Cisco Meraki MX data sheet

MX

Cloud-Managed
Security and SD-WAN

Overview

MX Series Datasheet

The Cisco Meraki MX are multifunctional security & SD-WAN enterprise appliances with a wide set of capabilities to address multiple
use cases–from an all-in-one device. Organizations of all sizes and across all industries rely on the MX to deliver secure connectivity to
hub locations or multi-cloud environments, as well as application quality of experience (QoE), through advanced analytics with machine
learning.

The MX is 100% cloud-managed, so installation and remote management is truly zero touch, making it ideal for distributed branches,
campuses, and data center locations. Natively integrated with a comprehensive suite of secure network and assurance capabilities,

the MX eliminates the need for multiple appliances. These capabilities include application-based rewalling, content ltering, web
search ltering, SNORT®-based intrusion detection and prevention, Cisco Advanced Malware Protection (AMP), site-to-site Auto VPN,

client VPN, WAN and cellular failover, dynamic path selection, web application health, VoIP health, and more. SD-WAN can be easily
be extended to deliver optimized access to resources in public cloud environments with virtual MX appliances (vMX). Public clouds
supported with vMX include Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform, and Alibaba Cloud.

Advnced qulity of experience
(QoE) nlytics

• End-to-end health of web applications at-a-glance across the
LAN, WAN, and application server

• Machine-learned smart application thresholds autonomously
applied to identify true anomalies based on past
behavioral patterns

Feture-rich unified thret mngement
(UTM) cpbilities

• Application-aware trafc control: bandwidth policies for Layer 7
application types (e.g., block YouTube, prioritize Skype,
throttle BitTorrent)

• Content ltering: CIPA-compliant content lter, safe-search
enforcement (Google/Bing), and YouTube for Schools

• Monitor the health of all MX WAN links, including cellular,
across your entire organization at-a-glance

• Detailed hop-by-hop VoIP performance analysis across
all uplinks

meraki.com

• Intrusion prevention: PCI-compliant IPS sensor using
industry-leading SNORT® signature database from Cisco

• Advanced Malware Protection: le reputation-based protection
engine powered by Cisco AMP

• Identity-based security policies and application management

MX Series Datasheet

Brnch gtewy services

• Built-in DHCP, NAT, QoS, and VLAN management services

• Web caching: accelerates frequently accessed content

• Load balancing: combines multiple WAN links into a single

high-speed interface, with policies for QoS, trafc shaping, and

failover

• Smart connection monitoring: automatic detection of layer
2 and layer 3 outages and fast failover, including option of
integrated LTE Advanced or 3G/4G modems

Industry-leding cloud mngement

• Unied rewall, switching, wireless LAN, and mobile device
management through an intuitive web -based dashboard

• Template-based settings scale easily from small deployments
to tens of thousands of devices

• Role-based administration, congurable email alerts for a
variety of important events, and easily auditable change logs

• Summary reports with user, device, and application usage
details archived in the cloud

Intelligent site-to-site VPN with
Merki SD-WAN

• Auto VPN: automatic VPN route generation using IKE/IPsec
setup. Runs on physical MX appliances and as a virtual
instance within the Amazon AWS or Microsoft Azure
cloud services

• SD-WAN with active / active VPN, policy-based-routing,
dynamic VPN path selection, and support for application-layer

performance proles to ensure prioritization of the applications

types that matter

• Interoperates with all IPsec VPN devices and services

• Automated MPLS to VPN failover within seconds of a
connection failure

• Client VPN: L2TP IPsec support for native Windows, Mac OS X,
iPad and Android clients with no per-user licensing fees

