Datasheet | MX
Industry-leading Cloud Management
• UnifiedWAN,LAN,andwirelessLANmanagementthroughaweb-baseddashboard.
• Templatebasedsettingsscaleeasilyfromsmalldeploymentstolarge,multi-sitedeploymentswithtensofthousandsofdevices.
• Role-basedadministration,emailalertsonconfigurationchange,connectivityissuesandpowerloss,auditablechangelogs.
• Summaryreportswithuser,device,andapplicationusagedetailsarchivedinthecloud.
Branch Gateway Services
• Built-inDHCP,NAT,QoS,andVLANmanagementservices.
• Webcaching:acceleratesfrequentlyaccessedcontent.
• Linkbonding:combinesmultipleWANlinksintoasinglehigh-speedinterface,withpoliciesforQoS,trafficshaping,andfailover.
• Layer3failover:automaticdetectionoflayer2andlayer3outagesandfastfailover,including3G/4GUSBmodems.
• WANoptimization:dataredundancyelimination,protocoloptimization,andcompressionprovidebandwidthsavingsupto99%.
Feature-rich Unified Threat Management (UTM) Capabilities
• Application-awaretrafficcontrol:setbandwidthpoliciesbasedonLayer7applicationtype(e.g.,YouTube,Skype,P2P).
• Contentfiltering:CIPA-compliantcontentfilter,safe-seachenforcement(Google/Bing),andYouTubeforSchools.
• Intrusionprevetation:PCI-compliantIPSsensorusingindustry-leadingSNORT®signaturedatabasefromSourcefire.
• Anti-virusandanti-phishing:flow-basedprotectionenginepoweredbyKaspersky.
• Identity-basedsecuritypoliciesandapplicationmanagement.
Resilient Site-to-Site VPN with 4G Failover
• AutoVPN:automaticroutingtablegeneration,IKE/IPsecsetupandkeyexchangeviaCiscoMeraki’ssecurecloud.
• AutomaticfailovertosecondaryWANlinkor4Gconnection.
• Interoperateswithstandards-basedIPsecVPNs.
• AutomatedMPLStoVPNfailover.
• ClientVPN:L2TPIPsecsupportfornativeWindows,MacOSX,iPadandAndroidclientswithnoper-userlicensingfees.
OverviewCiscoMerakiMXSecurityAppliancesisidealfororganizationswithlargenumbersofdistributedsites.SincetheMXis100%cloudmanaged,installationandremotemanagementissimple.TheMXhasacomprehensivesuiteofnetworkservices,eliminatingtheneedformultipleappli-ances.Servicesincludeanext-generationfirewall,contentfiltering,websearchfiltering,SNORT®basedintrusionprevention,webcaching,WANoptimization,multipleWANuplinksand4Gfailover.
MXCloudManagedSecurityApplianceSeries
Cisco Systems, Inc. | 500 Terry A. Francois Blvd, San Francisco, CA 94158 | (415) 432-1000 | [email protected]
CloudManagedArchitectureBuiltonCiscoMeraki’saward-winningcloud-managedarchitecture,theMXistheonly100%cloud-managedUnifiedThreatManagementappliance.MXappliancesself-provision,automaticallypullingpoliciesandconfigurationsettingsfromthecloud.Powerfulremotetoolsprovidenetwork-widevisibilityandcontrol,andenableadministrationwithouton-sitenetworkingexpertise.Cloudservicesdeliverseamlessfirmwareandsecuritysignatureupdates,automaticallyestablishsite-to-siteVPNtunnels,andprovide24x7networkmonitoring.Moreover,theMX’sbrowser-basedmanagementdashboardcompletelyeliminatestheneedfortraining.
Redundant Power
Reliable,energy
efficientdesign
WAN Optimization
1TBSATAdisk
Multiple Uplink Ports
Linkbonding/failover
3G/4G Modem Support
Automaticwirelessfailover
10Gb Ethernet/SFP+ Ports
Forswitchconnectivity
Enhanced CPU
Layer3-7firewall
andtrafficshaping
Additional Memory
Forcontentfiltering
Inside the Cisco Meraki MX MX400shown,featuresvarybymodel
IroncladSecurityforEdgeNetworksTheMXhardwareplatformispurpose-builtforLayer7deeppacketinspection,withadvancedsecurityfeaturesincludingIPS,contentfiltering,websearchfiltering,anti-virus/anti-phishing,andIPsecVPNconnectivity,whileprovidingthethroughputandcapacityformodern,bandwidth-intensivenetworks.
