Security & SD-Wan
Firewalls, Software-Defined Wan remote working devices
100% centralized cloud management for security, networking, and application control
Safety, Fast.
Cisco Meraki Security Appliances can be remotely deployed in minutes using zero-touch cloud provisioning. Security settings are simple to synchronize across thousands of sites using templates. Auto VPN technology securely connects branches in 3 clicks, through an intuitive, web-based dashboard.
Comprehensive Security in a Single Box
Every Meraki Security Appliance supports several features, like a stateful firewall and integrated Sourcefire intrusion prevention (IPS) engine, to keep networks secure. Threat definitions and filter lists are seamlessly updated, ensuring every site has bleeding-edge protection from the latest vulnerabilities and troublesome websites.
Built-in SD-WAN
Software-defined WAN capabilities in every security appliance reduce operational costs and improve resource usage for multi-site deployments, allowing network administrators to use available bandwidth more efficiently and ensure the highest possible level of performance for critical applications without sacrificing security or data privacy.
Intuitive Centralized Management
The Meraki dashboard enables network administrators to view networked clients, bandwidth consumption, and application usage across all sites—and push policies to block, shape, or whitelist activity to optimize performance and user experience. Deep visibility and control provides real insight from any Internet-accessible device, anytime, anywhere.
The Cisco Meraki wireless solution includes a complete, robust feature set right out of the box. No additional purchase required.
Identity-Based Firewall
Automatically assigns firewall and traffic shaping rules, VLAN tags, and bandwidth limits to enforce the right policies for each class of users.
Intrusion Prevention
Protects critical network resources from the latest security threats and vulnerabilities.
Auto VPN
Securely connects branch locations using mesh or hub-and-spoke topologies. Provides simple VPN access into Amazon Web Services.
Content Filtering
Block undesirable web content across 70+ categories, and leverage cloud lookups to filter billions of URLs.
Advanced Malware Protection
Protect your network against malware using the latest threat intelligence, and identify previously unknown malicious files with retrospective detection.
MX64 (W) EoS |
MX67 (W/C) |
MX68 (W/CW) |
||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Lan Ports | 4x RJ45 1G ports | 4x RJ45 1G ports |
12: 10x RJ45 1G ports 2x RJ45 1G ports PoE+ ports |
10: 8 x RJ45 / 1 Gigabit Ethernet LAN ports 2 x RJ45 / 1 Gigabit Ethernet LAN ports with PoE+ capabilities |
- |
8 x RJ45 1GbE ports 2 x SFP ports |
4 x RJ45 1GbE ports
2 x SFP+ 10G ports |
- |
4 x RJ45 1G ports
2x SFP+ 10G ports |
8x configurable GbE(RJ45)
8x GbE SFP 8x 10GbE SFP+ connections |
8x configurable GbE(RJ45)
8x GbE SFP 8x10GbE SFP+ connections |
4 × 1GbE RJ45 LAN ports plus 1 × 2.5GbE LAN port (5 total LAN ports) | 4 × 1GbE RJ45 LAN ports | 10 × 1GbE RJ45 LAN ports plus 1 × 2.5GbE LAN port (11 total LAN ports) | 10 × 1GbE RJ45 LAN ports | 10 × 1GbE RJ45 LAN ports | 2 × 10Gb SFP+ LAN ports, 4 × 5Gb mGig RJ45 LAN ports, 2 × 1Gb RJ45 LAN ports (8 LAN ports total) | 2 × 10GbE SFP+ LAN ports, 8 × 1GbE SFP LAN ports |
