Meraki Datasheet MX
Meraki Datasheet MX
Meraki Datasheet MX
Meraki MX
Cloud Managed Security & SD-WAN
Overview
Cisco Meraki MX Security Appliances are ideal for organizations considering a Unified Threat Managment (UTM) solution, for distributed
sites, campuses or datacenter VPN concentration. Since the MX is 100% cloud managed, installation and remote management is simple. The
MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include SD-WAN capabilities,
application-based firewalling, content filtering, web search filtering, SNORT based intrusion detection and prevention, Cisco Advanced Malware
Protection (AMP), web caching, 4G cellular failover and more. Auto VPN and SD-WAN features are available on our hardware and virtual appli-
ances, configurable in Amazon Web Services.
FEATURE-RICH UNIFIED THREAT MANAGEMENT (UTM) INTELLIGENT SITE-TO-SITE VPN WITH MERAKI SD-WAN
CAPABILITIES J
Application-aware traffic control: bandwidth policies for Layer 7 Auto VPN: automatic VPN route generation using IKE/IPsec setup.
application types (e.g., block YouTube, prioritize Skype, throttle Runs on physical MX appliances and as a virtual instance within
BitTorrent). the Amazon AWS cloud services.
Content filtering: CIPA-compliant content filter, safe-seach enforcement SD-WAN with active / active VPN, policy-based-routing, dynamic
(Google/Bing), and YouTube for Schools. VPN path selection and support for application-layer performance
profiles to ensure prioritization of the applications types that matter
Intrusion prevention: PCI-compliant IPS sensor using industry-leading
SNORT signature database from Cisco Sourcefire. Interoperates with all IPsec VPN devices and services.
Advanced Malware Protection: file reputation-based protection Automated MPLS to VPN failover within seconds of a connection
engine powered by Cisco AMP. failure
Identity-based security policies and application management. Client VPN: L2TP IPsec support for native Windows, Mac OS X,
iPad and Android clients with no per-user licensing fees.
Unified firewall, switching, wireless LAN, and mobile device man- Built-in DHCP, NAT, QoS, and VLAN management services.
agement through an intuitive web-based dashboard.
Web caching: accelerates frequently accessed content.
Template based settings scale easily from small deployments to
tens of thousands of devices. Load balancing: combines multiple WAN links into a single high-
speed interface, with policies for QoS, traffic shaping, and failover.
Role-based administration, configurable email alerts for a variety of
important events, and easily auditable change logs. Smart connection monitoring: automatic detection of layer 2 and
layer 3 outages and fast failover, including 3G/4G USB modems.
Summary reports with user, device, and application usage
details archived in the cloud.
INSIDE THE CISCO MERAKI MX
MX450 shown, features vary by model
Additional Memory
For high-performance content
filtering
Cryptographic
Acceleration
Reduced load with Enhanced CPU
hardware crypto assist Layer 3-7 firewall
and traffic shaping
Web Caching
128G SSD disk
3G/4G Modem Support Dual 10G WAN Interfaces 1G/10G Ethernet/SFP+ Interfaces
Automatic cellular failover Load balancing and SD-WAN 10G SFP+ interfaces for high-speed
LAN connectivity
Multicolor Status LED Management Interface
Monitor device status Local device access
2 Cisco Systems, Inc. | 500 Terry A. Francois Blvd, San Francisco, CA 94158 | (415) 432-1000 | sales@meraki.com
Ironclad Security
The MX platform has an extensive suite of security features The integrated Cisco SNORT engine delivers superior intrusion
including IDS/IPS, content filtering, web search filtering, anti- prevention coverage, a key requirement for PCI 3.0 compliance.
malware, geo-IP based firewalling, IPsec VPN connectivity The MX also uses the Webroot BrightCloud URL categorization
and Cisco Advanced Malware Protection, while providing the database for CIPA / IWF compliant content-filtering, Cisco
performance required for modern, bandwidth-intensive networks. Advanced Malware Protection (AMP) engine for anti-malware,
AMP Threat Grid Cloud, and MaxMind for geo-IP based security
Layer 7 fingerprinting technology lets administrators identify rules.
unwanted content and applications and prevent recreational apps
like BitTorrent from wasting precious bandwidth. Best of all, these industry-leading Layer 7 security engines and
signatures are always kept up-to-date via the cloud, simplifying
network security management and providing peace of mind to
IT administrators.