Layer7fingerprintingtechnologyletsadministratorsidentifyunwantedcontentandapplicationsandpreventrecreationalappslikeBitTorrentfromwastingpreciousbandwidth.
TheintegratedSourcefireSNORT®enginedeliverssuperiorintrusionpreventioncoverage,akeyrequirementforPCI2.0compliance.TheMXalsousestheWebroot®BrightCloudURLcategorizationdatabaseforCIPA/IWFcompliantcontent-filtering,andKaspersky®SafeStreamengineforanti-virus/anti-phishingfiltering.
Bestofall,theseindustry-leadingLayer7securityenginesandsignaturesarealwayskeptup-to-dateviathecloud,simplifyingnetworksecuritymanagementandprovidingpeace-of-mindtoITadministrators.
OrganizationLevelThreatAssessmentCiscoMerakiCloudManagementArchitecture
Cisco Systems, Inc. | 500 Terry A. Francois Blvd, San Francisco, CA 94158 | (415) 432-1000 | [email protected]
IncreasedReliabilitywithMultipleWANLinksand3G/4GFailoverMultipleWANportswithbalancingandfailoverenabletheuseofredundantcommodityInternetconnections,providingadditionalbandwidthandhigherreliability.Forremotesiteswheremultiplewirelineprovidersaredifficulttosecure,theCiscoMerakiMXcanfailoverto3G/4GwirelessInternetconnections.
ReduceBandwidthCostswithWebCachingandWANOptimizationWebcachingtemporarilystoresvideo,media,andwebdocuments,loweringbandwidthusageandacceleratingthedownloadspeedofInternetcontent.
WANoptimizationdramaticallyimprovesapplicationperformanceandreducebandwidthrequirementsatremotesites.AllCiscoMerakiMXappliancesincludeWANoptimizationatnoadditionalcharge.TheMX60andMX60WfeaturebasicWANoptimization,whiletheMX80,MX100,MX400,andMX600featureadvancedWANoptimization.
BasicWANoptimizationincludeslinkcompressionandprotocoloptimization.LinkcompressionreducesTCPtrafficby20%-30%,andproto-coloptimizationacceleratesWindowsFileSharing(CIFS),FTP,andHTTPtransfers.
AdvancedWANoptimizationaddshigh-capacitybyte-levelcachingforadditionalperformanceimprovements,employingauniversaldatastoretomaximizetheeffectivenessofthecache.
AutoConfiguringSite-to-SiteVPN NextGenApplicationFirewallandTrafficVisibility
UserandDeviceFingerprints IdentityBasedPolicyManagement
WANOptimization LinkBondingandFailover
Cisco Systems, Inc. | 500 Terry A. Francois Blvd, San Francisco, CA 94158 | (415) 432-1000 | [email protected]
Accessories / OpticsSupportedCiscoMerakiaccessorymodulesforMX100,MX400andMX600.
Note:Pleaserefertomeraki.comforadditionalsingle-modeandmulti-modefibertransceivermodules
InterfaceModulesforMX400andMX600
TheMX60WintegratesCiscoMeraki’saward-winningwirelesstech-nologywiththepowerfulMXnetworksecurityfeaturesinacompactformfactoridealforbranchofficesorsmallenterprises:
• 1x802.11b/g/nor802.11a/nradio,3x3MIMOwith3spatialstreams
• Unifiedmanagementofnetworksecurityandwireless
• Integratedenterprisesecurityandguestaccess
• Application-awaretrafficanalysisandtrafficshaping
AccessoriesTheCiscoMerakiMX100,MX400,andMX600modelssupportpluggableopticsforhigh-speedbackboneorlinkaggregationconnectionsbetweenwiringclosetsortoaggregationswitches.CiscoMerakioffersseveralstandards-basedGigabitand10Gigabitpluggablemodules.Eachappliancehasalsobeentestedforcompatibilitywithseveralthird-partymodules.
