filtering, SNORT®-based intrusion detection and prevention, Cisco Advanced Malware Protection (AMP), site-to-site Auto VPN, client VPN, WAN and cellular failover, dynamic path selection, web application health, VoIP health, and more.

SD-WAN can be easily be extended to deliver optimized access to resources in public and private cloud environments with virtual MX appliances (vMX). Public clouds supported with vMX include Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform, and Alibaba Cloud and private cloud support through Cisco NFVIS.

Secure Cisco SD-WAN powered by Meraki Secure Cisco SD-WAN powered by Meraki is delivered by the MX appliances. SD-WAN powered by Meraki has helped thousands of organizations rapidly save costs by reducing their dependence on MPLS without compromising on performance. As enterprises continue to shift from hub-centric architectures interconnected with VPN to ones that leverage public internet connectivity, SD-WAN powered by Meraki delivers advanced analytics with ML to monitor and optimize quality of experience (QoE) for applications, regardless of where they might be hosted.

Advanced quality of experience (QoE) analytics

End-to-end health of web applications at-a-glance across the LAN, WAN, and application server

Machine-learned smart application thresholds autonomously applied to identify true anomalies based on past behavioral patterns

Monitor the health of all MX WAN links, including cellular, across your entire organization

Detailed hop-by-hop VoIP performance analysis across all uplinks

Agile on-premises and cloud security capabilities informed by Cisco Talos

Next-gen layer 7 firewall for identity-based security policies and application management

Advanced Malware Protection with sandboxing; file reputation based protection engine powered by Cisco AMP

Intrusion prevention: PCI-compliant IPS sensor using industry-leading SNORT® signature database from Cisco

Granular and automatically updated category-based content filtering

Other capabilities: SSL decryption/inspection, data loss prevention (DLP), cloud access security broker (CASB), SaaS tenant restrictions, granular app control, file type control

Branch gateway services

Built-in DHCP, NAT, QoS, and VLAN management services

Web caching: accelerates frequently accessed content

Load balancing: combines multiple WAN links into a single high-speed interface, with policies for QoS, traffic shaping, and failover

Smart connection monitoring provides automatic detection of layer 2 and layer 3 outages and fast failover, including the option of integrated LTE Advanced or 3G/4G modems

Industry-leading cloud management

Unified firewall, switching, wireless LAN, and mobile device management through an intuitive web-based dashboard

Template-based settings scale easily from small deployments to tens of thousands of devices

Role-based administration, configurable email alerts for a variety of important events, and easily auditable change logs

Summary reports with user, device, and application usage details archived in the cloud

Intelligent site-to-site VPN with Cisco SD-WAN powered by Meraki

Auto VPN allows automatic VPN route generation using IKE/IKEv2/IPsec setup; runs on physical MX appliances and as a virtual instance in public and private clouds

SD-WAN with active / active VPN, policy-based-routing, dynamic VPN path selection, and support for application-layer performance profiles to ensure prioritization of applications types that matter

Interoperates with all IPsec VPN devices and services

Automated MPLS to VPN failover within seconds of a connection failure

L2TP IPsec remote client VPN included at no extra cost with support for native Windows, Mac OS X, iPad, and Android clients

Support for Cisco AnyConnect remote client VPN(AnyConnect license required)

Specifications

Model MX105 Recommended use cases Large branch with up to 750 users Stateful firewall throughput 3 Gbps Advanced security throughput 1.5 Gbps Maximum site-to-site VPN throughput 1 Gbps Maximum site-to-site VPN tunnels 1,000 WAN interfaces
(dedicated) 2x 10GbE SFP+
2x 2.5GbE RJ45 (1x PoE+)
1x USB (cellular failover) LAN interfaces
(fixed) 4x GbE RJ45
2x 10GbE SFP+ Mounting 1U rack Dimensions
(w x d x h) 19.08" x 12.4" x 1.73"
(484.6 mm x 315 mm x 44 mm) Weight 10.74 lbs (4.87 kg)
(with 2 Fans and 2 PSUs) Power supply Internal 100-127VAC, 200-240VAC (50/60Hz)
2 x 150WAC PSU Power load
(idle/max) 53W/123W Operating temperature 32°F to 104°F
(0°C to 40°C) Humidity 5% to 95%

The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Hardware

10G SFP+ WAN interfaces for high-speed connectivity
1G/10G fibre and copper interfaces for flexible LAN connectivity
Stateful firewall throughput: 4 Gbps
Redundant power supplies and fans
Recommended maximum clients: 2,000
Cloud-based centralised management

Managed centrally over the Web
Classifies applications, users and devices
Zero-touch, self-provisioning deployments
Networking and security

Stateful firewall
Auto VPN™ self-configuring site-to-site VPN
Powerful SD-WAN capabilities
Active Directory integration
Identity-based policies
Client VPN (IPsec)
Smart link bonding
Traffic shaping and application management

Layer 7 application visibility and traffic shaping
Application prioritisation
Web caching
Choose WAN uplink based on traffic type
Advanced security services1

Content filtering
Geo-based IP firewall
Google SafeSearch and YouTube for Schools
Intrusion detection & prevention (IDS/IPS)
Advanced Malware Protection (AMP)
Cisco Threat Grid2
1 Requires Advanced Security License
2 Requires additional licensing for Threat Grid Cloud

Cloud Managed Architecture

Built on Cisco Meraki’s award-winning cloud-managed architecture, the MX is the industry’s only 100% cloud-managed Unified Threat Management appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.

Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-consuming training.



Ironclad Security

The MX platform has an extensive suite of security features including IPS, content filtering, web search filtering, anti-virus / anti-phishing, geo-IP based firewalling and IPsec VPN connectivity, while providing the performance required for modern, bandwidth-intensive networks.

Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.

The integrated Sourcefire SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.0 compliance. The MX also uses the Webroot BrightCloud® URL categorization database for CIPA / IWF compliant content-filtering, Kaspersky Safestream II® engine for anti-virus / anti-phishing, and MaxMind for geo-IP based security rules.

Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to  IT administrators.

Intelligent WAN Made Simple

Transport independence

Dual WAN ports with load balancing and failover enable the use of MPLS and redundant, commodity Internet connections, providing additional bandwidth and higher reliability.

3G / 4G failover

The Cisco Meraki MX supports 3G/4G service providers globally for WAN connection failover. Web caching temporarily stores video, media, and web documents, lowering bandwidth usage and accelerating the download speed of Internet content.

Application optimization

Layer 7 traffic shaping, application prioritization optimize the traffic for mission-critical applications and user experience.

Intelligent path control

Use dynamic VPN path selection to choose the best VPN uplink based on packet loss, latency, and jitter. Define policies for sending the right traffic through the appropriate path (e.g., send voice via MPLS, http via VPN over broadband).

Secure connectivity

Cisco Meraki’s unique auto provisioning site-to-site VPN (Auto VPN) connects branches securely with unmatched simplicity. MX Security Appliances automatically learn VPN parameters needed to establish and maintain VPN sessions using a 128-bit AES encryption. A unique cloud-enabled discovery mechanism enables automatic interconnection of VPN peers and routes across the WAN, and keeps them updated in dynamic IP environments.

 

The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Hardware

10G SFP+ WAN interfaces for high-speed connectivity
1G/10G fibre and copper interfaces for flexible LAN connectivity
Stateful firewall throughput: 6 Gbps
Redundant power supplies and fans
Recommended maximum clients: 10,000
Cloud-based centralised management

Managed centrally over the Web
Classifies applications, users and devices
Zero-touch, self-provisioning deployments
Networking and security

Stateful firewall
Auto VPN™ self-configuring site-to-site VPN
Powerful SD-WAN capabilities
Active Directory integration
Identity-based policies
Client VPN (IPsec)
Smart link bonding
Traffic shaping and application management

Layer 7 application visibility and traffic shaping
Application prioritisation
Web caching
Choose WAN uplink based on traffic type
Advanced security services1

Content filtering
Geo-based IP firewall
Google SafeSearch and YouTube for Schools
Intrusion detection & prevention (IDS/IPS)
Advanced Malware Protection (AMP)
Cisco Threat Grid2
1 Requires Advanced Security License
2 Requires additional licensing for Threat Grid Cloud

Cloud Managed Architecture

Built on Cisco Meraki’s award-winning cloud-managed architecture, the MX is the industry’s only 100% cloud-managed Unified Threat Management appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.

Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-consuming training.



Ironclad Security

The MX platform has an extensive suite of security features including IPS, content filtering, web search filtering, anti-virus / anti-phishing, geo-IP based firewalling and IPsec VPN connectivity, while providing the performance required for modern, bandwidth-intensive networks.

Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.

The integrated Sourcefire SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.0 compliance. The MX also uses the Webroot BrightCloud® URL categorization database for CIPA / IWF compliant content-filtering, Kaspersky Safestream II® engine for anti-virus / anti-phishing, and MaxMind for geo-IP based security rules.

Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to  IT administrators.

Intelligent WAN Made Simple

Transport independence

Dual WAN ports with load balancing and failover enable the use of MPLS and redundant, commodity Internet connections, providing additional bandwidth and higher reliability.

3G / 4G failover

The Cisco Meraki MX supports 3G/4G service providers globally for WAN connection failover. Web caching temporarily stores video, media, and web documents, lowering bandwidth usage and accelerating the download speed of Internet content.

Application optimization

Layer 7 traffic shaping, application prioritization optimize the traffic for mission-critical applications and user experience.

Intelligent path control

Use dynamic VPN path selection to choose the best VPN uplink based on packet loss, latency, and jitter. Define policies for sending the right traffic through the appropriate path (e.g., send voice via MPLS, http via VPN over broadband).

Secure connectivity

Cisco Meraki’s unique auto provisioning site-to-site VPN (Auto VPN) connects branches securely with unmatched simplicity. MX Security Appliances automatically learn VPN parameters needed to establish and maintain VPN sessions using a 128-bit AES encryption. A unique cloud-enabled discovery mechanism enables automatic interconnection of VPN peers and routes across the WAN, and keeps them updated in dynamic IP environments.