Identity Based Policy Management Cisco Threat Grid Cloud for Malicious File Sandboxing
3 Cisco Systems, Inc. | 500 Terry A. Francois Blvd, San Francisco, CA 94158 | (415) 432-1000 | sales@meraki.com
SD-WAN Made Simple
Software-defined WAN is a new approach to network connectivity that lowers operational costs and improves resource us-
age for multisite deployments to use bandwidth more efficiently. This allows service providers to offer their customers the
highest possible level of performance for critical applications without sacrificing security or data privacy.
Apply bandwidth, routing, and Layer 7 traffic shaping and appli- Dynamic policy and perfor- Integrated Cisco Security
security policies across a vari- cation prioritization optimize the mance based path selection threat defense technologies
ety of mediums (MPLS, Internet, traffic for mission-critical applica- with automatic load balancing for direct Internet access
or 3G/4G LTE) with a single tions and user experience. for maximum network reliability combined with IPsec VPN to
consistent, intuitive workflow and performance ensure secure communication
with cloud applications, remote
offices, or datacenters
Cisco Meraki Cloud Management Architecture End-to-End Network Visibility and Troubleshooting
4 Cisco Systems, Inc. | 500 Terry A. Francois Blvd, San Francisco, CA 94158 | (415) 432-1000 | sales@meraki.com
Integrated 802.11ac Wireless
The MX64W and MX65W integrate Cisco Merakis award-winning
wireless technology with the powerful MX network security features
in a compact form factor ideal for branch offices or small enterprises.
The MX65 and MX65W include two ports with 802.3at (PoE+). This
built-in power capability removes the need for additional hardware to
power critical branch devices.
Meraki vMX100
Virtual MX is a virtual instance of a Meraki security appliance, dedi-
cated specifically to providing the simple configuration benefits of
site-to-site Auto VPN for customers running or migrating IT services
to the public cloud. A virtual MX is added via the Amazon Web Ser-
vices marketplace and then configured in the Meraki dashboard, just
like any other MX. It functions like a VPN concentrator.
5 Cisco Systems, Inc. | 500 Terry A. Francois Blvd, San Francisco, CA 94158 | (415) 432-1000 | sales@meraki.com
Desktop and All-in-one Models
MX64 MX64W MX65 MX65W
Recommended clients 50 50 50 50
Stateful Firewall 250 Mbps 250 Mbps 250 Mbps 250 Mbps
Throughput
Advanced Security 200 Mbps 200 Mbps 200 Mbps 200 Mbps
Throughput
Maximum VPN
100 Mbps 100 Mbps 100 Mbps 100 Mbps
Throughput
Maximum concurrent 50 50 50 50
VPN tunnels
WAN Interfaces
Dedicated 1 x GbE RJ45 1 x GbE RJ45 2 x GbE RJ45 2 x GbE RJ45
1 x USB (cellular failover1) 1 x USB (cellular failover1) 1 x USB (cellular failover1) 1 x USB (cellular failover1)
LAN Interfaces
Fixed 4 x GbE RJ45 4 x GbE RJ45 10 x GbE RJ45 (2 x PoE+) 10 x GbE RJ45 (2 x PoE+)
Web Caching - - - -
Mounting Desktop or Wall mount Desktop or Wall mount Desktop or Wall mount Desktop or Wall mount
Dimensions 9.5 x 5.2 x 1 (239mm 9.5 x 5.2 x 1 (239mm 10.0 x 5.2 x 1 (256mm 10.0 x 5.2 x 1 (256mm
(w x d x h) x 132mm x 25mm) x 132mm x 25mm) x 132mm x 25mm) x 132mm x 25mm)
Weight 1.61 lb (0.7 kg) 3.04 lb (1.4 kg) 1.98 lb (0.9 kg) 3.37 lb (1.53 kg)
Power Supply 18W DC (included) 18W DC (included) 90W DC (included) 90W DC (included)
1
Requires separate cellular modem
2
Interface configurable for WAN or LAN use
