Cisco Meraki Cloud Managed Network Security & SD-WAN - Medium Branch

Product Description 

The Cisco Meraki MX67-HW is a compact, cloud-managed security and SD-WAN appliance for small branches, retail sites and offices with up to 50 users. It brings firewalling, traffic shaping, VPN, content filtering and threat protection into one desktop or wall-mountable device, managed through the Meraki dashboard. A separate Meraki licence is required for activation and ongoing management.



Key Features

 



700 Mbps firewall throughput  
300 Mbps site-to-site VPN throughput  
Recommended for up to 50 users  
2x GbE WAN ports, with one usable as WAN or LAN  
4x GbE LAN ports, with one usable as WAN or LAN  
Meraki Auto VPN, client VPN and SD-WAN support  
Layer 7 firewalling, content filtering, IDS/IPS and malware protection  
Cloud management through the Cisco Meraki dashboard  
Desktop or wall-mount deployment  







Benefits






Simple to deploy at small sites without specialist on-site configuration  
Combines firewall, router, VPN and SD-WAN functions in one appliance  
Cloud dashboard gives central visibility across multiple locations  
Auto VPN helps link branch sites securely without complex setup  
Compact form factor works well where rack space is unavailable  
Flexible WAN/LAN ports support simple failover or dual-WAN designs  





Product Comparison 






Cisco Meraki MX67C - same core appliance, but with built-in cellular connectivity for sites that need integrated mobile failover.  
Cisco Meraki MX68 - similar small-branch performance, but with more LAN ports, making it better for sites with additional wired devices.  
Cisco Meraki MX85 - the step-up rackmount model for larger branches, offering higher throughput, more users and more connectivity.

Sizing and Capacity 




The MX67 is a small desktop or wall-mount appliance for offices and branch sites rather than rack-based deployments. Cisco lists the appliance at up to 50 users, with 700 Mbps firewall throughput and 300 Mbps site-to-site VPN throughput. It is best suited to modest network loads, small numbers of connected devices and sites where centralised Meraki management is more important than high port density.  






Who It’s For 



Small businesses, branch offices, retail locations, clinics and professional services firms that need centrally managed security and VPN connectivity without installing a larger rackmount firewall.






FAQs 






Is a Meraki licence included? No. A separate Cisco Meraki licence is required to activate and manage the MX67.  
Does the MX67 include Wi-Fi? No. For integrated wireless, look at the MX67W.  
Does it have built-in cellular? No. For built-in cellular failover, choose the MX67C.  
Can it support dual WAN? Yes. The MX67 includes flexible ports that can support WAN/LAN use depending on configuration.  
Is it rack-mountable? Not as standard. It is designed for desktop or wall-mount installation.













As per Cisco's UK policy we are unable to ship any Cisco products to any address other than a company registered address as shown on Companies House.

Cisco Meraki MX Security Appliances are ideal for organisations with large numbers of distributed sites. Since the MX is 100% cloud managed, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks.

Stateful firewall throughput: 450 Mbps
Recommended maximum clients: 50
Small form factor
10 LAN ports, including 2 PoE+ ports
Cloud-based centralised management

Managed centrally over the Web
Classifies applications, users and devices
Zero-touch, self-provisioning deployments
Networking and security

Stateful firewall
Auto VPN™ self-configuring site-to-site VPN
Active Directory integration
Identity-based policies
Client VPN (IPsec)
3G / 4G failover via USB modem
Traffic shaping and application management

Layer 7 application visibility and traffic shaping
Application prioritisation
Advanced security services1

Content filtering
Google SafeSearch and YouTube for Schools
Intrusion detection & prevention (IDS/IPS)
Advanced Malware Protection (AMP)
Cisco Threat Grid2
1 Requires Advanced Security License
2 Requires additional licensing for Threat Grid Cloud



The MX68 includes two ports with 802.3at (PoE+). This built-in power capability removes the need for additional hardware to power critical branch devices.

2 802.at (PoE+) ports capable of providing a total of 60W
Power APs, phones, cameras, and other PoE enabled devices without the need for AC adapters, PoE converters, or unmanaged PoE switches.
The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Cloud Managed Architecture

Built on Cisco Meraki’s award-winning cloud-managed architecture, the MX is the industry’s only 100% cloud-managed Unified Threat Management appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.

Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-consuming training.

Ironclad Security

The MX platform has an extensive suite of security features including IPS, content filtering, web search filtering, anti-virus / anti-phishing, geo-IP based firewalling and IPsec VPN connectivity, while providing the performance required for modern, bandwidth-intensive networks.

Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.

The integrated Sourcefire SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.0 compliance. The MX also uses the Webroot BrightCloud® URL categorisation database for CIPA / IWF compliant content-filtering, Kaspersky Safestream II® engine for anti-virus / anti-phishing, and MaxMind for geo-IP based security rules.

Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to  IT administrators.

Intelligent WAN Made Simple

Transport independence

Dual WAN ports with load balancing and failover enable the use of MPLS and redundant, commodity Internet connections, providing additional bandwidth and higher reliability.

3G / 4G failover

The Cisco Meraki MX supports 3G/4G service providers globally for WAN connection failover. Web caching temporarily stores video, media, and web documents, lowering bandwidth usage and accelerating the download speed of Internet content.

Application optimisation

Layer 7 traffic shaping, application prioritisation optimise the traffic for mission-critical applications and user experience.

