Meraki MX90
Cloud-Managed Security Appliance for Branches of Any Size

Overview:

The Meraki MX90 is an integrated router, next-generation firewall, traffic shaper, and Internet gateway that is centrally managed over the web. The MX90 offers an extensive feature set, yet is incredibly easy to deploy and manage. Intuitive web-based administration eliminates specialized training and dedicated staff, and cloud-based centralized management provides seamless multi-site networks, automatic firmware upgrades, and much more.

MX90 Highlights

Hardware features Gigabit SFP connectivity Stateful firewall throughput: 500 Mbps Supports approximately up to 250 users Cloud-based centralized management Managed centrally over the Web Classifies applications, users and devices Zero-touch, self-provisioning deployments Networking and security Stateful firewall Auto-provisioning site-to-site VPN Smart link bonding Active directory integration

Traffic shaping and application management Layer 7 application visibility and traffic shaping Application prioritization Choose WAN uplink based on traffic type WAN optimization Reduces intra-site bandwidth consumption Accelerates CIFS, FTP, HTTP, and TCP traffic WAN optimization cache: 1 TB Advanced security services Client VPN (IPsec) Content filtering (CIPA compliant) Antivirus engine and antiphishing filtering Requires Advanced Security License

A Complete Solution for Distributed Networks

The MX provides a complete networking and security solution that typically requires up to four appliances: branch router, next-generation firewall, Layer 7 traffic shaper, and CIPA-compliant content filter.

This integrated architecture dramatically reduces up-front costs and ongoing support and maintenance. Moreover, it provides unified, single pane-of-glass management, speeding deployment and eliminating the need for specialized training.

The First Cloud Managed Networking and Security Platform

The Meraki MX is a complete networking and security solution, designed to make distributed networks fast, secure, and easy to manage.

The MX is managed entirely through Meraki’s web based dashboard. Designed with intuitive controls for IT generalists, the MX requires no training or specialized staff. The MX will even self-provision, allowing for remote branch deployments without on site IT.

Powerful Hardware Platform

The MX hardware platform is purpose-built for cloud management, with CPU and memory resources designed to provide application and content-aware security at the edge. The MX's robust platform enables advanced features like layer 7 application traffic shaping, content filtering, antivirus/antiphishing, and site-to-site VPN, while providing the throughput and capacity for modern, high-density networks.

Easy to Manage Without Training or On-Site Networking Expertise

The MX was designed for ease of use, even in branches without on-site IT. An intuitive interface, contextual help, and real-time support from the cloud eliminate specialized training. To deploy the MX in remote locations, simply connect the MX to the Internet, and it will securely self-provision from the cloud. Firmware upgrades, security patches, and signature updates are all delivered seamlessly from the cloud, ensuring that the MX is always up to date. Integrating broad security and networking features into a single intuitive device drastically reduces complexity in the branch.

Secure, Reliable Distributed Networking Without Costly MPLS

The MX eliminates costly MPLS tunnels with secure site-to-site VPN over redundant Internet connections. Using IPsec over the Internet, the MX links your branches to headquarters as well as to one another as if connected with a virtual Ethernet cable. Configuration headaches like NAT traversal are handled automatically from the cloud. The MX70's dual WAN ports with balancing and failover enable the use of redundant commodity Internet connections, providing more bandwidth and higher reliability than MPLS, at a fraction of the cost.

Connects and Secures Branches from the Cloud

Meraki’s cloud management platform makes it easy to deploy secure, interconnected, centrally managed multi-site networks. Add new sites in seconds with auto-configuring VPN. Centrally manage user, content and application-aware firewall policies across your entire network.

Control Applications, Users, and Devices

The MX provides complete control over users, content, and applications, giving the visibility, security, and control required for mixed-use networks. Layer 7 fingerprinting technology lets administrators block objectionable content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth. Likewise, the MX can prioritize critical applications like voice and video. User fingerprinting identifies clients by name, operating system, or device (e.g. iPad). Fast search, automatic reports, and device quarantine provide complete visibility and control over the users across the entire network.

Increases WAN Performance and Reduces Bandwidth Costs

Block unwanted bandwidth hogs like BitTorrent, and add capacity with WAN load balancing. Cache, deduplicate, and optimize traffic with WAN optimization to lower bandwidth consumption by up to 99% and improve application performance by up to 209x.