6 Cisco Systems, Inc. | 500 Terry A. Francois Blvd, San Francisco, CA 94158 | (415) 432-1000 | sales@meraki.com
Rack mount models
MX84 MX100 MX250 MX400 MX450 MX600
Stateful Firewall 500 Mbps 750 Mbps 4 Gbps 1 Gbps 6 Gbps 1 Gbps
Throughput
Advanced Security 320 Mbps 650 Mbps 2 Gbps 1 Gbps 4 Gbps 1 Gbps
Throughput
Maximum VPN 250 Mbps 500 Mbps 1 Gbps 1 Gbps 2 Gbps 1 Gbps
Throughput
WAN Interfaces
Dedicated 2 x GbE RJ45 1 x GbE RJ45 2 x 10GbE SFP+ 2 x 1GbE RJ45 2 x 10GbE SFP+ 2 x 1GbE RJ45
1 x USB (cellular 1 x USB (cellular 1 x USB (cellular 2 x USB (cellular 1 x USB (cellular 2 x USB (cellular
failover1) failover1) failover1) failover1) failover1) failover1)
LAN Interfaces
Fixed 8 x GbE 8 x GbE 8 x GbE (RJ45) 2 x GbE 8 x GbE (RJ45) 2 x GbE
2 x GbE (SFP) 2 x GbE (SFP) 8 x GbE (SFP) (LAN bypass) 8 x GbE (SFP) (LAN bypass)
8 x 10GbE (SFP+) 8 x 10GbE (SFP+)
Web Caching 1TB 1TB 128GB (SSD) 1TB 128GB (SSD) 4 x 1 TB (RAID)
Power Supply Internal, 100-220V Internal 100-220V Modular 110-220V Internal 100-220V Modular 110-220V Internal 100-220V
50/60Hz AC 50/60Hz AC 50/60Hz AC 50/60Hz AC 50/60Hz AC 50/60Hz AC
2 x 250WAC PSU 2 x 250WAC PSU
Power Load 26W / 32W 30W / 55W 105W / 190W 123W / 215W 105W / 190W 132W / 226W
(idle/max)
Operating 32F to 104F 32F to 104F 32F to 104F 32F to 104F 32F to 104F 32F to 104F
Temperature (0C to 40C) (0C to 40C) (0C to 40C) (0C to 40C) (0C to 40C) (0C to 40C)
7 Cisco Systems, Inc. | 500 Terry A. Francois Blvd, San Francisco, CA 94158 | (415) 432-1000 | sales@meraki.com
Virtual Appliances
vMX100
Interfaces 1 + Virtual
8 Cisco Systems, Inc. | 500 Terry A. Francois Blvd, San Francisco, CA 94158 | (415) 432-1000 | sales@meraki.com
Accessories
The Cisco Meraki MX84, MX100, MX250, MX450, MX400, and
MX600 models support pluggable optics for high-speed backbone
connections between wiring closets or to aggregation switches. Interface Modules for MX400, MX600
Cisco Meraki offers several standards-based Gigabit and 10 Gigabit
pluggable modules. Each appliance has also been tested for com-
patibility with several third-party modules.
IM-8-CU-1GB Cisco Meraki 8 x 1 GbE Copper Interface Module for MX400, MX600
IM-8-SFP-1GB Cisco Meraki 8 x 1 GbE SFP Interface Module for MX400, MX600
IM-2-SFP-10GB Cisco Meraki 2 x 10 GbE SFP+ Interface Module for MX400, MX600
MA-SFP-1GB-SX Cisco Meraki 1 GbE SFP SX Fiber Module (1000BASE-SX, range: 550m) for MX84, MX100, MX250, MX450, MX400, MX600
MA-SFP-1GB-TX Cisco Meraki 1 GbE RJ45 Copper Module (1000BASE-T for twisted pair) for MX84, MX100, MX250, MX450,, MX400, MX600
MA-SFP-10GB-SR Cisco Meraki 10 GbE Short Range SFP+ Module (10GBASE-SR, range: 400m) for MX250, MX450, MX400, MX600
MA-CBL-TA-1M Cisco Meraki 10 GbE Twinax Cable with SFP+ Connectors (10GSFP+Cu, range: 1m) for MX250, MX450, MX400, MX600
MA-CBL-TA-3M Cisco Meraki 10 GbE Twinax Cable with SFP+ Connectors (10GSFP+Cu, range: 3m) for MX250, MX450, MX400, MX600
MA-FAN-18K Meraki 18K RPM system fan for MX250 and MX450
MA-ANT-MX One pair of external dual-band dipole antennas (connector type: RP-SMA) for MX64W or MX65W
Note: Please refer to meraki.com for additional single-mode and multi-mode fiber transceiver modules
POWER CABLES
1 x power cable required for each MX, 2x power cables required for MX250, MX450, MX400, MX600. For US customers, all required power
cables will be automatically included. Customers outside the US are required to order power cords separately.