Intelligent path control

Use dynamic VPN path selection to choose the best VPN uplink based on packet loss, latency, and jitter. Define policies for sending the right traffic through the appropriate path (e.g., send voice via MPLS, http via VPN over broadband).

Secure connectivity

Cisco Meraki’s unique auto provisioning site-to-site VPN (Auto VPN) connects branches securely with unmatched simplicity. MX Security Appliances automatically learn VPN parameters needed to establish and maintain VPN sessions using a 128-bit AES encryption. A unique cloud-enabled discovery mechanism enables automatic interconnection of VPN peers and routes across the WAN, and keeps them updated in dynamic IP environments.



As per Cisco's UK policy we are unable to ship any Cisco products to any address other than a company registered address as shown on Companies House.

Cisco Meraki MX Security Appliances are ideal for organisations with large numbers of distributed sites. Since the MX is 100% cloud managed, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Hardware

Stateful firewall throughput: 450 Mbps
Recommended maximum clients: 50
Small form factor
Wireless

Dual-band, dual-concurrent: 2.4 & 5 GHz
2-stream 802.11ac and 802.11n, up to 1.3 Gbps
Supports up to 4 SSIDs
Cloud-based centralised management

Managed centrally over the Web
Classifies applications, users and devices
Zero-touch, self-provisioning deployments
Networking and security

Stateful firewall
Auto VPN™ self-configuring site-to-site VPN
Active Directory integration
Identity-based policies
Client VPN (IPsec)
3G / 4G failover via USB modem
Traffic shaping and application management

Layer 7 application visibility and traffic shaping
Application prioritisation
Advanced security services1

Content filtering
Google SafeSearch and YouTube for Schools
Intrusion detection & prevention (IDS/IPS)
Advanced Malware Protection (AMP)
Cisco Threat Grid2
1 Requires Advanced Security License
2 Requires additional licensing for Threat Grid Cloud



The MX65W integrates Cisco Meraki’s award-winning wireless technology with the powerful MX network security features in a compact form factor ideal for branch offices or small enterprises.

The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Dual-band 802.11n/ac, 2x2 MIMO with 2 spatial streams
Unified management of network security and wireless
Integrated enterprise security and guest access
Cloud Managed Architecture

Built on Cisco Meraki’s award-winning cloud-managed architecture, the MX is the industry’s only 100% cloud-managed Unified Threat Management appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.

Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-consuming training.

Ironclad Security

The MX platform has an extensive suite of security features including IPS, content filtering, web search filtering, anti-virus / anti-phishing, geo-IP based firewalling and IPsec VPN connectivity, while providing the performance required for modern, bandwidth-intensive networks.

Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.

The integrated Sourcefire SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.0 compliance. The MX also uses the Webroot BrightCloud® URL categorisation database for CIPA / IWF compliant content-filtering, Kaspersky Safestream II® engine for anti-virus / anti-phishing, and MaxMind for geo-IP based security rules.

Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to  IT administrators.

Intelligent WAN Made Simple

Transport independence

Dual WAN ports with load balancing and failover enable the use of MPLS and redundant, commodity Internet connections, providing additional bandwidth and higher reliability.

3G / 4G failover

The Cisco Meraki MX supports 3G/4G service providers globally for WAN connection failover. Web caching temporarily stores video, media, and web documents, lowering bandwidth usage and accelerating the download speed of Internet content.

Application optimisation

Layer 7 traffic shaping, application prioritisation optimise the traffic for mission-critical applications and user experience.

Intelligent path control

Use dynamic VPN path selection to choose the best VPN uplink based on packet loss, latency, and jitter. Define policies for sending the right traffic through the appropriate path (e.g., send voice via MPLS, http via VPN over broadband).

Secure connectivity

Cisco Meraki’s unique auto provisioning site-to-site VPN (Auto VPN) connects branches securely with unmatched simplicity. MX Security Appliances automatically learn VPN parameters needed to establish and maintain VPN sessions using a 128-bit AES encryption. A unique cloud-enabled discovery mechanism enables automatic interconnection of VPN peers and routes across the WAN, and keeps them updated in dynamic IP environments.



As per Cisco's UK policy we are unable to ship any Cisco products to any address other than a company registered address as shown on Companies House.

Cisco Meraki MX Security Appliances are ideal for organisations with large numbers of distributed sites. Since the MX is 100% cloud managed, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Hardware

Stateful firewall throughput: 450 Mbps
Recommended maximum clients: 50
Small form factor
10 LAN ports, including 2 PoE+ ports
Wireless

Dual-band, dual-concurrent: 2.4 & 5 GHz
2-stream 802.11ac and 802.11n, up to 1.3 Gbps
Supports up to 4 SSIDs
Cloud-based centralised management

Managed centrally over the Web
Classifies applications, users and devices
Zero-touch, self-provisioning deployments
Networking and security

Stateful firewall
Auto VPN™ self-configuring site-to-site VPN
Active Directory integration
Identity-based policies
Client VPN (IPsec)
3G / 4G failover via USB modem
Traffic shaping and application management

Layer 7 application visibility and traffic shaping
Application prioritisation
Advanced security services1

Content filtering
Google SafeSearch and YouTube for Schools
Intrusion detection & prevention (IDS/IPS)
Advanced Malware Protection (AMP)
Cisco Threat Grid2
1 Requires Advanced Security License
2 Requires additional licensing for Threat Grid Cloud



The MX68W integrates Cisco Meraki’s award-winning wireless technology with the powerful MX network security features in a compact form factor ideal for branch offices or small enterprises.

