Product Description
The Cisco Meraki MX67-HW is a compact, cloud-managed security and SD-WAN appliance for small branches, retail sites and offices with up to 50 users. It brings firewalling, traffic shaping, VPN, content filtering and threat protection into one desktop or wall-mountable device, managed through the Meraki dashboard. A separate Meraki licence is required for activation and ongoing management.
Key Features
700 Mbps firewall throughput
300 Mbps site-to-site VPN throughput
Recommended for up to 50 users
2x GbE WAN ports, with one usable as WAN or LAN
4x GbE LAN ports, with one usable as WAN or LAN
Meraki Auto VPN, client VPN and SD-WAN support
Layer 7 firewalling, content filtering, IDS/IPS and malware protection
Cloud management through the Cisco Meraki dashboard
Desktop or wall-mount deployment
Benefits
Simple to deploy at small sites without specialist on-site configuration
Combines firewall, router, VPN and SD-WAN functions in one appliance
Cloud dashboard gives central visibility across multiple locations
Auto VPN helps link branch sites securely without complex setup
Compact form factor works well where rack space is unavailable
Flexible WAN/LAN ports support simple failover or dual-WAN designs
Product Comparison
Cisco Meraki MX67C - same core appliance, but with built-in cellular connectivity for sites that need integrated mobile failover.
Cisco Meraki MX68 - similar small-branch performance, but with more LAN ports, making it better for sites with additional wired devices.
Cisco Meraki MX85 - the step-up rackmount model for larger branches, offering higher throughput, more users and more connectivity.
Sizing and Capacity
The MX67 is a small desktop or wall-mount appliance for offices and branch sites rather than rack-based deployments. Cisco lists the appliance at up to 50 users, with 700 Mbps firewall throughput and 300 Mbps site-to-site VPN throughput. It is best suited to modest network loads, small numbers of connected devices and sites where centralised Meraki management is more important than high port density.
Who It’s For
Small businesses, branch offices, retail locations, clinics and professional services firms that need centrally managed security and VPN connectivity without installing a larger rackmount firewall.
FAQs
Is a Meraki licence included? No. A separate Cisco Meraki licence is required to activate and manage the MX67.
Does the MX67 include Wi-Fi? No. For integrated wireless, look at the MX67W.
Does it have built-in cellular? No. For built-in cellular failover, choose the MX67C.
Can it support dual WAN? Yes. The MX67 includes flexible ports that can support WAN/LAN use depending on configuration.
Is it rack-mountable? Not as standard. It is designed for desktop or wall-mount installation.
As per Cisco's UK policy we are unable to ship any Cisco products to any address other than a company registered address as shown on Companies House.
License Type: |
Cisco Meraki MX Security Appliances are ideal for organisations with large numbers of distributed sites. Since the MX is 100% cloud managed, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks.
Stateful firewall throughput: 450 Mbps
Recommended maximum clients: 50
Small form factor
10 LAN ports, including 2 PoE+ ports
Cloud-based centralised management
Managed centrally over the Web
Classifies applications, users and devices
Zero-touch, self-provisioning deployments
Networking and security
Stateful firewall
Auto VPN™ self-configuring site-to-site VPN
Active Directory integration
Identity-based policies
Client VPN (IPsec)
3G / 4G failover via USB modem
Traffic shaping and application management
Layer 7 application visibility and traffic shaping
Application prioritisation
Advanced security services1
Content filtering
Google SafeSearch and YouTube for Schools
Intrusion detection & prevention (IDS/IPS)
Advanced Malware Protection (AMP)
Cisco Threat Grid2
1 Requires Advanced Security License
2 Requires additional licensing for Threat Grid Cloud
The MX68 includes two ports with 802.3at (PoE+). This built-in power capability removes the need for additional hardware to power critical branch devices.
2 802.at (PoE+) ports capable of providing a total of 60W
Power APs, phones, cameras, and other PoE enabled devices without the need for AC adapters, PoE converters, or unmanaged PoE switches.
The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.
Cloud Managed Architecture
Built on Cisco Meraki’s award-winning cloud-managed architecture, the MX is the industry’s only 100% cloud-managed Unified Threat Management appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.
Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-consuming training.
Ironclad Security
The MX platform has an extensive suite of security features including IPS, content filtering, web search filtering, anti-virus / anti-phishing, geo-IP based firewalling and IPsec VPN connectivity, while providing the performance required for modern, bandwidth-intensive networks.
Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.
The integrated Sourcefire SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.0 compliance. The MX also uses the Webroot BrightCloud® URL categorisation database for CIPA / IWF compliant content-filtering, Kaspersky Safestream II® engine for anti-virus / anti-phishing, and MaxMind for geo-IP based security rules.
Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to IT administrators.
Intelligent WAN Made Simple
Transport independence
Dual WAN ports with load balancing and failover enable the use of MPLS and redundant, commodity Internet connections, providing additional bandwidth and higher reliability.
3G / 4G failover
The Cisco Meraki MX supports 3G/4G service providers globally for WAN connection failover. Web caching temporarily stores video, media, and web documents, lowering bandwidth usage and accelerating the download speed of Internet content.
Application optimisation
Layer 7 traffic shaping, application prioritisation optimise the traffic for mission-critical applications and user experience.
Intelligent path control
Use dynamic VPN path selection to choose the best VPN uplink based on packet loss, latency, and jitter. Define policies for sending the right traffic through the appropriate path (e.g., send voice via MPLS, http via VPN over broadband).
Secure connectivity
Cisco Meraki’s unique auto provisioning site-to-site VPN (Auto VPN) connects branches securely with unmatched simplicity. MX Security Appliances automatically learn VPN parameters needed to establish and maintain VPN sessions using a 128-bit AES encryption. A unique cloud-enabled discovery mechanism enables automatic interconnection of VPN peers and routes across the WAN, and keeps them updated in dynamic IP environments.
As per Cisco's UK policy we are unable to ship any Cisco products to any address other than a company registered address as shown on Companies House.
License Type: |
Cisco Meraki MX Security Appliances are ideal for organisations with large numbers of distributed sites. Since the MX is 100% cloud managed, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.
Hardware
Stateful firewall throughput: 450 Mbps
Recommended maximum clients: 50
Small form factor
Wireless
Dual-band, dual-concurrent: 2.4 & 5 GHz
2-stream 802.11ac and 802.11n, up to 1.3 Gbps
Supports up to 4 SSIDs
Cloud-based centralised management
Managed centrally over the Web
Classifies applications, users and devices
Zero-touch, self-provisioning deployments
Networking and security
Stateful firewall
Auto VPN™ self-configuring site-to-site VPN
Active Directory integration
Identity-based policies
Client VPN (IPsec)
3G / 4G failover via USB modem
Traffic shaping and application management
Layer 7 application visibility and traffic shaping
Application prioritisation
Advanced security services1
Content filtering
Google SafeSearch and YouTube for Schools
Intrusion detection & prevention (IDS/IPS)
Advanced Malware Protection (AMP)
Cisco Threat Grid2
1 Requires Advanced Security License
2 Requires additional licensing for Threat Grid Cloud
The MX65W integrates Cisco Meraki’s award-winning wireless technology with the powerful MX network security features in a compact form factor ideal for branch offices or small enterprises.
The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.
Dual-band 802.11n/ac, 2x2 MIMO with 2 spatial streams
Unified management of network security and wireless
Integrated enterprise security and guest access
Cloud Managed Architecture
Built on Cisco Meraki’s award-winning cloud-managed architecture, the MX is the industry’s only 100% cloud-managed Unified Threat Management appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.
Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-consuming training.
Ironclad Security
The MX platform has an extensive suite of security features including IPS, content filtering, web search filtering, anti-virus / anti-phishing, geo-IP based firewalling and IPsec VPN connectivity, while providing the performance required for modern, bandwidth-intensive networks.
Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.
The integrated Sourcefire SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.0 compliance. The MX also uses the Webroot BrightCloud® URL categorisation database for CIPA / IWF compliant content-filtering, Kaspersky Safestream II® engine for anti-virus / anti-phishing, and MaxMind for geo-IP based security rules.
Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to IT administrators.
Intelligent WAN Made Simple
Transport independence
Dual WAN ports with load balancing and failover enable the use of MPLS and redundant, commodity Internet connections, providing additional bandwidth and higher reliability.
3G / 4G failover
The Cisco Meraki MX supports 3G/4G service providers globally for WAN connection failover. Web caching temporarily stores video, media, and web documents, lowering bandwidth usage and accelerating the download speed of Internet content.
Application optimisation
Layer 7 traffic shaping, application prioritisation optimise the traffic for mission-critical applications and user experience.
Intelligent path control
Use dynamic VPN path selection to choose the best VPN uplink based on packet loss, latency, and jitter. Define policies for sending the right traffic through the appropriate path (e.g., send voice via MPLS, http via VPN over broadband).
Secure connectivity
Cisco Meraki’s unique auto provisioning site-to-site VPN (Auto VPN) connects branches securely with unmatched simplicity. MX Security Appliances automatically learn VPN parameters needed to establish and maintain VPN sessions using a 128-bit AES encryption. A unique cloud-enabled discovery mechanism enables automatic interconnection of VPN peers and routes across the WAN, and keeps them updated in dynamic IP environments.
As per Cisco's UK policy we are unable to ship any Cisco products to any address other than a company registered address as shown on Companies House.
License Type: |
Cisco Meraki MX Security Appliances are ideal for organisations with large numbers of distributed sites. Since the MX is 100% cloud managed, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.
Hardware
Stateful firewall throughput: 450 Mbps
Recommended maximum clients: 50
Small form factor
10 LAN ports, including 2 PoE+ ports
Wireless
Dual-band, dual-concurrent: 2.4 & 5 GHz
2-stream 802.11ac and 802.11n, up to 1.3 Gbps
Supports up to 4 SSIDs
Cloud-based centralised management
Managed centrally over the Web
Classifies applications, users and devices
Zero-touch, self-provisioning deployments
Networking and security
Stateful firewall
Auto VPN™ self-configuring site-to-site VPN
Active Directory integration
Identity-based policies
Client VPN (IPsec)
3G / 4G failover via USB modem
Traffic shaping and application management
Layer 7 application visibility and traffic shaping
Application prioritisation
Advanced security services1
Content filtering
Google SafeSearch and YouTube for Schools
Intrusion detection & prevention (IDS/IPS)
Advanced Malware Protection (AMP)
Cisco Threat Grid2
1 Requires Advanced Security License
2 Requires additional licensing for Threat Grid Cloud
The MX68W integrates Cisco Meraki’s award-winning wireless technology with the powerful MX network security features in a compact form factor ideal for branch offices or small enterprises.
The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.
Dual-band 802.11n/ac, 2x2 MIMO with 2 spatial streams
Unified management of network security and wireless
Integrated enterprise security and guest access
The MX68W includes two ports with 802.3at (PoE+). This built-in power capability removes the need for additional hardware to power critical branch devices.
2 802.at (PoE+) ports capable of providing a total of 60W
Power APs, phones, cameras, and other PoE enabled devices without the need for AC adapters, PoE converters, or unmanaged PoE switches.
Cloud Managed Architecture
Built on Cisco Meraki’s award-winning cloud-managed architecture, the MX is the industry’s only 100% cloud-managed Unified Threat Management appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.
Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-consuming training.
Ironclad Security
The MX platform has an extensive suite of security features including IPS, content filtering, web search filtering, anti-virus / anti-phishing, geo-IP based firewalling and IPsec VPN connectivity, while providing the performance required for modern, bandwidth-intensive networks.
Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.
The integrated Sourcefire SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.0 compliance. The MX also uses the Webroot BrightCloud® URL categorisation database for CIPA / IWF compliant content-filtering, Kaspersky Safestream II® engine for anti-virus / anti-phishing, and MaxMind for geo-IP based security rules.
Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to IT administrators.
Intelligent WAN Made Simple
Transport independence
Dual WAN ports with load balancing and failover enable the use of MPLS and redundant, commodity Internet connections, providing additional bandwidth and higher reliability.