SK U
MA-PWR-CORD-US
MA-PWR-CORD-EU
MA-PWR-CORD-UK
MA-PWR-CORD-AU
9 Cisco Systems, Inc. | 500 Terry A. Francois Blvd, San Francisco, CA 94158 | (415) 432-1000 | sales@meraki.com
Specifications
Managed via the web using the Cisco Meraki dashboard Content filtering (Webroot BrightCloud CIPA compliant URL database)
Single pane-of-glass into managing wired and wireless networks Web search filtering (including Google / Bing SafeSearch)
Automatic firmware upgrades and security patches Intrusion-prevention sensor (Cisco SNORT based)
Role based administration with change logging and alerts Geography based firewall rules (MaxMind Geo-IP database)
1
Advanced security services require Advanced Security license
2
Monitoring and Reporting Threat Grid services require additional sample pack licensing
Aggregated event logs with instant search Power over Ethernet (MX65 and MX65W only)
User and device quarantine Full lifetime hardware warranty with next-day advanced replacement included.
SD-WAN: Dual active VPN with policy based routing and dynamic path selection
10 Cisco Systems, Inc. | 500 Terry A. Francois Blvd, San Francisco, CA 94158 | (415) 432-1000 | sales@meraki.com
Ordering Guide
To place an order for an MX appliance, pair a specific hardware model with a single license (which includes cloud services, software upgrades
and support). For example, to order an MX64 with 3 years of Advanced Security license, order an MX64-HW with LIC-MX64-SEC-3YR.
Lifetime warranty with advanced replacement is included on all hardware at no additional cost.
M O D EL LI CE N S E DESCRIP TION
MX64-HW LIC-MX64-ENT-1YR Cisco Meraki MX64, 1 year Enterprise License and Support
LIC-MX64-ENT-3YR Cisco Meraki MX64, 3 year Enterprise License and Support
LIC-MX64-ENT-5YR Cisco Meraki MX64, 5 year Enterprise License and Support
LIC-MX64-SEC-1YR Cisco Meraki MX64, 1 year Advanced Security License and Support
LIC-MX64-SEC-3YR Cisco Meraki MX64, 3 year Advanced Security License and Support
LIC-MX64-SEC-5YR Cisco Meraki MX64, 5 year Advanced Security License and Support
MX64W-HW LIC-MX64W-ENT-1YR Cisco Meraki MX64W, 1 year Enterprise License and Support
LIC-MX64W-ENT-3YR Cisco Meraki MX64W, 3 year Enterprise License and Support
LIC-MX64W-ENT-5YR Cisco Meraki MX64W, 5 year Enterprise License and Support
LIC-MX64W-SEC-1YR Cisco Meraki MX64W, 1 year Advanced Security License and Support
LIC-MX64W-SEC-3YR Cisco Meraki MX64W, 3 year Advanced Security License and Support
LIC-MX64W-SEC-5YR Cisco Meraki MX64W, 5 year Advanced Security License and Support
MX65-HW LIC-MX65-ENT-1YR Cisco Meraki MX65, 1 year Enterprise License and Support
LIC-MX65-ENT-3YR Cisco Meraki MX65, 3 year Enterprise License and Support
LIC-MX65-ENT-5YR Cisco Meraki MX65, 5 year Enterprise License and Support
LIC-MX65-SEC-1YR Cisco Meraki MX65, 1 year Advanced Security License and Support
LIC-MX65-SEC-3YR Cisco Meraki MX65, 3 year Advanced Security License and Support
LIC-MX65-SEC-5YR Cisco Meraki MX65, 5 year Advanced Security License and Support
MX65W-HW LIC-MX65W-ENT-1YR Cisco Meraki MX65W, 1 year Enterprise License and Support
LIC-MX65W-ENT-3YR Cisco Meraki MX65W, 3 year Enterprise License and Support
LIC-MX65W-ENT-5YR Cisco Meraki MX65W, 5 year Enterprise License and Support
LIC-MX65W-SEC-1YR Cisco Meraki MX65W, 1 year Advanced Security License and Support
LIC-MX65W-SEC-3YR Cisco Meraki MX65W, 3 year Advanced Security License and Support
LIC-MX65W-SEC-5YR Cisco Meraki MX65W, 5 year Advanced Security License and Support
MX84-HW LIC-MX84-ENT-1YR Cisco Meraki MX84, 1 year Enterprise License and Support
LIC-MX84-ENT-3YR Cisco Meraki MX84, 3 year Enterprise License and Support
LIC-MX84-ENT-5YR Cisco Meraki MX84, 5 year Enterprise License and Support
LIC-MX84-SEC-1YR Cisco Meraki MX84, 1 year Advanced Security License and Support
LIC-MX84-SEC-3YR Cisco Meraki MX84, 3 year Advanced Security License and Support
LIC-MX84-SEC-5YR Cisco Meraki MX84, 5 year Advanced Security License and Support
MX100-HW LIC-MX100-ENT-1YR Cisco Meraki MX100, 1 year Enterprise License and Support
LIC-MX100-ENT-3YR Cisco Meraki MX100, 3 year Enterprise License and Support
LIC-MX100-ENT-5YR Cisco Meraki MX100, 5 year Enterprise License and Support
LIC-MX100-SEC-1YR Cisco Meraki MX100, 1 year Advanced Security License and Support
LIC-MX100-SEC-3YR Cisco Meraki MX100, 3 year Advanced Security License and Support
LIC-MX100-SEC-5YR Cisco Meraki MX100, 5 year Advanced Security License and Support
*Note: For each MX product, additional 7 or 10 year Enterprise or Advanced Security licensing options are also available (ex: LIC-MX100-SEC-7YR).