The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Dual-band 802.11n/ac, 2x2 MIMO with 2 spatial streams
Unified management of network security and wireless
Integrated enterprise security and guest access
The MX68W includes two ports with 802.3at (PoE+). This built-in power capability removes the need for additional hardware to power critical branch devices.
2 802.at (PoE+) ports capable of providing a total of 60W
Power APs, phones, cameras, and other PoE enabled devices without the need for AC adapters, PoE converters, or unmanaged PoE switches.
Cloud Managed Architecture

Built on Cisco Meraki’s award-winning cloud-managed architecture, the MX is the industry’s only 100% cloud-managed Unified Threat Management appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.

Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-consuming training.

Ironclad Security

The MX platform has an extensive suite of security features including IPS, content filtering, web search filtering, anti-virus / anti-phishing, geo-IP based firewalling and IPsec VPN connectivity, while providing the performance required for modern, bandwidth-intensive networks.

Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.

The integrated Sourcefire SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.0 compliance. The MX also uses the Webroot BrightCloud® URL categorisation database for CIPA / IWF compliant content-filtering, Kaspersky Safestream II® engine for anti-virus / anti-phishing, and MaxMind for geo-IP based security rules.

Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to  IT administrators.

Intelligent WAN Made Simple

Transport independence

Dual WAN ports with load balancing and failover enable the use of MPLS and redundant, commodity Internet connections, providing additional bandwidth and higher reliability.

3G / 4G failover

The Cisco Meraki MX supports 3G/4G service providers globally for WAN connection failover. Web caching temporarily stores video, media, and web documents, lowering bandwidth usage and accelerating the download speed of Internet content.

Application optimisation

Layer 7 traffic shaping, application prioritisation optimise the traffic for mission-critical applications and user experience.

Intelligent path control

Use dynamic VPN path selection to choose the best VPN uplink based on packet loss, latency, and jitter. Define policies for sending the right traffic through the appropriate path (e.g., send voice via MPLS, http via VPN over broadband).

Secure connectivity

Cisco Meraki’s unique auto provisioning site-to-site VPN (Auto VPN) connects branches securely with unmatched simplicity. MX Security Appliances automatically learn VPN parameters needed to establish and maintain VPN sessions using a 128-bit AES encryption. A unique cloud-enabled discovery mechanism enables automatic interconnection of VPN peers and routes across the WAN, and keeps them updated in dynamic IP environments.



As per Cisco's UK policy we are unable to ship any Cisco products to any address other than a company registered address as shown on Companies House.

Cisco Meraki MX Security Appliances are ideal for organisations with large numbers of distributed sites. Since the MX is 100% cloud managed, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Hardware

Stateful firewall throughput: 450 Mbps
Recommended maximum clients: 50
Small form factor
LTE Advanced

While all MX models feature a USB port for 3G/4G failover, the MX67C includes a SIM slot and internal LTE modem. This integrated functionality removes the need for external hardware and allows for cellular visibility and configuration within the Meraki dashboard. 1 x CAT 6, 300 Mbps LTE modem
1 x Nano SIM slot (4ff form factor)
Cloud-based centralised management

Managed centrally over the Web
Classifies applications, users and devices
Zero-touch, self-provisioning deployments
Networking and security

Stateful firewall
Auto VPN™ self-configuring site-to-site VPN
Active Directory integration
Identity-based policies
Client VPN (IPsec)
3G / 4G failover via USB modem
Traffic shaping and application management

Layer 7 application visibility and traffic shaping
Application prioritisation
Advanced security services1

Content filtering
Google SafeSearch and YouTube for Schools
Intrusion detection & prevention (IDS/IPS)
Advanced Malware Protection (AMP)
Cisco Threat Grid2
1 Requires Advanced Security License
2 Requires additional licensing for Threat Grid Cloud



The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Dual-band 802.11n/ac, 2x2 MIMO with 2 spatial streams
Unified management of network security
Integrated enterprise security and guest access
Cloud Managed Architecture

Built on Cisco Meraki’s award-winning cloud-managed architecture, the MX is the industry’s only 100% cloud-managed Unified Threat Management appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.

Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-consuming training.

Ironclad Security

The MX platform has an extensive suite of security features including IPS, content filtering, web search filtering, anti-virus / anti-phishing, geo-IP based firewalling and IPsec VPN connectivity, while providing the performance required for modern, bandwidth-intensive networks.

Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.

The integrated Sourcefire SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.0 compliance. The MX also uses the Webroot BrightCloud® URL categorisation database for CIPA / IWF compliant content-filtering, Kaspersky Safestream II® engine for anti-virus / anti-phishing, and MaxMind for geo-IP based security rules.

Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to  IT administrators.

Intelligent WAN Made Simple

Transport independence

Dual WAN ports with load balancing and failover enable the use of MPLS and redundant, commodity Internet connections, providing additional bandwidth and higher reliability.

3G / 4G failover

The Cisco Meraki MX supports 3G/4G service providers globally for WAN connection failover. Web caching temporarily stores video, media, and web documents, lowering bandwidth usage and accelerating the download speed of Internet content.

Application optimisation

Layer 7 traffic shaping, application prioritisation optimise the traffic for mission-critical applications and user experience.

Intelligent path control

Use dynamic VPN path selection to choose the best VPN uplink based on packet loss, latency, and jitter. Define policies for sending the right traffic through the appropriate path (e.g., send voice via MPLS, http via VPN over broadband).