| Dual WAN Links | Yes (reconfigure 1 of LAN ports) | Yes (reconfigure 1 of LAN ports) | Yes (reconfigure 1 of LAN ports) |
3 dedicated WAN uplinks 1 x GbE SFP port 2 x RJ45 GbE ports |
Yes |
4 dedicated WAN uplinks: 2 x 1GbE SFP ports and 2 x RJ45 1GbE ports |
4 x dedicated WAN uplinks: 2 x 10G SFP+ ports and 2 x RJ45 2.5G mGig ports |
Yes |
4 x dedicated WAN uplinks: 2 x 10G SFP+ ports and 2 x RJ45 2.5G mGig ports |
2x dedicated uplink SFP+10GbE ports | 2x dedicated uplink SFP+10GbE ports | 2 × 2.5GbE RJ45 WAN ports | 2 dedicated 2.5GbE WAN ports plus integrated cellular WAN (3 uplinks total) | 2 × 2.5GbE RJ45 WAN ports | 2 dedicated 2.5GbE WAN ports plus integrated cellular WAN (3 uplinks total) | 2 dedicated 2.5GbE WAN ports | 2 × 10Gb SFP+ WAN ports (up to 3 WAN links with Multi-WAN mode) | 2 × 25GbE SFP28 WAN ports |
| 3G/4G failover | USB port | USB port | USB port | USB port | USB port | USB port | USB port | USB port | USB port | USB port | USB port | No integrated cellular failover; supported via external cellular gateway connected to PoE-enabled WAN port | Yes (via integrated cellular modem) | No integrated cellular failover; supported via external cellular gateway connected to PoE-enabled WAN port | Yes (via integrated cellular modem) | No integrated cellular failover; supported via external cellular gateway connected to PoE-enabled WAN port | No integrated cellular failover; supported via external cellular gateway connected to PoE-enabled WAN port | No integrated cellular failover; supported via external cellular gateway connected to PoE-enabled WAN port |
| Built-in LTE; modern model available | - | MX67C | MX67CW | - | - | - | - | - | - | - | - | No built-in LTE. Modern cellular version available as C8111-C-G2 with integrated 5G/LTE modem. | Yes – 5G SA & CAT20 LTE modem | No built-in LTE. Modern cellular version available as C8111-C-G2 with integrated 5G/LTE modem. | Yes – 5G SA & CAT20 LTE modem | - | - | - |
| Built-in wireless available | MX64W | MX67W |
MX68W
MX68CW |
- | - | - | - | - | - | - | - | - | - | - | Yes – Wi-Fi 6 (2x2 MU-MIMO) | Yes – Wi-Fi 6 (2x2 MU-MIMO) | - | - |
| Built-in PoE+ model available | - | - | 2 PoE+ ports all MX68 models | - | - | - | - | - | - | - | - | Yes – includes PoE-capable ports. | Yes – 1 × 1GbE UPoE (45W) LAN port and PoE-capable WAN port | Yes – includes PoE-capable ports. | Yes – 3 × 1GbE UPoE (45W) LAN ports and PoE-capable WAN port | Yes – 3 × 1GbE UPoE (45W) LAN ports and PoE-capable WAN port | Yes – optional 230W AC PSU provides up to 120W PoE budget (supported in later 26.1 release) | - |
| WAN fiber connectivity | - | - | - | SFP | SFP | SFP | SFP+ | SFP | SFP+ | SFP, SFP+ | SFP, SFP+ | - | - | - | - | - | 10Gb SFP+ WAN interfaces support fibre transceivers | Dual 25GbE SFP28 WAN interfaces support fiber transceivers |
| Dual power supply | - | - | - | - | - | - | - | - | Yes | Yes | Yes | - | - | - | - | - | 2 × 110W AC power supplies included as standard | 2 × 250W AC power supplies included as standard |
