Cisco Meraki MX105
Security and SD-WAN Appliance
SASE building block for large branches
Important Licensing Information: To activate and manage your Cisco Meraki Cloud Managed Security Appliance, a purchase of a Cisco Meraki license is mandatory.
List Price:
Our Price: $9,222.86
List Price:
Our Price: $2,660.52
List Price:
Our Price: $5,986.36
List Price:
Our Price: $6,996.16
List Price:
Our Price: $13,967.92
Overview:
The Cisco Meraki MX are multifunctional security and SD-WAN enterprise appliances with a wide set of capabilities to address multiple use cases–from an all-in-one device. Organizations of all sizes and across all industries rely on the MX to deliver secure connectivity to hub locations or multi-cloud environments, as well as application quality of experience (QoE), through advanced analytics with machine learning.
The MX is 100% cloud-managed, so installation and remote management is truly zero touch, making it ideal for distributed branches, campuses, and data center locations. Natively integrated with a comprehensive suite of secure network and assurance capabilities, the MX eliminates the need for multiple appliances. These capabilities include application-based firewalling, content filtering, web search filtering, SNORT®-based intrusion detection and prevention, Cisco Advanced Malware Protection (AMP), site-to-site Auto VPN, client VPN, WAN and cellular failover, dynamic path selection, web application health, VoIP health, and more. SD-WAN can be easily be extended to deliver optimized access to resources in public and private cloud environments with virtual MX appliances (vMX). Public clouds supported with vMX include Am
MX105 Highlights
- Stateful firewall throughput: 3 Gbps
- Recommended for up to 750 users
Cloud-based centralized management
- Managed centrally over the web
- Classifies applications, users and devices
- Zero-touch, self-provisioning deployments
Networking and security
- Stateful firewall
- Auto VPN™ self-configuring site-to-site VPN
- Active Directory integration
- Identity-based policies
- Client VPN (IPsec)
- 3G / 4G failover via USB modem
Traffic shaping and application management
- Layer 7 application visibility and traffic shaping
- Application prioritization
Advanced security services1
- Content filtering
- Google SafeSearch and YouTube for Schools
- Intrusion detection & prevention (IDS/IPS)
- Advanced Malware Protection (AMP)
- Cisco Threat Grid2
Secure Cisco SD-WAN powered by Meraki
Secure Cisco SD-WAN powered by Meraki is delivered by the MX appliances. SD-WAN powered by Meraki has helped thousands of organizations rapidly save costs by reducing their dependence on MPLS without compromising on performance. As enterprises continue to shift from hub-centric architectures interconnected with VPN to ones that leverage public internet connectivity, SD-WAN powered by Meraki delivers advanced analytics with ML to monitor and optimize quality of experience (QoE) for applications, regardless of where they might be hosted.
Transport independence
Leverage more than one uplink of any type with automatic failover–MPLS, broadband, fiber, or cellular.
Advanced analytics
Coming soon: at-a-glance health of web applications with ML thresholds, VoIP, and WAN with predictive analytics
Native security
Integrated with next-gen firewall, content filtering, and Advanced Malware Protection (AMP) and IDS/IPS informed by Cisco Talos.
SaaS quality of experience
Manual and performance-based path selection using advanced analytics.
1 Requires Advanced Security License
2 Requires Threat Grid cloud subscription
Features:
Advanced quality of experience (QoE) analytics
- End-to-end health of web applications at-a-glance across the LAN, WAN, and application server
- Machine-learned smart application thresholds autonomously applied to identify true anomalies based on past behavioral patterns
- Monitor the health of all MX WAN links, including cellular, across your entire organization
- Detailed hop-by-hop VoIP performance analysis across all uplinks
Agile on-premises and cloud security capabilities informed by Cisco Talos
- Next-gen layer 7 firewall for identity-based security policies and application management
- Advanced Malware Protection with sandboxing; file reputationbased protection engine powered by Cisco AMP
- Intrusion prevention: PCI-compliant IPS sensor using industry-leading SNORT® signature database from Cisco
- Granular and automatically updated category-based content filtering
- Other capabilities: SSL decryption/inspection, data loss prevention (DLP), cloud access security broker (CASB), SaaS tenant restrictions, granular app control, file type control
Branch gateway services
- Built-in DHCP, NAT, QoS, and VLAN management services
- Web caching: accelerates frequently accessed content
- Load balancing: combines multiple WAN links into a single high-speed interface, with policies for QoS, traffic shaping, and failover
- Smart connection monitoring provides automatic detection of layer 2 and layer 3 outages and fast failover, including the option of integrated LTE Advanced or 3G/4G modems
Industry-leading cloud management
- Unified firewall, switching, wireless LAN, and mobile device management through an intuitive web-based dashboard
- Template-based settings scale easily from small deployments to tens of thousands of devices
- Role-based administration, configurable email alerts for a variety of important events, and easily auditable change logs
- Summary reports with user, device, and application usage details archived in the cloud
Intelligent site-to-site VPN with Cisco SD-WAN powered by Meraki
- Auto VPN allows automatic VPN route generation using IKE/ IKEv2/IPsec setup; runs on physical MX appliances and as a virtual instance in public and private clouds
- SD-WAN with active / active VPN, policy-based-routing, dynamic VPN path selection, and support for application-layer performance profiles to ensure prioritization of applications types that matter
- Interoperates with all IPsec VPN devices and services
- Automated MPLS to VPN failover within seconds of a connection failure
- L2TP IPsec remote client VPN included at no extra cost with support for native Windows, Mac OS X, iPad, and Android clients
- Support for Cisco AnyConnect remote client VPN (AnyConnect license required)
MX Cloud Managed Security Appliance Series Solutions:
Cisco Meraki MX Security Appliances are ideal for organizations considering a Unified Threat Managment (UTM) solution, for distributed sites, campuses or datacenter VPN concentration. Since the MX is 100% cloud managed, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include SD-WAN capabilities, application-based firewalling, content filtering, web search filtering, SNORT® based intrusion detection and prevention, Cisco Advanced Malware Protection (AMP), web caching, 4G cellular failover and more. Auto VPN and SD-WAN features are available on our hardware and virtual appliances, configurable in Amazon Web Services.