Secure connectivity

Cisco Meraki’s unique auto provisioning site-to-site VPN (Auto VPN) connects branches securely with unmatched simplicity. MX Security Appliances automatically learn VPN parameters needed to establish and maintain VPN sessions using a 128-bit AES encryption. A unique cloud-enabled discovery mechanism enables automatic interconnection of VPN peers and routes across the WAN, and keeps them updated in dynamic IP environments.



As per Cisco's UK policy we are unable to ship any Cisco products to any address other than a company registered address as shown on Companies House.

Cisco Meraki MX Security Appliances are ideal for organisations with large numbers of distributed sites. Since the MX is 100% cloud managed, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Hardware

Stateful firewall throughput: 450 Mbps
Recommended maximum clients: 50
Small form factor
2 PoE+ ports
LTE Advanced

While all MX models feature a USB port for 3G/4G failover, the MX68CW includes a SIM slot and internal LTE modem. This integrated functionality removes the need for external hardware and allows for cellular visibility and configuration within the Meraki dashboard. 1 x CAT 6, 300 Mbps LTE modem
1 x Nano SIM slot (4ff form factor)
Wireless

Dual-band, dual-concurrent: 2.4 & 5 GHz
2-stream 802.11ac Wave 2 and 802.11n, up to 1.3Gbps
Supports up to 4 SSIDs
Cloud-based centralised management

Managed centrally over the Web
Classifies applications, users and devices
Zero-touch, self-provisioning deployments
Networking and security

Stateful firewall
Auto VPN™ self-configuring site-to-site VPN
Active Directory integration
Identity-based policies
Client VPN (IPsec)
3G / 4G failover via USB modem
Traffic shaping and application management

Layer 7 application visibility and traffic shaping
Application prioritisation
Advanced security services1

Content filtering
Google SafeSearch and YouTube for Schools
Intrusion detection & prevention (IDS/IPS)
Advanced Malware Protection (AMP)
Cisco Threat Grid2
1 Requires Advanced Security License
2 Requires additional licensing for Threat Grid Cloud



The MX68CW integrates Cisco Meraki’s award-winning wireless technology with the powerful MX network security features in a compact form factor ideal for branch offices or small enterprises.

The MX68CW includes two ports with 802.3at (PoE+). This built-in power capability removes the need for additional hardware to power critical branch devices.
2 802.at (PoE+) ports capable of providing a total of 60W
Power APs, phones, cameras, and other PoE enabled devices without the need for AC adapters, PoE converters, or unmanaged PoE switches.
The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Dual-band 802.11n/ac, 2x2 MIMO with 2 spatial streams
Unified management of network security and wireless
Integrated enterprise security and guest access
Cloud Managed Architecture

Built on Cisco Meraki’s award-winning cloud-managed architecture, the MX is the industry’s only 100% cloud-managed Unified Threat Management appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.

Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-consuming training.

Ironclad Security

The MX platform has an extensive suite of security features including IPS, content filtering, web search filtering, anti-virus / anti-phishing, geo-IP based firewalling and IPsec VPN connectivity, while providing the performance required for modern, bandwidth-intensive networks.

Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.

The integrated Sourcefire SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.0 compliance. The MX also uses the Webroot BrightCloud® URL categorisation database for CIPA / IWF compliant content-filtering, Kaspersky Safestream II® engine for anti-virus / anti-phishing, and MaxMind for geo-IP based security rules.

Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to  IT administrators.

Intelligent WAN Made Simple

Transport independence

Dual WAN ports with load balancing and failover enable the use of MPLS and redundant, commodity Internet connections, providing additional bandwidth and higher reliability.

3G / 4G failover

The Cisco Meraki MX supports 3G/4G service providers globally for WAN connection failover. Web caching temporarily stores video, media, and web documents, lowering bandwidth usage and accelerating the download speed of Internet content.

Application optimisation

Layer 7 traffic shaping, application prioritisation optimise the traffic for mission-critical applications and user experience.

Intelligent path control

Use dynamic VPN path selection to choose the best VPN uplink based on packet loss, latency, and jitter. Define policies for sending the right traffic through the appropriate path (e.g., send voice via MPLS, http via VPN over broadband).

Secure connectivity

Cisco Meraki’s unique auto provisioning site-to-site VPN (Auto VPN) connects branches securely with unmatched simplicity. MX Security Appliances automatically learn VPN parameters needed to establish and maintain VPN sessions using a 128-bit AES encryption. A unique cloud-enabled discovery mechanism enables automatic interconnection of VPN peers and routes across the WAN, and keeps them updated in dynamic IP environments.



As per Cisco's UK policy we are unable to ship any Cisco products to any address other than a company registered address as shown on Companies House.