Features:

Multi-Site Cloud Management

Meraki’s Cloud Networking architecture enables plug and play branch deployments and provides centralized visibility and control across any number of distributed locations. MX security appliances self-provision – automatically pulling policies and configuration from the cloud – enabling branch deployments without on-site IT. Meraki’s cloud delivers seamless firmware and security signature updates, automatically establishes site-to-site VPN tunnels, and provides automatic network monitoring and alerts.

Since the MX is managed entirely through Meraki’s web based dashboard, configuration and diagnostics can be performed remotely just as easily as they can be performed on-site, eliminating costly field visits. Even firmware updates are performed seamlessly, over the web.

Auto VPN

Meraki’s unique auto provisioning site-to-site VPN connects branches securely with complete simplicity. Using IPsec over any wide area network, the MX links your branches to headquarters as well as to one another as if connected with a virtual Ethernet cable.

Site-to-site connectivity is established through a single click in Meraki’s dashboard. Gone are the configuration headaches of traditional site-to-site VPNs: route discovery, key negotiation, authentication, security policies, crypto maps, and access lists are all handled automatically from the cloud.

Ease of use does not come at the expense of flexibility. Both full and split tunnel VPNs can be configured easily. New sites can similarly be added with a few simple clicks.

WAN Optimization

Reduce intra-site application bandwidth by up to 99% and accelerate CIFS, FTP, HTTP, and TCP traffic by up to 209x with the MX. A state-of-the-art WAN optimization engine uses advanced algorithms, deduplication, compression, and hard-disk based caching to make the WAN feel like a LAN.

Meraki’s WAN optimization aids in server consolidation and private cloud initiatives, as well as any distributed network where end-user bandwidth costs or performance are a priority. Enable WAN optimization on the MX with just two clicks – without new appliances, training, or overlay systems.

Control Applications, Users, and Devices

The MX was purpose-built for modern, multi-use networks, providing extensive visibility and control over users, content, and applications. Far beyond simple host- and port-based solutions, the MX’s Layer 7 fingerprinting classifies evasive and encrypted applications including P2P. Block unwanted web traffic with CIPA-compliant content filtering, throttle bandwidth hogs like Netflix and BitTorrent, and even prioritize productivity apps like VoIP.

The MX also provides insight into the users on the network, identifying clients by device type (e.g., iPads) and even username. Inspect, throttle, or block users, and integrate with Active Directory to apply different policies to different classes of users.

Smart Link Bonding

Connect your branch with multiple WAN links, e.g., cable, DSL, T1, or even 3G/4G. The MX will automatically combine them into a single LAN, balancing traffic between them and failing over if a connection goes down.

The MX’s Smart Link Bonding increases bandwidth and reduces cost. Supplement a T1 with an affordable DSL connection, increasing bandwidth for video and cloud applications. For maximum cost savings, forgo leased lines altogether by deploying the MX's site-to-site VPN over a combination of DSL, cable or 3G/4G for secure, redundant, inexpensive connectivity.

Application-Aware Firewall

An integrated application-aware stateful firewall secures your network from malicious entities threatening today's networks. It's no longer enough to simply block protocols, hosts, and ports – a firewall must also be user, content, and application aware.

Use custom inbound and outbound rules to secure your network, allowing only approved, essential services and connections. Create custom VLAN routing configurations to segregate voice, video, and data traffic. Deploy global firewall rules across site-to-site VPN networks with a single click.

Content Filtering

The MX’s CIPA compliant content filter enables administrators to block categories of content (adult, drugs, gambling, etc.) as well as individual URLs. Active Directory integration allows for different content filtering policies for different groups of users.

Through an intuitive web interface with Google-like auto suggest, it takes only minutes to configure filtering policies. Once deployed, the MX automatically refreshes its filtering lists from the cloud, so that your rules are always up to date, even as websites change.

Branch Routing

The MX provides a complete networking solution, with a host of networking services for branch environments. Manage IP addresses with built-in DHCP and NAT. Enforce DMZs, punch firewall holes in seconds, segregate traffic with VLANs, and create routes through an intuitive web interface.

Networking features integrate seamlessly with site to site VPN, stateful firewall, and other services, eliminating the need for an external branch router in most environments.

Technology:

Network Services

NAT, DHCP Provide complete branch connectivity with built-in Network Address Translation (NAT) and Dynamic Host Configuration Protocol (DHCP) services. Scalable services eliminate the need for additional network appliances in many branch environments.

Link Aggregation and Failover Combine multiple WAN links into a single logical connection, with automatic load balancing and failover. Provide reliable connectivity at a fraction of the cost of MPLS (e.g. with aggregated cable and DSL connections), or supplement MPLS with a low-cost, high-bandwidth Internet connection.