Pluggable(SFP)OpticsforMX100,MX400,MX600
Model Description
IM-8-CU-1GB CiscoMeraki8x1GbECopperInterfaceModuleforMX400andMX600
IM-8-SFP-1GB CiscoMeraki8x1GbESFPInterfaceModuleforMX400andMX600
IM-2-SFP-10GB CiscoMeraki2x10GbESFP+InterfaceModuleforMX400andMX600
MA-SFP-1GB-SX CiscoMeraki1GbESFPSXFiberModule(1000BASE-SX,range:550m)
MA-SFP-10GB-SR CiscoMeraki10GbEShortRangeSFP+Module(10GBASE-SR,range:400m)
MA-CBL-TA-1M CiscoMeraki10GbETwinaxCablewithSFP+Connectors(10GSFP+Cu,range:1m)
MX60WwithIntegratedWireless
MX60WSecurityAppliance
TheZ1TelecommuterGatewayextendsthepoweroftheCiscoMerakidashboardandcloud-basedcentralizedmanagementtoemployees,ITstaffandexecutivesworkingfromhome.
Usingthepatent-pendingCiscoMerakiAutoVPN,AdministratorscanextendnetworkservicesincludingVoIPandremotedesktop(RDP)toremoteemployeeswithasingle-click,providewiredandwirelessaccess,andincreaseend-userpro-ductivitythroughLayer7trafficshapingandprioritization.
• 1x802.11b/g/nradio,1x802.11a/nradio,2x2MIMOwith2spatialstreams
• Site-to-site(IPsec)VPNusingCiscoMerakiAutoVPN
• Layer7applicationvisibilityandtrafficshaping
Fordetailedspecs,pleaseseetheZ1datasheet
Z1TelecommuterGateway
Z1TelecommuterGateway
Cisco Systems, Inc. | 500 Terry A. Francois Blvd, San Francisco, CA 94158 | (415) 432-1000 | [email protected]
LifetimeWarrantywithNext-dayAdvancedReplacementCiscoMerakiMXappliancesincludealimitedlifetimehardwarewarrantythatprovidesnext-dayadvancehardwarereplacement.CiscoMeraki’ssimplifiedsoftwareandsupportlicensingmodelalsocombinesallsoftwareupgrades,centralizedsystemsmanagement,andphonesupportunderasingle,easy-to-understandmodel.Forcompletedetails,pleasevisitmeraki.cisco.com/support.
MX60 / MX60W MX80 MX100 MX400 MX600
Recommendedusecases
Smallretailbranch,smallclinic
Mediumsizedbranch
Largebranch K-12firewall/VPNconcentrator
LargeK-12firewall,VPNconcentrator
Recommendedmaxusers
25 100 500 2,000 10,000
StatefulFirewallThroughput
100Mbps 250Mbps 500Mbps 1Gbps 2Gbps
AdvancedSecurityThroughput
50Mbps 125Mbps 250Mbps 325Mbps 650Mbps
MaximumVPNsessions 25 50 250 2,000 5,000
Interfaces 5xGbE 5xGbE 9xGbE
2xGbE(SFP)
4xGbE 4xGbE
AdditionalInterfaceModules
N/A N/A N/A 8xGbE(RJ45)8xGbE(SFP)4x10GbE(SFP+)(2modulesmax)
8xGbE(RJ45)8xGbE(SFP)4x10GbE(SFP+)(2modulesmax)
WebCaching N/A Yes Yes Yes Yes
WANOptimization Basic Advanced Advanced Advanced Advanced
HardDrive* N/A 1TB 1TB 1TB 4x1TB(RAID)
USBfor3G/4GFailover Yes Yes Yes Yes Yes
Mounting Desk/Wall 1Urack 1Urack 1Urack 2Urack
Dimensions 9.5”x6.7”x1.14”(239mmx170mmx34mm)
19.0”x10.0“x1.75”(483mmx254mmx44mm)
19.0”x10.0“x1.75”(483mmx254mmx44mm)
19.0”x22.0“x1.75”(483mmx559mmx44mm)
19.0”x22.0“x3.5”(483mmx559mmx89mm)
Weight 3.04lb(1.4kg) 8lb(3.6kg) 9lb(4.1kg) 33lb(15.0kg) 53lb(24.0kg)
PowerSupply 18WDC(included) 100-220V50/60HzAC
100-220V50/60HzAC
100-220V50/60HzAC(dual)
100-220V50/60HzAC(dual)
PowerLoad(idle/max) 4W/10W(MX60)6W/13W(MX60W)
26W/32W 30W/55W 123W/215W 132W/226W
OperatingTemperature 32°Fto104°F(0°Cto40°C)
32°Fto104°F(0°Cto40°C)
32°Fto104°F(0°Cto40°C)
32°Fto104°F(0°Cto40°C)
32°Fto104°F(0°Cto40°C)
Humidity 5%to95% 5%to95% 5%to95% 5%to95% 5%to95%
ProductOptions
*Note:HarddriveisusedforwebcachingandadvancedWANOptimization,whichincludesbyte-levelobjectcaching.