The Cisco Meraki MX85-HW is a 1U rackmount security gateway built for small and medium branches with up to 250 users. It pairs SD-WAN routing with a full next-generation firewall, including Layer 7 application controls, Cisco Talos-powered intrusion prevention and Advanced Malware Protection, all managed through the cloud-based Meraki dashboard. A Meraki licence must be purchased separately to activate the appliance.Key Features



1 Gbps stateful firewall throughput, 500 Mbps site-to-site VPN, 750 Mbps with advanced security enabled 
4 dedicated WAN uplinks: 2x 1 GbE SFP and 2x 1 GbE RJ45 (port 4 supports PoE+) 
10 LAN ports: 8x 1 GbE RJ45 and 2x 1 GbE SFP 
USB 3.0 port for 4G/5G cellular failover 
Up to 200 concurrent IPsec VPN tunnels with Auto VPN, AnyConnect and standard IPsec 
Cisco Talos-backed AMP, IDS/IPS, geo-based firewall rules and content filtering

Benefits



Cloud-first management means zero-touch deployment without on-site configuration 
Removes the need for separate firewall, router, VPN concentrator and content filtering hardware 
All-Gigabit interfaces match the connection speeds typical in small and mid-size branches 
PoE+ WAN port can directly power a paired Meraki cellular gateway for resilient connectivity

Product Comparison



Cisco Meraki MX75 - the step-down model for smaller offices with lower throughput and fewer ports 
Cisco Meraki MX95 - the step-up model with 2 Gbps firewall throughput, 10 GbE SFP+ uplinks and a 500-user ceiling, suited to busier sites or fibre WAN circuits faster than 1 Gbps 
Fortinet FortiGate 70G - a comparable small-branch NGFW from another vendor, typically chosen where IT teams prefer locally managed FortiOS to a cloud-only dashboard
Sizing and Capacity

1U rack-mountable chassis measuring 484.6mm wide and 250mm deep, with around 55W typical power draw and an operating temperature ceiling of 40°C. Rated for up to 250 users at 1 Gbps firewall throughput, 500 Mbps VPN throughput and 200 concurrent IPsec tunnels. A single non-redundant power supply is fitted - the MX95 or MX105 are the routes to redundant power.

Who It's For

Small and medium-sized businesses, branch offices, retail outlets, dental and medical practices, and small professional firms that want enterprise-grade security and SD-WAN without needing on-site IT specialists to run it.

FAQs

Is a Meraki licence included? No. A Meraki licence (Enterprise, Advanced Security or Secure SD-WAN Plus) is mandatory and must be ordered separately to activate and manage the device. 
Can I run fibre and copper WAN connections together? Yes. The MX85 offers four dedicated WAN ports across SFP and RJ45 interfaces, although firmware currently allows two active WAN uplinks at any one time. 
Does it work as a full firewall? Yes. It's a true next-generation firewall with Layer 7 inspection, IDS/IPS and AMP, not a routing-only device. 
Can it support home and remote workers? Yes. Up to 200 IPsec tunnels are supported, alongside Cisco AnyConnect and Meraki Auto VPN for client and site-to-site connections. 
Is it rack-mountable? Yes, it's a 1U appliance and fits any standard 19-inch rack.
Specifications

Model MX85 Recommended use cases Small to medium branch with up to 250 users Stateful firewall throughput 1 Gbps Advanced security throughput 750 Mbps Maximum site-to-site VPN throughput 500 Mbps Maximum site-to-site VPN tunnels 200 WAN interfaces
(dedicated) 2x 10GbE SFP
2x GbE RJ45 (1x PoE+)
1x USB (cellular failover) LAN interfaces
(fixed) 8x GbE RJ45
2x GbE SFP Mounting 1U rack Dimensions
(w x d x h) 19" x 9.8" x 1.7"
(484.6 mm x 250 mm x 43.8 mm) Weight 8.2 lbs
(3.7 kg) Power supply Internal 100-127VAC, 200-240VAC
(50/60Hz) Power load
(idle/max) 12W/55W Operating temperature 32°F to 104°F
(0°C to 40°C) Humidity 5% to 95% As per Cisco's UK policy we are unable to ship any Cisco products to any address other than a company registered address as shown on Companies House.

The Cisco Meraki MX95-HW is a 1U cloud-managed security and SD-WAN appliance built for medium-sized branch sites and distributed deployments of up to 500 users. It combines next-generation firewall, IDS/IPS, content filtering and Advanced Malware Protection into a single rack-mounted unit, all configured and monitored through the Meraki dashboard. A separate Meraki licence is required for activation and ongoing management.

Key Features

2 Gbps stateful firewall throughput and 800 Mbps site-to-site VPN throughput 
4x dedicated WAN uplinks: 2x 10 GbE SFP+ and 2x 2.5 GbE RJ45 (one with PoE+) 
6x LAN ports: 4x 1 GbE RJ45 and 2x 10 GbE SFP+ 
USB 3.0 port for 4G/5G cellular failover 
Cisco Talos-backed AMP, IDS/IPS and Layer 7 content filtering 
Meraki Auto VPN, Cisco AnyConnect and standard IPsec support
Benefits

Zero-touch provisioning removes the need for an on-site engineer at deployment
Replaces separate firewall, SD-WAN, VPN and content filtering boxes with one unit
Cloud-managed via the Meraki dashboard from anywhere with a browse
10 GbE uplinks and LAN ports leave clear headroom for fibre WAN circuits
Product Comparison

Cisco Meraki MX85 - the step-down model for smaller branches with lower firewall throughput; same feature set 
Cisco Meraki MX105 - the step-up model with 5 Gbps firewall throughput and dual redundant power supplies, suited to larger branches where uptime is critical 
Fortinet FortiGate 90G - a similar mid-range NGFW from a different vendor, typically chosen where IT teams prefer locally managed FortiOS over a cloud-managed dashboard
Sizing and Capacity

1U rack-mountable chassis at 484.6mm wide, 285.2mm deep and 44mm high, weighing 3.17kg. Rated for up to 500 concurrent users with 2 Gbps firewall throughput and 800 Mbps VPN throughput. Mounts in any standard 19-inch rack. A single non-redundat power supply is fitted - step up to the MX105 if redundant power is required.