Network Security

Stateful Firewall, DMZ High performance security services, including a stateful firewall, DMZ, and 1:1 NAT, protect networks from external threats. Tunnel through NATs to reach clients with a single click from the Meraki dashboard, providing complete control over distributed clients. Site to Site (IPsec) VPN Site to Site (IPsec) VPN creates a secure connection between sites, as if connected by a "virtual ethernet cable." Easily configure tunnels between any branches on your network. With cloud-based tunnel establishment eliminating NAT traversal and disscovery headaches, site to site tunnels can be created in seconds.

Antivirus and Antiphishing Meraki integrates antivirus and antiphishing solutions from class-leading vendors. The MX provides complete protection at a tremendous value, with no per-user fees, no additional hardware, and no configuration headaches.

Application, Content, and User Control

Layer 7 Application Traffic Shaping Limit BitTorrent, gaming, and other recreational traffic while prioritizing business-critical apps, voice, and video with Meraki's integrated layer 7 application traffic shaping. The MX features an integrated traffic analysis and QoS engine. Layer 7 fingerprinting technology goes beyond simple hostnames and ports, identifying evasive, encrypted and encapsulated applications including P2P. Prevent recreational applications from wasting bandwidth, throttle background traffic such as software updates, and improve the user experience of real-time apps. Cloud-based application signatures are always up to date, accurately identifying hundreds of applications automatically. Layer 7 User Fingerprinting Meraki's layer 7 traffic inspection engine gleans identifying information from clients as they use the network, detecting username, operating system, device type, etc. This data is logged in a secure cloud-hosted database, enabling network administrators to look up clients easily with a Google-like search interface. Simply search for "Joe's iPad" to find a particular device, which then can be analyzed, troubleshooted, and controlled.

Content Filtering The MX features a CIPA-compliant content filter, enabling administrators to block categories of content (e.g. Gambling, Adult, Drugs, etc.) as well as individual URLs, thus protecting classrooms and other sensitive environments and maintaining legally-required protections. The MX provides an intuitive content filtering interface that takes only seconds to configure. NG Application Firewall Block undesired application usage with the MX's integrated Next Generation Application Firewall. Advanced layer 7 signature-based identification goes far beyond blocking hostnames and ports, providing control over peer-to-peer, evasive, encrypted, and dynamic applications. User and Device Quarantine Quarantine users and devices anywhere on the network with just two clicks. Block clients that may be compromised or abusing the network. Identify clients via Google-like search, and recognize usage patterns in the summary report.

Cloud-Based Management

Centralized Multi-Site Management The MX is the only branch router with built-in centralized management. Configure, maintain, and support remote sites from an intuitive browser interface. Manage dozens, hundreds, and even thousands of remote branches with scalable management tools. Meraki's cloud services automate painstaking tasks, such as monitoring, optimization, and provisioning for networks of any size. Zero-Touch AP Provisioning When first connected, the MX automatically establishes a secure connection to Meraki's cloud service from which it pulls its configuration, and then it begins to operate. The MX can be deployed with zero manual configuration. Deploy large networks quickly and cost effectively, and extend services to remote branches without on-site IT. Seamless Firmware Updates Firmware updates are delivered seamlessly from the cloud. When firmware updates are available, an administrator simply schedules an appropriate time for the MXs to download and install the new version. The MXs automatically verify successful installation, and they simply fall back to their previous version if an error occurs. This eliminates compatibility matrices, insecure and out of date firmware, and time consuming manual updates in distributed branch deployments. Monitoring and Alerts The Meraki MX is automatically monitored 24x7 from the cloud. Should an issue arise - including upstream network failures such as an ISP outage - Meraki's cloud service will alert administrators of the issue, which can be diagnosed via powerful cloud-based remote tools.

Real-Time Remote Diagnostic Tools Meraki provides real-time visibility and control over the web, from client usage to WAN health tests. Operating over Meraki's real-time tunnel to the cloud, remote tools provide responsive, feature rich network management with the simplicity of a web browser, eliminating ssh tunnels, serial cables, and airplane trips to troubleshoot remote branches. Searchable Event Log Meraki's event log captures fine-grained network events in a secure, cloud-based database. Indexed for rapid search, this event log provides powerful troubleshooting and analysis capabilities, even in remote sites or large-scale deployments. Summary Reports In addition to powering rich real-time diagnostics and search, Meraki assembles network usage into an insightful report. Identify application usage and problematic clients. Understand device trends, including iPad, smartphone, and other device usage. Demonstrate the success of the network investment and monitor change over time. VPN Tunnel Establishment When deployed in a site to site VPN configuration, Meraki MXs utilize the cloud to automatically discover each other, to traverse firewalls and NATs, and to negotiate sessions. VPN sessions therefore require zero configuration — a true plug and play experience.