Cisco Systems, Inc. | 500 Terry A. Francois Blvd, San Francisco, CA 94158 | (415) 432-1000 | [email protected]
Specifications
Management
ManagedviathewebusingtheCiscoMerakidashboard
Singlepane-of-glassintomanagingwiredandwirelessnetworks
Zero-touchremotedeployment(nostagingneeded)
Automaticfirmwareupgradesandsecuritypatches
Templatesbasedmulti-networkmanagement
Org-leveltwo-factorauthenticationandsinglesign-on
Rolebasedadministrationwithchangeloggingandalerts
Monitoring and Reporting
Throughput,connectivitymonitoringandemailalerts
Detailedhistoricalper-portandper-clientusagestatistics
Applicationusagestatistics
Org-levelchangelogsforcomplianceandchangemanagement
VPNtunnelandlatencymonitoring
Networkassetdiscoveryanduseridentification
Periodicemailswithkeyutilizationmetrics
Syslogintegration
Remote Diagnostics
Liveremotepacketcapture
Real-timediagnosticandtroubleshootingtools
Aggregatedeventlogswithinstantsearch
Network and Security Services
Statefulfirewall,1:1NAT,DMZ
Identity-basedpolicies
AutoVPN:Automatedsite-to-site(IPsec)VPN,forhub-and-spokeormeshtopologies
Client(IPsecL2TP)VPN
MultipleWANIP,PPPoE,NAT
VLANsupportandDHCPservices
Staticrouting
Useranddevicequarantine
WAN Performance Management
Webcaching
WANlinkaggregation
AutomaticLayer3failover(includingVPNconnections)
3G/4GUSBmodemfailover
Applicationlevel(Layer7)trafficanalysisandshaping
AbilitytochooseWANuplinkbasedontraffictype
Note:WebcachingisnotavailableontheMX60orMX60Wmodels.
WAN Optimization
Byte-levelcaching
Universaldatastorewithdataredundancyelimination
TCPtransportcompressionandoptimization
Protocoloptimization(CIFS,HTTP,FTP)
Note:MX60/MX60WhavebasicWANoptimization,whichincludesprotocoloptimizationandlinkcompression,butlimitedcaching.
Advanced Security Services
Contentfiltering(WebrootBrightCloudCIPAcompliantURLdatabase)
Websearchfiltering(includingGoogle/BingSafeSearch)
YouTubeforSchools
Intrusion-preventionsensor(SourcefireSNORT®based)
Anti-virusengineandanti-phishingfiltering(KasperskySafeStreamIIengine)
Note:AdvancedsecurityservicesrequireAdvancedSecuritylicense.
Integrated Wireless
1x802.11a/b/g/n(2.4GHzor5GHz)
Maxdatarate450Mbit/s
3x3MIMOwith3spatialstreams,beamforming
3externaldual-banddipoleantennas(connectortype:RP-SMA)
Antennagain:[email protected],3.5dBi@5GHz
WEP,WPA,WPA2-PSK,WPA2-Enterprisewith802.1Xauthentication
Regulatory:FCC(US),IC(Canada),CE(Europe),C-Tick(Australia/NewZealand),RoHS
Note:IntegratedwirelessisonlyavailableontheMX60Wmodel.
Regulatory
FCC(US)
CB(IEC)
CISPR(Australia/NewZealand)
Warranty
Fulllifetimehardwarewarrantywithnext-dayadvancedreplacementincluded.