Who It's For  
Mid-size businesses, multi-site branch deployments, retail, healthcare and finance environments needing PCI-compliant edge security, and IT teams standardising on the Cisco Meraki ecosystem for unified network and security management.

FAQs 

Is a Meraki licence included with the hardware? No. A Meraki licence (Enterprise, Advanced Security or Secure SD-WAN Plus) must be purchased separately to activate and manage the appliance. 
Can it act as a primary firewall? Yes. The MX95 is a full next-generation firewall with Layer 7 inspection, IDS/IPS and AMP, not a routing-only appliance. 
Does it support remote worker VPN? Yes. Meraki Auto VPN, Cisco AnyConnect and standard IPsec are all supported for site-to-site and client VPN. 
What's the difference between the MX95 and MX105? The MX105 offers higher throughput (5 Gbps firewall) and dual redundant power supplies. The feature set is otherwise identical. 
Can the WAN PoE+ port power a 4G/5G modem? Yes, one of the 2.5 GbE WAN ports delivers PoE+ to power a compatible cellular gateway.


Specifications

Model MX95 Recommended use cases Medium to large branch with up to 500 users Stateful firewall throughput 2 Gbps Advanced security throughput 1 Gbps Maximum site-to-site VPN throughput 800 Mbps Maximum site-to-site VPN tunnels 500 WAN interfaces
(dedicated) 2x 10GbE SFP+
2x 2.5GbE RJ45 (1x PoE+)
1x USB (cellular failover) LAN interfaces
(fixed) 4x GbE RJ45
2x 10GbE SFP+ Mounting 1U rack Dimensions
(w x d x h) 19.08" x 11.23" x 1.73"
(484.6 mm x 285.2 mm x 44 mm) Weight 6.99 lbs
(3.17 kg) Power supply Internal 100-127VAC, 200-240VAC
(50/60Hz) Power load
(idle/max) 42W/109W Operating temperature 32°F to 104°F
(0°C to 40°C) Humidity 5% to 95% As per Cisco's UK policy we are unable to ship any Cisco products to any address other than a company registered address as shown on Companies House.

Cisco Meraki MX105 1U Firewall Cloud-Managed Security and SD-WAN The Cisco Meraki MX are multifunctional security and SD-WAN enterprise appliances with a wide set of capabilities to address multiple use cases–from an all-in-one device. Organizations of all sizes and across all industries rely on the MX to deliver secure connectivity to hub locations or multi-cloud environments, as well as application quality of experience (QoE), through advanced analytics with machine learning.

The MX is 100% cloud-managed, so installation and remote management is truly zero touch, making it ideal for distributed branches, campuses, and data center locations. Natively integrated with a comprehensive suite of secure network and assurance capabilities, the MX eliminates the need for multiple appliances. These capabilities include application-based firewalling, content filtering, web search filtering, SNORT®-based intrusion detection and prevention, Cisco Advanced Malware Protection (AMP), site-to-site Auto VPN, client VPN, WAN and cellular failover, dynamic path selection, web application health, VoIP health, and more.

SD-WAN can be easily be extended to deliver optimized access to resources in public and private cloud environments with virtual MX appliances (vMX). Public clouds supported with vMX include Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform, and Alibaba Cloud and private cloud support through Cisco NFVIS.

Secure Cisco SD-WAN powered by Meraki Secure Cisco SD-WAN powered by Meraki is delivered by the MX appliances. SD-WAN powered by Meraki has helped thousands of organizations rapidly save costs by reducing their dependence on MPLS without compromising on performance. As enterprises continue to shift from hub-centric architectures interconnected with VPN to ones that leverage public internet connectivity, SD-WAN powered by Meraki delivers advanced analytics with ML to monitor and optimize quality of experience (QoE) for applications, regardless of where they might be hosted.

Advanced quality of experience (QoE) analytics

End-to-end health of web applications at-a-glance across the LAN, WAN, and application server

Machine-learned smart application thresholds autonomously applied to identify true anomalies based on past behavioral patterns

Monitor the health of all MX WAN links, including cellular, across your entire organization

Detailed hop-by-hop VoIP performance analysis across all uplinks

Agile on-premises and cloud security capabilities informed by Cisco Talos

Next-gen layer 7 firewall for identity-based security policies and application management

Advanced Malware Protection with sandboxing; file reputation based protection engine powered by Cisco AMP

Intrusion prevention: PCI-compliant IPS sensor using industry-leading SNORT® signature database from Cisco

Granular and automatically updated category-based content filtering

Other capabilities: SSL decryption/inspection, data loss prevention (DLP), cloud access security broker (CASB), SaaS tenant restrictions, granular app control, file type control

Branch gateway services

Built-in DHCP, NAT, QoS, and VLAN management services

Web caching: accelerates frequently accessed content

Load balancing: combines multiple WAN links into a single high-speed interface, with policies for QoS, traffic shaping, and failover

Smart connection monitoring provides automatic detection of layer 2 and layer 3 outages and fast failover, including the option of integrated LTE Advanced or 3G/4G modems

Industry-leading cloud management

Unified firewall, switching, wireless LAN, and mobile device management through an intuitive web-based dashboard

Template-based settings scale easily from small deployments to tens of thousands of devices

Role-based administration, configurable email alerts for a variety of important events, and easily auditable change logs