MX Series Solutions:

The Meraki MX is a complete next generation firewall and branch gateway solution, designed to make distributed networks fast, secure, and easy to manage. The world's first cloud-managed security appliance, the Meraki MX provides complete visibility and control in campus and distributed environments.

Eliminates 6 complex appliances with a single, easy to manage platform.

Next Generation Firewall Capabilities: Application-aware traffic control: set bandwidth policies based on Layer 7 application type (e.g. YouTube, Skype, P2P). Prioritize critical applications and throttle recreational traffic. Content filtering: CIPA compliant category-based content filters, configurable for classes of users user based on Active Directory user/group membership. Stateful firewall: set firewall policies through an intuitive graphical interface. Branch Gateway Services: Built-in DHCP, NAT, QoS and VLAN management services. 1:1 NAT and DMZ configured and updated from the cloud. Link bonding: combines multiple WAN connections into a single high-speed interface, with policies for QoS, traffic shaping and link failover. Layer 3 failover: automatic detection of layer 2 and layer 3 outages and fast failover, including 3G/4G USB modems. WAN optimization: data redundancy elimination, protocol optimization, and compression provide bandwidth savings up to 99% for Windows filesharing (CIFS), FTP, HTTP, and TCP traffic.

Auto-provisioning VPN: Site-to-site VPN: automatic routing table generation, provisioning and key exchange via Meraki's secure cloud. Interoperates with standards-based IPsec VPNs. Client VPN: support for native Windows, Mac OS X, iPad and Android clients with no-per user licensing fees. Industry-leading Cloud Management: Unified WAN, LAN, and wireless LAN management under a single dashboard. Scales easily from small deployments to large, multi-site deployments with tens of thousands of devices. E-mail alerts upon power loss or configuration changes. Role-based administration, configuration change alerts and auditable configuration change logs. Summary reports with user, device and application usage details, archived in the cloud. Quarterly feature updates and enhancements delivered on demand from the Meraki Cloud Controller.

Consolidate up to six devices with a single Meraki MX appliance

Cloud Managed Architecture

Built on Meraki's award-winning Cloud Networking platform, the MX is the only 100% cloud-managed networking and security appliance. MX appliances self-provision, automatically pulling policies and configuration from the cloud. Powerful remote tools provide network-wide visibility and control, and enable administration without on-site networking expertise.

Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX's browser-based management dashboard completely eliminates the need for training.

The MX hardware platform is purpose-built for cloud management, with CPU and memory resources designed to provide application and content-aware security at the edge. The MX's robust platform enables advanced features like Layer 7 application traffic shaping, content filtering, antivirus/antiphishing, and site-to-site VPN, while providing the throughput and capacity for modern, high-density networks.

Meraki Cloud Management Architecture

Powerful Hardware Platform

The MX hardware platform is purpose-built for cloud management, with CPU and memory resources designed to provide application and content-aware security at the edge. The MX's robust platform enables advanced features like layer 7 application traffic shaping, content filtering, antivirus/antiphishing, and site-to-site VPN, while providing the throughput and capacity for modern, high-density networks.

Meraki MX400 Internals

Increased Reliability for Distributed Networks

The multiple WAN ports with balancing and failover enable the use of redundant commodity Internet connections, providing additional bandwidth and higher reliability at a fraction of the cost. For remote sites where multiple wireline providers are difficult to provision, the Meraki MX can fail over to 3G/4G wireless Internet connections.

Reduce Bandwidth Costs with WAN Optimization

Built-in WAN optimization features such as data redundancy elimination, caching, and compression for Windows filesharing (CIFS), FTP and generic TCP traffic, combined with link compression, help reduce WAN bandwidth by up to 99%.

Meraki MX80, MX90 and MX400 gateways include a 1 TB disk, which acts as a byte-level content cache for office locations, while the MX600 includes 4 TB of storage in a RAID configuration for use in datacenter concentration environments. By eliminating the need for a separate WAN optimization appliance, Meraki MX appliances streamline deployment, can take advantage of user/application policies and simply configuration and management.