3G / 4G failover
The Cisco Meraki MX supports 3G/4G service providers globally for WAN connection failover. Web caching temporarily stores video, media, and web documents, lowering bandwidth usage and accelerating the download speed of Internet content.
Application optimisation
Layer 7 traffic shaping, application prioritisation optimise the traffic for mission-critical applications and user experience.
Intelligent path control
Use dynamic VPN path selection to choose the best VPN uplink based on packet loss, latency, and jitter. Define policies for sending the right traffic through the appropriate path (e.g., send voice via MPLS, http via VPN over broadband).
Secure connectivity
Cisco Meraki’s unique auto provisioning site-to-site VPN (Auto VPN) connects branches securely with unmatched simplicity. MX Security Appliances automatically learn VPN parameters needed to establish and maintain VPN sessions using a 128-bit AES encryption. A unique cloud-enabled discovery mechanism enables automatic interconnection of VPN peers and routes across the WAN, and keeps them updated in dynamic IP environments.
As per Cisco's UK policy we are unable to ship any Cisco products to any address other than a company registered address as shown on Companies House.
License Type: |
Cisco Meraki MX Security Appliances are ideal for organisations with large numbers of distributed sites. Since the MX is 100% cloud managed, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.
Hardware
Stateful firewall throughput: 450 Mbps
Recommended maximum clients: 50
Small form factor
LTE Advanced
While all MX models feature a USB port for 3G/4G failover, the MX67C includes a SIM slot and internal LTE modem. This integrated functionality removes the need for external hardware and allows for cellular visibility and configuration within the Meraki dashboard.
1 x CAT 6, 300 Mbps LTE modem
1 x Nano SIM slot (4ff form factor)
Cloud-based centralised management
Managed centrally over the Web
Classifies applications, users and devices
Zero-touch, self-provisioning deployments
Networking and security
Stateful firewall
Auto VPN™ self-configuring site-to-site VPN
Active Directory integration
Identity-based policies
Client VPN (IPsec)
3G / 4G failover via USB modem
Traffic shaping and application management
Layer 7 application visibility and traffic shaping
Application prioritisation
Advanced security services1
Content filtering
Google SafeSearch and YouTube for Schools
Intrusion detection & prevention (IDS/IPS)
Advanced Malware Protection (AMP)
Cisco Threat Grid2
1 Requires Advanced Security License
2 Requires additional licensing for Threat Grid Cloud
The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.
The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.
Dual-band 802.11n/ac, 2x2 MIMO with 2 spatial streams
Unified management of network security
Integrated enterprise security and guest access
Cloud Managed Architecture
Built on Cisco Meraki’s award-winning cloud-managed architecture, the MX is the industry’s only 100% cloud-managed Unified Threat Management appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.
Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-consuming training.
Ironclad Security
The MX platform has an extensive suite of security features including IPS, content filtering, web search filtering, anti-virus / anti-phishing, geo-IP based firewalling and IPsec VPN connectivity, while providing the performance required for modern, bandwidth-intensive networks.
Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.
The integrated Sourcefire SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.0 compliance. The MX also uses the Webroot BrightCloud® URL categorisation database for CIPA / IWF compliant content-filtering, Kaspersky Safestream II® engine for anti-virus / anti-phishing, and MaxMind for geo-IP based security rules.
Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to IT administrators.
Intelligent WAN Made Simple
Transport independence
Dual WAN ports with load balancing and failover enable the use of MPLS and redundant, commodity Internet connections, providing additional bandwidth and higher reliability.
3G / 4G failover
The Cisco Meraki MX supports 3G/4G service providers globally for WAN connection failover. Web caching temporarily stores video, media, and web documents, lowering bandwidth usage and accelerating the download speed of Internet content.
Application optimisation
Layer 7 traffic shaping, application prioritisation optimise the traffic for mission-critical applications and user experience.
Intelligent path control
Use dynamic VPN path selection to choose the best VPN uplink based on packet loss, latency, and jitter. Define policies for sending the right traffic through the appropriate path (e.g., send voice via MPLS, http via VPN over broadband).