Summary reports with user, device, and application usage details archived in the cloud

Intelligent site-to-site VPN with Cisco SD-WAN powered by Meraki

Auto VPN allows automatic VPN route generation using IKE/IKEv2/IPsec setup; runs on physical MX appliances and as a virtual instance in public and private clouds

SD-WAN with active / active VPN, policy-based-routing, dynamic VPN path selection, and support for application-layer performance profiles to ensure prioritization of applications types that matter

Interoperates with all IPsec VPN devices and services

Automated MPLS to VPN failover within seconds of a connection failure

L2TP IPsec remote client VPN included at no extra cost with support for native Windows, Mac OS X, iPad, and Android clients

Support for Cisco AnyConnect remote client VPN(AnyConnect license required)

Specifications

Model MX105 Recommended use cases Large branch with up to 750 users Stateful firewall throughput 3 Gbps Advanced security throughput 1.5 Gbps Maximum site-to-site VPN throughput 1 Gbps Maximum site-to-site VPN tunnels 1,000 WAN interfaces
(dedicated) 2x 10GbE SFP+
2x 2.5GbE RJ45 (1x PoE+)
1x USB (cellular failover) LAN interfaces
(fixed) 4x GbE RJ45
2x 10GbE SFP+ Mounting 1U rack Dimensions
(w x d x h) 19.08" x 12.4" x 1.73"
(484.6 mm x 315 mm x 44 mm) Weight 10.74 lbs (4.87 kg)
(with 2 Fans and 2 PSUs) Power supply Internal 100-127VAC, 200-240VAC (50/60Hz)
2 x 150WAC PSU Power load
(idle/max) 53W/123W Operating temperature 32°F to 104°F
(0°C to 40°C) Humidity 5% to 95% As per Cisco's UK policy we are unable to ship any Cisco products to any address other than a company registered address as shown on Companies House.

Cisco Meraki MX Security & SD-WAN Appliances are ideal for organizations considering a Unified Threat Managment (UTM) solution, for distributed sites, campuses or datacenter VPN concentration. Since the MX is 100% cloud managed, installation and remote management are simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances.

These services include SD-WAN capabilities, application-based firewalling, content filtering, web search filtering, SNORT® based intrusion detection and prevention, Cisco Advanced Malware Protection (AMP), web caching, 4G cellular failover and more. Auto VPN and SD-WAN features are available on our hardware and virtual appliances, configurable in Amazon Web Services or Microsoft Azure.

Specifications

Edition type: Enterprise
Software type: License
License quantity: 1 license(s)
License term in years: 7 Years or 10 Years
Compatibility: Cisco Meraki MX67W
Ironclad Security

The MX platform has an extensive suite of security features including IDS/IPS, content filtering, web search filtering, antimalware, geo-IP based firewalling, IPsec VPN connectivity and Cisco Advanced Malware Protection, while providing the performance required for modern, bandwidth-intensive networks.

Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth. The integrated Cisco SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.2 compliance. The MX also uses the Webroot BrightCloud® URL categorization database for CIPA / IWF compliant content-filtering, Cisco Advanced Malware Protection (AMP) engine for anti-malware, AMP Threat Grid Cloud, and MaxMind for geo-IP based security rules.

Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to IT administrators.

As per Cisco's UK policy we are unable to ship any Cisco products to any address other than a company registered address as shown on Companies House.

Product Description

 
The Cisco Meraki MX250-HW is a high-performance cloud-managed security and SD-WAN appliance built for large campuses, head offices and organisations running extensive site-to-site VPN environments. It combines firewalling, SD-WAN routing, VPN concentration, intrusion prevention, content filtering and malware protection in a single 1U rackmount unit, managed centrally through the Meraki dashboard. 






With 10G WAN connectivity, flexible fibre and copper LAN options, and redundant power supplies, the MX250 is designed for larger networks that need strong throughput, simple remote management and room to scale. A separate Cisco Meraki licence is required to activate and manage the appliance. 






Key Features






7.5 Gbps maximum NAT firewall throughput 
4 Gbps maximum site-to-site VPN throughput 
Recommended for up to 2,000 client devices 
2x dedicated 10G SFP+ WAN uplink ports 
8x 10G SFP+ LAN ports, 8x 1G SFP LAN ports and 8x 1G RJ45 LAN ports 
Cloud-based management through the Cisco Meraki dashboard 
Meraki Auto VPN, client VPN and SD-WAN traffic steering 
Layer 7 firewalling, content filtering, IDS/IPS and Advanced Malware Protection 
Dual 250W AC power supplies for built-in power redundancy 
1U rackmount chassis for data centre, campus and comms room deployment





Benefits






Supports larger networks without forcing IT teams into complex command-line management 
10G WAN and LAN interfaces provide headroom for high-speed internet, fibre and aggregation links 
Meraki dashboard gives central visibility across sites, users, applications and security events 
Auto VPN simplifies secure connectivity between branches, campuses and data centres 
Redundant power supplies improve resilience in business-critical network environments 
Combines firewall, SD-WAN, VPN and security services into one managed appliance 
Suitable as either an edge security appliance or a VPN concentrator for large, distributed networks
Product Comparison 

Cisco Meraki MX105 - a lower-capacity 1U option for medium to large sites, with 3 Gbps stateful firewall throughput and fewer LAN interfaces. Better suited where 10G density and 2,000-device scale are not required. 
Cisco Meraki MX450 - the step-up model for the largest campuses and data centre edge deployments, offering higher throughput and more headroom for demanding environments. 
Fortinet FortiGate 400F - a comparable enterprise firewall from a different ecosystem, typically chosen by teams wanting local FortiOS management and advanced firewall tuning rather than Meraki’s cloud-managed approach.
Sizing and Capacity 

1U rackmount appliance measuring 483mm wide, 440mm deep and 44mm high, with a weight of 7.3kg. The MX250 is rated for up to 2,000 client devices and supports 7.5 Gbps maximum NAT firewall throughput, 2 Gbps next-generation firewall throughput and 4 Gbps site-to-site VPN throughput. 