Simplified Management and Operations

The MX was designed for ease of use, even in branches without on-site IT. An intuitive interface, contextual help, and real-time support from the cloud eliminate specialized training. To deploy the MX in remote locations, simply connect the MX to the Internet, and it will securely self-provision from the cloud. Firmware upgrades, security patches, and signature updates are all delivered seamlessly from the cloud, ensuring that the MX is always up to date, and integrating broad security and networking features into a single intuitive device drastically reduces complexity in the branch.

By providing a complete, powerful set of management functions over the web, Meraki's browser-based cloud management eliminates the need for proprietary command line configuration interfaces, training, or added staff. Meraki MX appliances can be fully deployed and provisioned in minutes, without requiring any local configuration or staging. Additional or replacement gateways can be sent to remote offices and installed by non-technical staff, saving thousands of dollars in time and travel expense.

Accessories

The Meraki MX90, 400 and 600 models support pluggable optics for high-speed backbone or link aggregation connections between wiring closets or to aggregation switches. Meraki offers several standards-based Gigabit and 10 Gigabit pluggable modules. Each appliance has also been tested for compatibility with several third-party modules.

Interface Modules for MX400 and MX600
8 x 1 GbE Copper Interface Module	8 x 1 GbE SFP Interface Module	2 x 10 GbE SFP+ Interface Module
Pluggable Optics for MX90, MX400, MX600
1 GbE SFP Copper Module For: MX90, MX400, MX600 Standard: 1000BASE-T Range: 100m	1 GbE SFP SX Fiber Transceiver For: MX90, MX400, MX600 Standard: 1000BASE-SX Range: 550m	SFP+ 10 GbE Short Range Fiber Module For: MX90, MX400, MX600 Standard: 10GBASE-SR Range: 400m
Twinax Cable with SFP+ Connectors For: MX400, MX600 Range: 1m

Lifetime Warranty with Next-day Advanced Replacement

Meraki MX appliances include a limited lifetime hardware warranty that provides next-day advance hardware replacement as long as the original purchaser owns the product. Meraki's simplified software and support licensing model also combines all software upgrades, centralized systems management and phone support under a single, easy-to-understand model.

Technical Specifications:

	MX60/MX60W	MX80	MX90	MX400	MX600
Recommended use cases	Small office / retail branch (approx. 20 users)	Mid-sized office (approx. 50 users)	Mid-sized office (approx. 125 users)	Data center / concentrator (approx. 2,000 users)	Large data center / concentrator (approx. 10,000 users)
Stateful firewall throughput	100 Mbps	250 Mbps	500 Mbps	1 Gbps	2 Gbps
Advanced Security Throughput	50 Mbps	125 Mbps	225 Mbps	325 Mbps	650 Mbps
Maximum site-to-site VPN sessions	20	100	200	2,000	5,000
WAN Interfaces	1 or 2 x GbE	1 or 2 x GbE	1 or 2 x GbE	1 or 2 x GbE	1 or 2 x GbE
LAN Interfaces*	3 or 4 x GbE	3 or 4 x GbE	7 or 8 x GbE 2 x GbE (SFP)	2 or 3 x GbE	2 or 3 x GbE
Additional LAN Interfaces	n/a	n/a	n/a	8 x GbE (RJ45) 8 x GbE (SFP) 4 x 10GbE (SFP+) (2 modules max)	8 x GbE (RJ45) 8 x GbE (SFP) 4 x 10GbE (SFP+) (2 modules max)
WAN Optimization	Basic	Advanced	Advanced	Advanced	Advanced
WAN Optimization Cache	100 MB	1 TB	1 TB	1 TB	4 x 1 TB (RAID)
USB for 3G/4G Failover	Yes	Yes	Yes	Yes	Yes
High Availability	No	Yes	Yes	Yes	Yes
Mounting	Desk / Wall	1U rack	1U rack	1U rack	2U rack
Dimensions	9.5" x 6.7" x 1.14" (239mm x 170mm x 34mm)	19.0" x 10.0" x 1.75" (483mm x 254mm x 44mm)	19.0" x 10.0" x 1.75" (483mm x 254mm x 44mm)	19.0" x 22.0" x 1.75" (483mm x 559mm x 44mm)	19.0" x 22.0" x 3.5" (483mm x 559mm x 89mm)
Weight	3.04 lb (1.4 kg)	8 lb (3.6kg)	9 lb (4.1kg)	33 lb (15.0 kg)	53 lb (24.0 kg)
Power Supply	18W DC (included)	100-220V 50/60Hz AC	100-220V 50/60Hz AC	100-220V 50/60Hz AC (Dual)	100-220V 50/60Hz AC (Dual)
Power Load (idle / max)	4W / 10W (MX60) 6W / 13W (MX60W)	26W / 32W	28W / 35W	123W / 215W	123W / 215W 132W / 226W
Operating Temperature	32°F to 104°F (0°C to 40°C)
Humidity	5 to 95% non-condensing
MX Series Features and Specifications:
Management	Managed via the Web using the Meraki Cloud Controller Single pane of glass into wired and wireless networks No-touch remote deployment (no staging needed) Automatic firmware upgrades and security patches Centralized policy management Org-level two-factor authentication and single sign-on Role based administration with change logging and alerts
Monitoring and Reporting	Throughput, connectivity monitoring and email alerts Detailed historical per-port and per-client usage statistics Application usage statistics Org-level change logs for compliance and change management VPN tunnel and latency monitoring Network asset discovery and user identifi cation Periodic emails with key utilization metrics Syslog integration
Remote Diagnostics	Live remote packet capture Real-time diagnostic and troubleshooting tools Aggregated event logs with instant search
Network and Security Services	Stateful firewall, 1:1 NAT, DMZ Site-to-site (IPsec) VPN Multiple WAN IP, PPPoE, NAT VLAN support and DHCP services Static routing User and device quarantine
WAN Performance Management	WAN link aggregation Automatic Layer 3 failover (including VPN connections) 3G / 4G USB modem failover (Sprint, Verizon, AT&T) Application level (Layer 7) traffic analysis and shaping Ability to choose WAN uplink based on traffic type
WAN Optimization	Byte-level caching Universal datastore with data redundancy elimination TCP transport compression and optimization Layer 7 protocol optimization (CIFS, HTTP, FTP)
Advanced Security Services*	Client (IPsec) VPN Content filtering (CIPA compliant) Anti-virus engine Anti-phishing filtering
Regulatory	FCC (US) CB (IEC) CISPR (Australia/New Zealand) RoHS
Warranty	Full lifetime hardware warranty with next-day advanced replacement included