Secure connectivity
Cisco Meraki’s unique auto provisioning site-to-site VPN (Auto VPN) connects branches securely with unmatched simplicity. MX Security Appliances automatically learn VPN parameters needed to establish and maintain VPN sessions using a 128-bit AES encryption. A unique cloud-enabled discovery mechanism enables automatic interconnection of VPN peers and routes across the WAN, and keeps them updated in dynamic IP environments.
As per Cisco's UK policy we are unable to ship any Cisco products to any address other than a company registered address as shown on Companies House.
License Type: |
Cisco Meraki MX Security Appliances are ideal for organisations with large numbers of distributed sites. Since the MX is 100% cloud managed, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.
Hardware
Stateful firewall throughput: 450 Mbps
Recommended maximum clients: 50
Small form factor
2 PoE+ ports
LTE Advanced
While all MX models feature a USB port for 3G/4G failover, the MX68CW includes a SIM slot and internal LTE modem. This integrated functionality removes the need for external hardware and allows for cellular visibility and configuration within the Meraki dashboard.
1 x CAT 6, 300 Mbps LTE modem
1 x Nano SIM slot (4ff form factor)
Wireless
Dual-band, dual-concurrent: 2.4 & 5 GHz
2-stream 802.11ac Wave 2 and 802.11n, up to 1.3Gbps
Supports up to 4 SSIDs
Cloud-based centralised management
Managed centrally over the Web
Classifies applications, users and devices
Zero-touch, self-provisioning deployments
Networking and security
Stateful firewall
Auto VPN™ self-configuring site-to-site VPN
Active Directory integration
Identity-based policies
Client VPN (IPsec)
3G / 4G failover via USB modem
Traffic shaping and application management
Layer 7 application visibility and traffic shaping
Application prioritisation
Advanced security services1
Content filtering
Google SafeSearch and YouTube for Schools
Intrusion detection & prevention (IDS/IPS)
Advanced Malware Protection (AMP)
Cisco Threat Grid2
1 Requires Advanced Security License
2 Requires additional licensing for Threat Grid Cloud
The MX68CW integrates Cisco Meraki’s award-winning wireless technology with the powerful MX network security features in a compact form factor ideal for branch offices or small enterprises.
The MX68CW includes two ports with 802.3at (PoE+). This built-in power capability removes the need for additional hardware to power critical branch devices.
2 802.at (PoE+) ports capable of providing a total of 60W
Power APs, phones, cameras, and other PoE enabled devices without the need for AC adapters, PoE converters, or unmanaged PoE switches.
The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.
Dual-band 802.11n/ac, 2x2 MIMO with 2 spatial streams
Unified management of network security and wireless
Integrated enterprise security and guest access
Cloud Managed Architecture
Built on Cisco Meraki’s award-winning cloud-managed architecture, the MX is the industry’s only 100% cloud-managed Unified Threat Management appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.
Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-consuming training.
Ironclad Security
The MX platform has an extensive suite of security features including IPS, content filtering, web search filtering, anti-virus / anti-phishing, geo-IP based firewalling and IPsec VPN connectivity, while providing the performance required for modern, bandwidth-intensive networks.
Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.
The integrated Sourcefire SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.0 compliance. The MX also uses the Webroot BrightCloud® URL categorisation database for CIPA / IWF compliant content-filtering, Kaspersky Safestream II® engine for anti-virus / anti-phishing, and MaxMind for geo-IP based security rules.
Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to IT administrators.
Intelligent WAN Made Simple
Transport independence
Dual WAN ports with load balancing and failover enable the use of MPLS and redundant, commodity Internet connections, providing additional bandwidth and higher reliability.
3G / 4G failover
The Cisco Meraki MX supports 3G/4G service providers globally for WAN connection failover. Web caching temporarily stores video, media, and web documents, lowering bandwidth usage and accelerating the download speed of Internet content.
Application optimisation
Layer 7 traffic shaping, application prioritisation optimise the traffic for mission-critical applications and user experience.