meraki.com

Inside the Merki MX

MX450 shown, features vary by model

MX Series Datasheet

Redundant Power

Reliable, energy efcient
design with eld replaceable

power supplies

Cryptographic Acceleration

Reduced load with hardware
crypto assist

Modular Fans

High-performance front-

to-back cooling with eld

replaceable fans

Additional Memory

For high-performance

content ltering

Enhanced CPU

Layer 3-7 rewall
and traf c shaping

Front of the Cisco Merki MX

MX450 shown, features vary by model

3G/4G Modem Support

Automatic cellular failover

Multicolor Status LED

Monitor device status

Dual 10G WAN Interfaces

Load balancing and SD-WAN

Management Interface

Local device access

1G/10G Ethernet/SFP+ Interfaces

10G SFP+ interfaces for high-speed
LAN connectivity

meraki.com

MX Series Datasheet

Secure Cisco SD-WAN powered by Merki

Secure Cisco SD-WAN powered by Meraki is delivered by the MX appliances. SD-WAN powered by Meraki has helped thousands of
organizations rapidly save costs by reducing their dependence on MPLS without compromising on performance. As enterprises continue
to shift from hub-centric architectures interconnected with VPN to ones that leverage public Internet connectivity, SD-WAN powered by
Meraki delivers advanced analytics with ML to monitor and optimize quality of experience (QoE) for applications, regardless of where
they might be hosted.

Trnsport independence

Leverage more than one uplink of any type with automatic

failover–MPLS, broadband, ber, or cellular.

Ntive security

Integrated with next-gen rewall, content ltering, and Advanced

Malware Protection (AMP) and IDS/IPS informed by Cisco Talos.

Advnced nlytics

Coming soon: at-a-glance health of web applications with ML

thresholds, VoIP, and WAN with predictive analytics.

SS qulity of experience

Manual and performance-based path selection using
advanced analytics.

meraki.com

MX Series Datasheet

Ironcld security

The MX platform has an extensive suite of security features, including IDS/IPS, content ltering, web search ltering, anti-malware,
geo-IP-based rewalling, IPsec VPN connectivity, and Cisco Advanced Malware Protection, while providing the performance required for

modern, bandwidth-intensive networks.

Layer 7 ngerprinting technology lets administrators identify unwanted content and applications, and prevents recreational apps like

BitTorrent from wasting precious bandwidth.

The integrated Cisco SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.2 compliance. The MX

also uses the Webroot BrightCloud® URL categorization database for CIPA/IWF-compliant content ltering, Cisco Advanced Malware

Protection (AMP) engine for anti-malware, AMP Threat Grid Cloud, and MaxMind for geo-IP-based security rules.

Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network

security management and providing peace of mind to
IT administrators.

Orgniztion-Level Thret Assessment with Merki Security Center

Identity-Bsed Policy Mngement Cisco Thret Grid Cloud for Mlicious File Sndboxing

meraki.com

MX Series Datasheet

Cloud-mnged rchitecture

Built on Cisco Meraki’s award-winning cloud architecture, the MX is the industry’s only 100% cloud-managed solution for unied threat
management (UTM) and SD-WAN in a single appliance. MX appliances self-provision, automatically pulling policies and conguration

settings from the cloud. Powerful remote-management tools provide network-wide visibility and control, and enable administration
without the need for on-site networking expertise.

Cloud services deliver seamless rmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide
24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-

consuming training.

For customers moving IT services to a public cloud service, Meraki offers a virtual MX for use in Amazon Web Services and Microsoft
Azure, enabling Auto VPN peering and SD-WAN for dynamic path selection.

Cisco Merki Cloud Mngement Architecture End-to-End Network Visibility nd Troubleshooting

Integrted 802.11c Wve 2 Wireless

The MX67W, MX68W, and MX68CW integrate Cisco Meraki’s

award-winning wireless technology with the powerful MX
network security features in a compact form factor ideal for

branch ofces or small enterprises.

• Dual-band 802.11n/ac Wave 2, 2x2 MU-MIMO with 2
spatial streams

• Unied management of network security and wireless

• Integrated enterprise security and guest access

MX68CW Security & SD-WAN Applince

meraki.com