*Note: Interface LAN1 can be toggled between LAN and WAN.

License Editions:

Enterprise License Includes:

• Stateful firewall
• Site to site VPN
• Branch routing
• Link bonding and failover
• Application control
• WAN optimization

Advanced Security Edition Includes:

• All Enterprise License features, plus
• Client VPN
• Content Filtering
• Anti-Virus and Anti-Phishing

All MX products include upgrades, phone support, and a lifetime warranty at no extra cost.

Use Cases:

Cloud-Managed Multi-Service Router

Build an easy to deploy and reliable network that doesn't require costly solutions like MPLS tunnels. Deploy the MX series in missioncritical networks using link failover. Simplify access and visibility through cloud-managed site-to-site VPN. Secure remote networks using advanced security features like anti-virus filtering. Optimize network costs using traffic shaping.

Inline Traffic Shaper and Network Monitor

The MX series are equally indispensable when deployed behind an existing firewall and router. Optimize network traffic with application-aware (layer 7) traffic shaping and firewall. Prioritize mission critical applications or VoIP traffic while setting limits on recreational traffic, e.g. peer-to-peer applications. Discover all client devices, identify users and monitor printers.

Compare Cloud-Managed Routers:

Model	Interfaces	Stateful Firewall Throughput	VPN Throughput	WAN Optimization Cache
Small Branch (Approx. 10 – 20 Users)
MX60	5 x GbE	100 Mbps	50 Mbps	100 Mbps
MX60W	5 x GbE 1 x 802.11n WiFi (3x3, dual-band)	100 Mbps	50 Mbps	100 Mbps
Medium Branch (Approx. 20 – 250 Users)
MX80	5 x GbE	250 Mbps	125 Mbps	1 TB SATA
MX90	8 x GbE 2 x GbE (SFP)	500 Mbps	225 Mbps	1 TB SATA
Large Branch, Campus / Concentrator (Approx. 250 – 10,000 Users)
MX400	8 x GbE 8 x GbE (SFP) 4 x 10 GbE (SFP+)	1 Gbps	325 Mbps	1 TB SATA
MX600	8 x GbE 8 x GbE (SFP) 4 x 10 GbE (SFP+)	2 Gbps	650 Mbps	4 TB RAID

Documentation:

Download the Meraki MX Series Datasheet (PDF).