Intelligent path control
Use dynamic VPN path selection to choose the best VPN uplink based on packet loss, latency, and jitter. Define policies for sending the right traffic through the appropriate path (e.g., send voice via MPLS, http via VPN over broadband).
Secure connectivity
Cisco Meraki’s unique auto provisioning site-to-site VPN (Auto VPN) connects branches securely with unmatched simplicity. MX Security Appliances automatically learn VPN parameters needed to establish and maintain VPN sessions using a 128-bit AES encryption. A unique cloud-enabled discovery mechanism enables automatic interconnection of VPN peers and routes across the WAN, and keeps them updated in dynamic IP environments.
As per Cisco's UK policy we are unable to ship any Cisco products to any address other than a company registered address as shown on Companies House.
License Type: |
Product Description
The Cisco Meraki MX250-HW is a high-performance cloud-managed security and SD-WAN appliance built for large campuses, head offices and organisations running extensive site-to-site VPN environments. It combines firewalling, SD-WAN routing, VPN concentration, intrusion prevention, content filtering and malware protection in a single 1U rackmount unit, managed centrally through the Meraki dashboard.
With 10G WAN connectivity, flexible fibre and copper LAN options, and redundant power supplies, the MX250 is designed for larger networks that need strong throughput, simple remote management and room to scale. A separate Cisco Meraki licence is required to activate and manage the appliance.
Key Features
7.5 Gbps maximum NAT firewall throughput
4 Gbps maximum site-to-site VPN throughput
Recommended for up to 2,000 client devices
2x dedicated 10G SFP+ WAN uplink ports
8x 10G SFP+ LAN ports, 8x 1G SFP LAN ports and 8x 1G RJ45 LAN ports
Cloud-based management through the Cisco Meraki dashboard
Meraki Auto VPN, client VPN and SD-WAN traffic steering
Layer 7 firewalling, content filtering, IDS/IPS and Advanced Malware Protection
Dual 250W AC power supplies for built-in power redundancy
1U rackmount chassis for data centre, campus and comms room deployment
Benefits
Supports larger networks without forcing IT teams into complex command-line management
10G WAN and LAN interfaces provide headroom for high-speed internet, fibre and aggregation links
Meraki dashboard gives central visibility across sites, users, applications and security events
Auto VPN simplifies secure connectivity between branches, campuses and data centres
Redundant power supplies improve resilience in business-critical network environments
Combines firewall, SD-WAN, VPN and security services into one managed appliance
Suitable as either an edge security appliance or a VPN concentrator for large, distributed networks
Product Comparison
Cisco Meraki MX105 - a lower-capacity 1U option for medium to large sites, with 3 Gbps stateful firewall throughput and fewer LAN interfaces. Better suited where 10G density and 2,000-device scale are not required.
Cisco Meraki MX450 - the step-up model for the largest campuses and data centre edge deployments, offering higher throughput and more headroom for demanding environments.
Fortinet FortiGate 400F - a comparable enterprise firewall from a different ecosystem, typically chosen by teams wanting local FortiOS management and advanced firewall tuning rather than Meraki’s cloud-managed approach.
Sizing and Capacity
1U rackmount appliance measuring 483mm wide, 440mm deep and 44mm high, with a weight of 7.3kg. The MX250 is rated for up to 2,000 client devices and supports 7.5 Gbps maximum NAT firewall throughput, 2 Gbps next-generation firewall throughput and 4 Gbps site-to-site VPN throughput.
Connectivity includes 2x 10G SFP+ WAN uplinks and 24 LAN ports split across 10G SFP+, 1G SFP and 1G RJ45. Power is supplied by 2x modular 250W AC PSUs, with an idle/max power load of approximately 105W / 190W. It is intended for standard 19-inch rack installation in campus comms rooms, server rooms and data centre environments.
Who It’s For
Large businesses, multi-site organisations, education campuses, healthcare networks, retail groups and IT teams already standardising on Cisco Meraki. It is particularly well suited to environments that need high-throughput SD-WAN, centralised security management and large-scale VPN connectivity without adding operational complexity.