11 Cisco Systems, Inc. | 500 Terry A. Francois Blvd, San Francisco, CA 94158 | (415) 432-1000 | sales@meraki.com
Ordering Guide
To place an order for an MX appliance, pair a specific hardware model with a single license (which includes cloud services, software upgrades
and support). For example, to order an MX64 with 3 years of Advanced Security license, order an MX64-HW with LIC-MX64-SEC-3YR.
Lifetime warranty with advanced replacement is included on all hardware at no additional cost.
MX250-HW LIC-MX250-ENT-1YR Cisco Meraki MX250, 1 year Enterprise License and Support
LIC-MX250-ENT-3YR Cisco Meraki MX250, 3 year Enterprise License and Support
LIC-MX250-ENT-5YR Cisco Meraki MX250, 5 year Enterprise License and Support
LIC-MX250-SEC-1YR Cisco Meraki MX250, 1 year Advanced Security License and Support
LIC-MX250-SEC-3YR Cisco Meraki MX250, 3 year Advanced Security License and Support
LIC-MX250-SEC-5YR Cisco Meraki MX250, 5 year Advanced Security License and Support
MX400-HW LIC-MX400-ENT-1YR Cisco Meraki MX400, 1 year Enterprise License and Support
LIC-MX400-ENT-3YR Cisco Meraki MX400, 3 year Enterprise License and Support
LIC-MX400-ENT-5YR Cisco Meraki MX400, 5 year Enterprise License and Support
LIC-MX400-SEC-1YR Cisco Meraki MX400, 1 year Advanced Security License and Support
LIC-MX400-SEC-3YR Cisco Meraki MX400, 3 year Advanced Security License and Support
LIC-MX400-SEC-5YR Cisco Meraki MX400, 5 year Advanced Security License and Support
MX450-HW LIC-MX450-ENT-1YR Cisco Meraki MX450, 1 year Enterprise License and Support
LIC-MX450-ENT-3YR Cisco Meraki MX450, 3 year Enterprise License and Support
LIC-MX450-ENT-5YR Cisco Meraki MX450, 5 year Enterprise License and Support
LIC-MX450-SEC-1YR Cisco Meraki MX450, 1 year Advanced Security License and Support
LIC-MX450-SEC-3YR Cisco Meraki MX450, 3 year Advanced Security License and Support
LIC-MX450-SEC-5YR Cisco Meraki MX450, 5 year Advanced Security License and Support
MX600-HW LIC-MX600-ENT-1YR Cisco Meraki MX600, 1 year Enterprise License and Support
LIC-MX600-ENT-3YR Cisco Meraki MX600, 3 year Enterprise License and Support
LIC-MX600-ENT-5YR Cisco Meraki MX600, 5 year Enterprise License and Support
LIC-MX600-SEC-1YR Cisco Meraki MX600, 1 year Advanced Security License and Support
LIC-MX600-SEC-3YR Cisco Meraki MX600, 3 year Advanced Security License and Support
LIC-MX600-SEC-5YR Cisco Meraki MX600, 5 year Advanced Security License and Support
*Note: For each MX product, additional 7 or 10 year Enterprise or Advanced Security licensing options are also available (ex: LIC-MX100-SEC-7YR).
12 Cisco Systems, Inc. | 500 Terry A. Francois Blvd, San Francisco, CA 94158 | (415) 432-1000 | sales@meraki.com