MX Data Sheet

FEATURE-RICH UNIFIED THREAT MANAGEMENT (UTM) CAPABILITIES

• Application-aware traffic control: bandwidth policies for Layer 7 application types (e.g., block YouTube, prioritize Skype, throttle BitTorrent).
• Content filtering: CIPA-compliant content filter, safe-seach enforcement (Google/Bing), and YouTube for Schools.
• Intrusion prevention: PCI-compliant IPS sensor using industry-leading SNORT® signature database from Cisco Sourcefire.
• Advanced Malware Protection: flow-based protection engine powered by Cisco AMP.
• Identity-based security policies and application management.

INTELLIGENT SITE-TO-SITE VPN WITH MERAKI SD-WAN

• Auto VPN: automatic VPN route generation using IKE/IPsec setup. Runs on physical MX appliances and as a virtual instance within the Amazon AWS cloud services.
• SD-WAN with active / active VPN, policy-based-routing, dynamic VPN path selection and support for application-layer performance profiles to ensure prioritization of the applications types that matter.
• Interoperates with all IPsec VPN devices and services.
• Automated MPLS to VPN failover within seconds of a connection failure.
• Client VPN: L2TP IPsec support for native Windows, Mac OS X, iPad and Android clients with no per-user licensing fees.

INDUSTRY-LEADING CLOUD MANAGEMENT

• Unified firewall, switching, wireless LAN, and mobile device management through an intuitive web-based dashboard.
• Template based settings scale easily from small deployments to tens of thousands of devices.
• Role-based administration, configurable email alerts for a variety of important events, and easily auditable change logs.
• Summary reports with user, device, and application usage details archived in the cloud.

BRANCH GATEWAY SERVICES

• Built-in DHCP, NAT, QoS, and VLAN management services.
• Web caching: accelerates frequently accessed content.
• Load balancing: combines multiple WAN links into a single highspeed interface, with policies for QoS, traffic shaping, and failover.
• Smart connection monitoring: automatic detection of layer 2 and layer 3 outages and fast failover, including 3G/4G USB modems.

The MX platform has an extensive suite of security features including IDS/IPS, content filtering, web search filtering, antimalware, geo-IP based firewalling, IPsec VPN connectivity and Cisco Advanced Malware Protection, while providing the performance required for modern, bandwidth-intensive networks.

Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.

The integrated Cisco SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.0 compliance. The MX also uses the Webroot BrightCloud® URL categorization database for CIPA / IWF compliant content-filtering, Cisco Advanced Malware Protection (AMP) engine for anti-malware, AMP Threat Grid Cloud, and MaxMind for geo-IP based security rules.

Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to IT administrators.

Transport independence

Apply bandwidth, routing, and security policies across a variety of mediums (MPLS, Internet, or 3G/4G LTE) with a single consistent, intuitive workflow.

Application optimization

Layer 7 traffic shaping and application prioritization optimize the traffic for mission-critical applications and user experience. 

Intelligent path control

Dynamic policy and performance based path selection with automatic load balancing for maximum network reliability and performance.

Secure connectivity

Integrated Cisco Security threat defense technologies for direct Internet access combined with IPsec VPN to ensure secure communication with cloud applications, remote offices, or datacenters.

Built on Cisco Meraki’s award-winning cloud architecture, the MX is the industry’s only 100% cloud-managed solution for Unified Threat Management (UTM) and SD-WAN in a single appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.

Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24×7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-consuming training.

For customers moving IT services to a public cloud service, Meraki offers a virtual MX for use in an Amazon Web Services, enabling Auto VPN peering and SD-WAN for dynamic path selection.

The MX64W and MX65W integrate Cisco Meraki’s award-winning wireless technology with the powerful MX network security features in a compact form factor ideal for branch offices or small enterprises.

• Dual-band 802.11n/ac, 2×2 MIMO with 2 spatial streams.
• Unified management of network security and wireless.
• Integrated enterprise security and guest access.

The MX65 and MX65W include two ports with 802.3at (PoE+). This built-in power capability removes the need for additional hardware to
power critical branch devices.

• 2 x 802.3at (PoE+) ports capable of providing a total of 60W.
• APs, phones, cameras, and other PoE enabled devices can be powered without the need for AC adapters, PoE converters, or unmanaged PoE switches.

Virtual MX is a virtual instance of a Meraki security appliance, dedicated specifically to providing the simple configuration benefits of site-to-site Auto VPN for customers running or migrating IT services to the public cloud. A virtual MX is added via the Amazon Web Services marketplace and then configured in the Meraki dashboard, just like any other MX. It functions like a VPN concentrator.

• An Auto VPN to a virtual MX is like having a direct Ethernet connection to a private datacenter. The virtual MX can support up to 500 Mbps of VPN throughput, providing ample bandwidth for mission critical IT services hosted in the public cloud, like Active Directory, logging, or file and print services.
• Support for Amazon Web Services (AWS).
• No hardware, only a Meraki license is required.

Accessories

The Cisco Meraki MX84, MX100, MX250, MX450, MX400, and MX600 models support pluggable optics for high-speed backbone connections between wiring closets or to aggregation switches. Cisco Meraki offers several standards-based Gigabit and 10 Gigabit pluggable modules. Each appliance has also been tested for compatibility with several third-party modules.

Note: Advanced security services require Advanced Security license