Cisco Systems, Inc. | 500 Terry A. Francois Blvd, San Francisco, CA 94158 | (415) 432-1000 | [email protected]
Model License Description
MX60-HW LIC-MX60-ENT-1YR
LIC-MX60-ENT-3YR
LIC-MX60-ENT-5YR
LIC-MX60-SEC-1YR
LIC-MX60-SEC-3YR
LIC-MX60-SEC-5YR
CiscoMerakiMX60,1yearEnterpriseLicenseandSupport
CiscoMerakiMX60,3yearEnterpriseLicenseandSupport
CiscoMerakiMX60,5yearEnterpriseLicenseandSupport
CiscoMerakiMX60,1yearAdvancedSecurityLicenseandSupport
CiscoMerakiMX60,3yearAdvancedSecurityLicenseandSupport
CiscoMerakiMX60,5yearAdvancedSecurityLicenseandSupport
MX60W-HW LIC-MX60W-ENT-1YR
LIC-MX60W-ENT-3YR
LIC-MX60W-ENT-5YR
LIC-MX60W-SEC-1YR
LIC-MX60W-SEC-3YR
LIC-MX60W-SEC-5YR
CiscoMerakiMX60W,1yearEnterpriseLicenseandSupport
CiscoMerakiMX60W,3yearEnterpriseLicenseandSupport
CiscoMerakiMX60W,5yearEnterpriseLicenseandSupport
CiscoMerakiMX60W,1yearAdvancedSecurityLicenseandSupport
CiscoMerakiMX60W,3yearAdvancedSecurityLicenseandSupport
CiscoMerakiMX60W,5yearAdvancedSecurityLicenseandSupport
MX80-HW LIC-MX80-ENT-1YR
LIC-MX80-ENT-3YR
LIC-MX80-ENT-5YR
LIC-MX80-SEC-1YR
LIC-MX80-SEC-3YR
LIC-MX80-SEC-5YR
CiscoMerakiMX80,1yearEnterpriseLicenseandSupport
CiscoMerakiMX80,3yearEnterpriseLicenseandSupport
CiscoMerakiMX80,5yearEnterpriseLicenseandSupport
CiscoMerakiMX80,1yearAdvancedSecurityLicenseandSupport
CiscoMerakiMX80,3yearAdvancedSecurityLicenseandSupport
CiscoMerakiMX80,5yearAdvancedSecurityLicenseandSupport
MX100-HW LIC-MX100-ENT-1YR
LIC-MX100-ENT-3YR
LIC-MX100-ENT-5YR
LIC-MX100-SEC-1YR
LIC-MX100-SEC-3YR
LIC-MX100-SEC-5YR
CiscoMerakiMX100,1yearEnterpriseLicenseandSupport
CiscoMerakiMX100,3yearEnterpriseLicenseandSupport
CiscoMerakiMX100,5yearEnterpriseLicenseandSupport
CiscoMerakiMX100,1yearAdvancedSecurityLicenseandSupport
CiscoMerakiMX100,3yearAdvancedSecurityLicenseandSupport
CiscoMerakiMX100,5yearAdvancedSecurityLicenseandSupport
MX400-HW LIC-MX400-ENT-1YR
LIC-MX400-ENT-3YR
LIC-MX400-ENT-5YR
LIC-MX400-SEC-1YR
LIC-MX400-SEC-3YR
LIC-MX400-SEC-5YR
CiscoMerakiMX400,1yearEnterpriseLicenseandSupport
CiscoMerakiMX400,3yearEnterpriseLicenseandSupport
CiscoMerakiMX400,5yearEnterpriseLicenseandSupport
CiscoMerakiMX400,1yearAdvancedSecurityLicenseandSupport
CiscoMerakiMX400,3yearAdvancedSecurityLicenseandSupport
CiscoMerakiMX400,5yearAdvancedSecurityLicenseandSupport
MX600-HW LIC-MX600-ENT-1YR
LIC-MX600-ENT-3YR
LIC-MX600-ENT-5YR
LIC-MX600-SEC-1YR
LIC-MX600-SEC-3YR
LIC-MX600-SEC-5YR
CiscoMerakiMX600,1yearEnterpriseLicenseandSupport
CiscoMerakiMX600,3yearEnterpriseLicenseandSupport
CiscoMerakiMX600,5yearEnterpriseLicenseandSupport
CiscoMerakiMX600,1yearAdvancedSecurityLicenseandSupport
CiscoMerakiMX600,3yearAdvancedSecurityLicenseandSupport
CiscoMerakiMX600,5yearAdvancedSecurityLicenseandSupport
OrderingGuideToplaceanorderforanMXappliance,pairaspecifichardwaremodelwithasinglelicense(whichincludescloudservices,softwareupgradesandsupport).Forexample,toorderanMX90with3yearsofAdvancedSecuritylicense,orderanMX90-HWwithLIC-MX90-SEC-3YR.Lifetimewarrantywithadvancedreplacementisincludedonallhardwareatnoadditionalcost.
*Note:ForeachMXproduct,additional7or10yearEnterpriseorAdvancedSecuritylicensingoptionsarealsoavailable(ex:LIC-MX100-SEC-7YR).