FAQs
Is a Cisco Meraki licence included? No. The MX250-HW is the hardware appliance only. A separate Enterprise, Advanced Security or Secure SD-WAN Plus licence is required.
Can the MX250 be used as a VPN concentrator? Yes. It is designed for large VPN topologies and can be deployed as a VPN concentrator as well as an SD-WAN security appliance.
Does it support 10G connectivity? Yes. It includes 2x 10G SFP+ WAN uplinks and 8x 10G SFP+ LAN ports.
How many users or devices does it support? Cisco Meraki recommends the MX250 for up to 2,000 client devices, depending on the workload and security services enabled.
What is the difference between the MX250 and MX450? The MX450 is the higher-capacity model, suited to larger and more demanding deployments. The MX250 offers strong enterprise performance but sits below the MX450 in the Meraki MX range.
Does the MX250 have redundant power? Yes. It ships with dual 250W AC power supplies for power redundancy.
As per Cisco's UK policy we are unable to ship any Cisco products to any address other than a company registered address as shown on Companies House.
License Type: |
The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.
Hardware
10G SFP+ WAN interfaces for high-speed connectivity
1G/10G fibre and copper interfaces for flexible LAN connectivity
Stateful firewall throughput: 6 Gbps
Redundant power supplies and fans
Recommended maximum clients: 10,000
Cloud-based centralised management
Managed centrally over the Web
Classifies applications, users and devices
Zero-touch, self-provisioning deployments
Networking and security
Stateful firewall
Auto VPN™ self-configuring site-to-site VPN
Powerful SD-WAN capabilities
Active Directory integration
Identity-based policies
Client VPN (IPsec)
Smart link bonding
Traffic shaping and application management
Layer 7 application visibility and traffic shaping
Application prioritisation
Web caching
Choose WAN uplink based on traffic type
Advanced security services1
Content filtering
Geo-based IP firewall
Google SafeSearch and YouTube for Schools
Intrusion detection & prevention (IDS/IPS)
Advanced Malware Protection (AMP)
Cisco Threat Grid2
1 Requires Advanced Security License
2 Requires additional licensing for Threat Grid Cloud
Cloud Managed Architecture
Built on Cisco Meraki’s award-winning cloud-managed architecture, the MX is the industry’s only 100% cloud-managed Unified Threat Management appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.
Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-consuming training.
Ironclad Security
The MX platform has an extensive suite of security features including IPS, content filtering, web search filtering, anti-virus / anti-phishing, geo-IP based firewalling and IPsec VPN connectivity, while providing the performance required for modern, bandwidth-intensive networks.
Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.
The integrated Sourcefire SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.0 compliance. The MX also uses the Webroot BrightCloud® URL categorization database for CIPA / IWF compliant content-filtering, Kaspersky Safestream II® engine for anti-virus / anti-phishing, and MaxMind for geo-IP based security rules.
Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to IT administrators.
Intelligent WAN Made Simple
Transport independence
Dual WAN ports with load balancing and failover enable the use of MPLS and redundant, commodity Internet connections, providing additional bandwidth and higher reliability.
3G / 4G failover
The Cisco Meraki MX supports 3G/4G service providers globally for WAN connection failover. Web caching temporarily stores video, media, and web documents, lowering bandwidth usage and accelerating the download speed of Internet content.
Application optimization
Layer 7 traffic shaping, application prioritization optimize the traffic for mission-critical applications and user experience.
Intelligent path control
Use dynamic VPN path selection to choose the best VPN uplink based on packet loss, latency, and jitter. Define policies for sending the right traffic through the appropriate path (e.g., send voice via MPLS, http via VPN over broadband).
Secure connectivity
Cisco Meraki’s unique auto provisioning site-to-site VPN (Auto VPN) connects branches securely with unmatched simplicity. MX Security Appliances automatically learn VPN parameters needed to establish and maintain VPN sessions using a 128-bit AES encryption. A unique cloud-enabled discovery mechanism enables automatic interconnection of VPN peers and routes across the WAN, and keeps them updated in dynamic IP environments.
As per Cisco's UK policy we are unable to ship any Cisco products to any address other than a company registered address as shown on Companies House.
License Type: |