| Form factor | Desktop | Desktop | Desktop | Desktop | 1U | 1U | 1U | 1U | 1U | 1U | 1U | Desktop or wall mount | Desktop / Wall Mount | Desktop or wall mount | Desktop / Wall Mount | Desktop / Wall Mount | 1RU | 1U |
| HTTPS inspection* | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | - | Yes | - | - | - | Yes |
| Max throughput with all security features enabled | 200 Mbps | 300 Mbps | 300 Mbps | 500 Mbps | 320 Mbps | 500 Mbps | 1 Gbps | 650 Mbps | 1.5 Gbps | 2 Gbps | 4 Gbps | 1.2 Gbps | - | 1.2 Gbps | - | - | 4 Gbps | 8 Gbps |
| Max stateful (L3) firewall throughput in passthrough mode | 250 Mbps | 450 Mbps | 450 Mbps | 1 Gbps | 500 Mbps | 1 Gbps | 2 Gbps | 750 Mbps | 3 Gbps | 4 Gbps | 6 Gbps | 2 Gbps | - | 2 Gbps | - | - | 10 Gbps | 20 Gbps |
| Max stateful (L3) firewall throughput in NAT mode | 200 Mbps | 450 Mbps | 450 Mbps | 1 Gbps | 500 Mbps | 1 Gbps | 2 Gbps | 750 Mbps | 3 Gbps | 4 Gbps | 6 Gbps | 2 Gbps | 2 Gbps | 2 Gbps | 2 Gbps | 2 Gbps | 10 Gbps | 20 Gbps |
| Max site-to-site VPN throughput | 100 Mbps | 200 Mbps | 200 Mbps | 500 Mbps | 250 Mbps | 500 Mbps | 800 Mbps | 500 Mbps | 1 Gbps | 1 Gbps | 2 Gbps | 1.2 Gbps | 1200 Mbps (listed as Max VPN Throughput) | 1.2 Gbps | 1200 Mbps (listed as Max VPN Throughput) | 1200 Mbps (listed as Max VPN Throughput) | 5 Gbps | 10 Gbps |
| Max site-to-site VPN tunnels1 | 50 | 50 | 50 | 75 | 100 | 200 | 500 | 250 | 1,000 | 3,000 | 5,000 | - | - | - | - | - | - | 3,500 |
| Recommended maximum site-to-site VPN tunnels2 | 50 | 50 | 50 | 75 | 100 | 100 | 250 | 250 | 500 | 1,000 | 1,500 | - | - | - | - | - | 1,500 | - |
| Recommended maximum client VPN tunnels | 50 | 50 | 50 | 75 | 100 | 100 | 250 | 250 | 250 | 5003 | 5003 | - | - | - | - | - | - | - |
| WAN failover 4 | <5 seconds | <5 seconds | <5 seconds | <5 seconds | <5 seconds | <5 seconds | <5 seconds | <5 seconds | <5 seconds | <5 seconds | <5 seconds | Yes – Automatic WAN Failover | Yes – Automatic WAN Failover | Yes – Automatic WAN Failover | Yes – Automatic WAN Failover | Yes – Automatic WAN Failover | Yes | Yes |
| Auto VPN tunnel failover 4 | Sub-second | Sub-second | Sub-second | Sub-second | Sub-second | Sub-second | Sub-second | Sub-second | Sub-second | Sub-second | Sub-second | Yes – supported through Meraki AutoVPN and SD-WAN | Supported via Meraki AutoVPN / SD-WAN features, no scale figures provided | Yes – supported through Meraki AutoVPN and SD-WAN | Supported via Meraki AutoVPN / SD-WAN features, no scale figures provided | Supported via Meraki AutoVPN / SD-WAN features, no scale figures provided | Yes | Yes |
| Dynamic path selection 4 | Sub-second | Sub-second | Sub-second | Sub-second | Sub-second | Sub-second | Sub-second | Sub-second | Sub-second | Sub-second | Sub-second | Yes – SD-WAN with WAN Link Balancing and path selection over AutoVPN | Supported via SD-WAN over Meraki AutoVPN | Yes – SD-WAN with WAN Link Balancing and path selection over AutoVPN | Supported via SD-WAN over Meraki AutoVPN | Supported via SD-WAN over Meraki AutoVPN | Yes | Yes (Meraki SD-WAN with policy-based path selection) |
| Recommended users | 50 | 50 | 50 | 200 | 200 | 500 | 500 | 500 | 750 | 2,000 | 10,000 | 200 | 200 | 200 | 200 | 200 | 5,000 | 15,000 |
Request a free online demo of any MX or Z4 and Meraki Dashboard.
No Obligations!