Ironclad Security
The MX platform has an extensive suite of security features, including IDS/IPS, content filtering, web search filtering, anti-malware, geo-IP-based firewalling, IPsec VPN connectivity, and Cisco Advanced Malware Protection, while providing the performance required for modern, bandwidth-intensive networks.
Layer 7 fingerprinting technology lets administrators identify unwanted content and applications, and prevents recreational apps like BitTorrent from wasting precious bandwidth.
The integrated Cisco SNORT® engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.2 compliance. The MX also uses the Webroot BrightCloud® URL categorization database for CIPA/IWF-compliant content filtering, Cisco Advanced Malware Protection (AMP) engine for anti-malware, AMP Threat Grid Cloud, and MaxMind for geo-IP-based security rules.
Best of all, these industry-leading layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to IT administrators.
Cloud Managed Architecture
Built on Cisco Meraki’s award-winning cloud architecture, the MX is the industry’s only 100% cloud-managed solution for unified threat management (UTM) and SD-WAN in a single appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote-management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.
Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based management interface removes the need for expensive and timeconsuming training.
For customers moving IT services to a public cloud service, Meraki offers a virtual MX for use in Amazon Web Services and Microsoft Azure, enabling Auto VPN peering and SD-WAN for dynamic path selection.
Integrated 802.11ac Wave 2 Wireless
The MX67W, MX68W, and MX68CW integrate Cisco Meraki‘s award-winning wireless technology with the powerful MX network security features in a compact form factor ideal for branch offices or small enterprises.
- Dual-band 802.11n/ac Wave 2, 2x2 MU-MIMO with two spatial streams
- Unified management of network security and wireless
- Integrated enterprise security and guest access
MX68CW security and SD-WAN appliance
MX67C SIM slot
LTE Advanced
While all MX models feature a USB port for 3G/4G failover, the MX67C and MX68CW include a SIM slot and internal LTE modem. This integrated functionality removes the need for external hardware and allows for cellular visibility and configuration within the Meraki dashboard.
- 1 x CAT 6, 300 Mbps LTE modem
- 1 x Nano SIM slot (4ff form factor)
- Global coverage with individual orderable SKUs for North America and Worldwide
Power over Ethernet
The MX68, MX68W, and MX68CW include two ports with 802.3at (PoE+). This built-in power capability removes the need for additional hardware to power critical branch devices.
- 2 x 802.3at (PoE+) ports capable of providing a total of 60W
- APs, phones, cameras, and other PoE-enabled devices can be powered without the need for AC adapters, PoE converters, or unmanaged PoE switches
MX68 Port Configuration
Lifetime Warranty with Next-day Advanced Replacement
Cisco Meraki MX appliances include a limited lifetime hardware warranty that provides next-day advance hardware replacement. Cisco Meraki’s simplified software and support licensing model also combines software upgrades, centralized systems management, and phone support under a single, easy-to-understand model.
