Network Security & Firewalls

The Cisco Meraki MX are multifunctional security and SD-WAN enterprise appliances with a wide set of capabilities to address multiple use cases-from an all-in-one device. Organizations of all sizes and across all industries rely on the MX to deliver secure connectivity to hub locations or multi-cloud environments, as well as application quality of experience (QoE), through advanced analytics with machine learning.

The MX is 100% cloud-managed, so installation and remote management is truly zero touch, making it ideal for distributed branches, campuses, and data center locations. Natively integrated with a comprehensive suite of secure network and assurance capabilities, the MX eliminates the need for multiple appliances. These capabilities include application-based firewalling, content filtering, web search filtering, SNORT®-based intrusion detection and prevention, Cisco Advanced Malware Protection (AMP), site-to-site Auto VPN, client VPN, WAN and cellular failover, dynamic path selection, web application health, VoIP health, and more. SD-WAN can be easily be extended to deliver optimized access to resources in public and private cloud environments with virtual MX appliances (vMX). Public clouds supported with vMX include Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform, and Alibaba Cloud and private cloud support through Cisco NFVIS.

Advanced quality of experience (QoE) analytics

• End-to-end health of web applications at-a-glance across the LAN, WAN, and application server
• Machine-learned smart application thresholds autonomously applied to identify true anomalies based on past behavioral patterns
• Monitor the health of all MX WAN links, including cellular, across your entire organization
• Detailed hop-by-hop VoIP performance analysis across all uplinks

• Next-gen layer 7 firewall for identity-based security policies and application management
• Advanced Malware Protection with sandboxing; file reputationbased protection engine powered by Cisco AMP
• Intrusion prevention: PCI-compliant IPS sensor using industry-leading SNORT® signature database from Cisco
• Granular and automatically updated category-based content filtering
• Other capabilities: SSL decryption/inspection, data loss prevention (DLP), cloud access security broker (CASB), SaaS tenant restrictions, granular app control, file type control

• Built-in DHCP, NAT, QoS, and VLAN management services
• Web caching: accelerates frequently accessed content
• Load balancing: combines multiple WAN links into a single high-speed interface, with policies for QoS, traffic shaping, and failover

Cisco Meraki MX Security Appliances are ideal for organizations considering a Unified Threat Managment (UTM) solution, for distributed sites, campuses or datacenter VPN concentration. Since the MX is 100% cloud managed, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include SD-WAN capabilities, application-based firewalling, content filtering, web search filtering, SNORT® based intrusion detection and prevention, Cisco Advanced Malware Protection (AMP), web caching, 4G cellular failover and more. Auto VPN and SD-WAN features are available on our hardware and virtual appliances, configurable in Amazon Web Services.

Cisco Meraki MX Security Appliances are ideal for organizations considering a Unified Threat Managment (UTM) solution, for distributed sites, campuses or datacenter VPN concentration. Since the MX is 100% cloud managed, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include SD-WAN capabilities, application-based firewalling, content filtering, web search filtering, SNORT® based intrusion detection and prevention, Cisco Advanced Malware Protection (AMP), web caching, 4G cellular failover and more. Auto VPN and SD-WAN features are available on our hardware and virtual appliances, configurable in Amazon Web Services.

FEATURE-RICH UNIFIED THREAT MANAGEMENT (UTM) CAPABILITIES

• Application-aware traffic control: bandwidth policies for Layer 7 application types (e.g., block YouTube, prioritize Skype, throttle BitTorrent).
• Content filtering: CIPA-compliant content filter, safe-seach enforcement (Google/Bing) , and YouTube for Schools.
• Intrusion prevention: PCI-compliant IPS sensor using industry-leading SNORT® signature database from Cisco Sourcefire.
• Advanced Malware Protection: file reputation-based protection engine powered by Cisco AMP.
• Identity-based security policies and application management.

INDUSTRY-LEADING CLOUD MANAGEMENT

• Unified firewall, switching, wireless LAN, and mobile device management through an intuitive web-based dashboard.
• Template based settings scale easily from small deployments to tens of thousands of devices.
• Role-based administration, configurable email alerts for a variety of important events, and easily auditable change logs.
• Summary reports with user, device, and application usage details archived in the cloud.

INTELLIGENT SITE-TO-SITE VPN WITH MERAKI SD-WAN

• Auto VPN: automatic VPN route generation using IKE/IPsec setup. Runs on physical MX appliances and as a virtual instance within the Amazon AWS cloud services.
• SD-WAN with active / active VPN, policy-based-routing, dynamic VPN path selection and support for application-layer performance profiles to ensure prioritization of the applications types that matter.
• Interoperates with all IPsec VPN devices and services.
• Automated MPLS to VPN failover within seconds of a connection failure
• Client VPN: L2TP IPsec support for native Windows, Mac OS X, iPad and Android clients with no per-user licensing fees.

BRANCH GATEWAY SERVICES

• Built-in DHCP, NAT, QoS, and VLAN management services.
• Web caching: accelerates frequently accessed content.
• Load balancing: combines multiple WAN links into a single highspeed interface, with policies for QoS, traffic shaping, and failover.
• Smart connection monitoring: automatic detection of layer 2 and layer 3 outages and fast failover, including 3G/4G USB modems.

Cisco Meraki MX Security Appliances are ideal for organizations with large numbers of distributed sites. Since the MX is 100% cloud managed, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT® based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.