Connectivity includes 2x 10G SFP+ WAN uplinks and 24 LAN ports split across 10G SFP+, 1G SFP and 1G RJ45. Power is supplied by 2x modular 250W AC PSUs, with an idle/max power load of approximately 105W / 190W. It is intended for standard 19-inch rack installation in campus comms rooms, server rooms and data centre environments.




Who It’s For 
Large businesses, multi-site organisations, education campuses, healthcare networks, retail groups and IT teams already standardising on Cisco Meraki. It is particularly well suited to environments that need high-throughput SD-WAN, centralised security management and large-scale VPN connectivity without adding operational complexity.




FAQs




Is a Cisco Meraki licence included? No. The MX250-HW is the hardware appliance only. A separate Enterprise, Advanced Security or Secure SD-WAN Plus licence is required. 
Can the MX250 be used as a VPN concentrator? Yes. It is designed for large VPN topologies and can be deployed as a VPN concentrator as well as an SD-WAN security appliance. 
Does it support 10G connectivity? Yes. It includes 2x 10G SFP+ WAN uplinks and 8x 10G SFP+ LAN ports. 
How many users or devices does it support? Cisco Meraki recommends the MX250 for up to 2,000 client devices, depending on the workload and security services enabled. 
What is the difference between the MX250 and MX450? The MX450 is the higher-capacity model, suited to larger and more demanding deployments. The MX250 offers strong enterprise performance but sits below the MX450 in the Meraki MX range. 
Does the MX250 have redundant power? Yes. It ships with dual 250W AC power supplies for power redundancy.

 

As per Cisco's UK policy we are unable to ship any Cisco products to any address other than a company registered address as shown on Companies House.

The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Hardware

10G SFP+ WAN interfaces for high-speed connectivity
1G/10G fibre and copper interfaces for flexible LAN connectivity
Stateful firewall throughput: 6 Gbps
Redundant power supplies and fans
Recommended maximum clients: 10,000
Cloud-based centralised management

Managed centrally over the Web
Classifies applications, users and devices
Zero-touch, self-provisioning deployments
Networking and security

Stateful firewall
Auto VPN™ self-configuring site-to-site VPN
Powerful SD-WAN capabilities
Active Directory integration
Identity-based policies
Client VPN (IPsec)
Smart link bonding
Traffic shaping and application management

Layer 7 application visibility and traffic shaping
Application prioritisation
Web caching
Choose WAN uplink based on traffic type
Advanced security services1

Content filtering
Geo-based IP firewall
Google SafeSearch and YouTube for Schools
Intrusion detection & prevention (IDS/IPS)
Advanced Malware Protection (AMP)
Cisco Threat Grid2
1 Requires Advanced Security License
2 Requires additional licensing for Threat Grid Cloud

Cloud Managed Architecture

Built on Cisco Meraki’s award-winning cloud-managed architecture, the MX is the industry’s only 100% cloud-managed Unified Threat Management appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.

Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and time-consuming training.



Ironclad Security

The MX platform has an extensive suite of security features including IPS, content filtering, web search filtering, anti-virus / anti-phishing, geo-IP based firewalling and IPsec VPN connectivity, while providing the performance required for modern, bandwidth-intensive networks.

Layer 7 fingerprinting technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.

The integrated Sourcefire SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.0 compliance. The MX also uses the Webroot BrightCloud® URL categorization database for CIPA / IWF compliant content-filtering, Kaspersky Safestream II® engine for anti-virus / anti-phishing, and MaxMind for geo-IP based security rules.

Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to  IT administrators.

Intelligent WAN Made Simple

Transport independence

Dual WAN ports with load balancing and failover enable the use of MPLS and redundant, commodity Internet connections, providing additional bandwidth and higher reliability.

3G / 4G failover

The Cisco Meraki MX supports 3G/4G service providers globally for WAN connection failover. Web caching temporarily stores video, media, and web documents, lowering bandwidth usage and accelerating the download speed of Internet content.

Application optimization

Layer 7 traffic shaping, application prioritization optimize the traffic for mission-critical applications and user experience.

Intelligent path control

Use dynamic VPN path selection to choose the best VPN uplink based on packet loss, latency, and jitter. Define policies for sending the right traffic through the appropriate path (e.g., send voice via MPLS, http via VPN over broadband).

Secure connectivity

Cisco Meraki’s unique auto provisioning site-to-site VPN (Auto VPN) connects branches securely with unmatched simplicity. MX Security Appliances automatically learn VPN parameters needed to establish and maintain VPN sessions using a 128-bit AES encryption. A unique cloud-enabled discovery mechanism enables automatic interconnection of VPN peers and routes across the WAN, and keeps them updated in dynamic IP environments.  As per Cisco's UK policy we are unable to ship any Cisco products to any address other than a company registered address as shown on Companies House.