Compare:
Product Options
| Recommended users | Interfaces | Stateful firewall throughput | Maximum VPN throughput | VPN tunnels | Redundant power | |
|---|---|---|---|---|---|---|
| MX64 | 50 | 5 × GbE USB 3G/4G | 250 Mbps | 100 Mbps | 50 | — |
| MX64W | 50 | 5 × GbE 802.11ac WiFi USB 3G/4G | 250 Mbps | 100 Mbps | 50 | — |
| MX65 | 50 | 12 × GbE (2 PoE+) USB 3G/4G | 250 Mbps | 100 Mbps | 50 | — |
| MX67 | 50 | 5 × GbE USB 3G/4G | 450 Mbps | 200 Mbps | 50 | — |
| MX67W | 50 | 5 × GbE 802.11ac/n Wave 2 WiFi USB 3G/4G | 450 Mbps | 200 Mbps | 50 | — |
| MX67C | 50 | 5 × GbE CAT 6 LTE Modem USB 3G/4G | 450 Mbps | 200 Mbps | 50 | — |
| MX68 | 50 | 12 × GbE (2 PoE+) USB 3G/4G | 450 Mbps | 200 Mbps | 50 | — |
| MX68W | 50 | 12 × GbE (2 PoE+) 802.11ac/n Wave 2 WiFi USB 3G/4G | 450 Mbps | 200 Mbps | 50 | — |
| MX68CW | 50 | 12 × GbE (2 PoE+) 802.11ac/n Wave 2 WiFi CAT 6 LTE Modem USB 3G/4G | 450 Mbps | 200 Mbps | 50 | — |
| MX75 | 200 | WAN: 1 x GbE SFP, 2 x GbE RJ45 LAN: 10 x GbE RJ45 (2 x PoE) USB 3G/4G | 1 Gbps | 500 Mbps | 75 | — |
| MX84 | 200 | 10 × GbE 2 × SFP USB 3G/4G | 500 Mbps | 250 Mbps | 100 | — |
| MX85 | 250 | WAN: 2x GbE SFP, 2x GbE RJ45 (1x PoE+) LAN: 8x GbE RJ45, 2x GbE SFP USB 3G/4G | 1 Gbps | 500 Mbps | 100 | — |
| MX95 | 500 | WAN: 2x 10GbE SFP+, 2x 2.5GbE RJ45 (1x PoE+) LAN: 4x GbE RJ45, 2x 10GbE SFP+ USB 3G/4G | 2 Gbps | 800 Mbps | 250 | — |
| MX100 | 500 | 9 × GbE 2 × SFP USB 3G/4G | 750 Mbps | 500 Mbps | 250 | — |
| MX05 | 750 | WAN: 2x 10GbE SFP+, 2x 2.5GbE RJ45 (1x PoE+) LAN: 4x GbE RJ45, 2x 10GbE SFP+ USB 3G/4G | 3 Gbps | 1 Gbps | 500 | — |
| MX250 | 2,000 | 2 × 10G SFP+ (WAN) 8 × GbE (RJ45) 8 × GbE (SFP) 8 × 10GbE (SFP+) USB 3G/4G | 4 Gbps | 1 Gbps | 1,000 | |
| MX450 | 10,000 | 2 × 10G SFP+ (WAN) 8 × GbE (RJ45) 8 × GbE (SFP) 8 × 10GbE (SFP+) USB 3G/4G | 6 Gbps | 2 Gbps | 1,500 |
Specifications:
- Stateful firewall, 1:1 NAT, DHCP, DMZ, static routing
- Identity-based policies
- Auto VPN™ self-configuring site-to-site VPN
- Client VPN (IPsec)
- User and device quarantine
- VLAN support and DHCP services
Advanced Security Services
- Content filtering (Webroot BrightCloud CIPA-compliant URL database)
- Web search filtering (including Google and Bing SafeSearch)
- YouTube for Schools
- Intrusion prevention (SourceFire Snort based)
- Cisco Advanced Malware Protection (AMP)
- Requires Advanced Security License
WAN Performance Management
- WAN link aggregation
- Application level (Layer 7) traffic analysis and shaping
- Automatic Layer 3 failover (including VPN connections)
- WAN uplink selection based on traffic type
Monitoring and Management
- Web based management and configuration
- Throughput, connectivity monitoring and alerts
- Network asset discovery and user identification
- Built-in network-wide reporting, monitoring and alerts
- Centralized policy management
- Real-time diagnostic and troubleshooting over the web
- Automatic firmware upgrades and security patches
- Searchable network-wide event logs
- WAN: 2x 10GbE SFP+, 2x 2.5GbE RJ45 (1x PoE+)
- LAN: 4x GbE RJ45, 2x 10GbE SFP+
- USB: 1 × USB 2.0 for 3G/4G failover (supported devices)
Performance
- Stateful firewall throughput: 3 Gbps
- VPN throughput: 1 Gbps
- Recommended for medium branches with up to 750 users
Power
- Dual 250W power supplies (included)
Environment
- Operating temperature: 32°F to 104°F (0°C to 45°C)
- Humidity: 5 to 95% non-condensing
Warranty
- Lifetime hardware warranty with advanced replacement included
Licensing:
Given the range of use cases that can be solved, there are three options for the MX appliance that give customers the flexibility to select the license most appropriate for their intended use.
The licensing structure for MX appliances is the same as that of any other Meraki device–1:1 ratio of devices to licenses. Pair your chosen MX appliance(s) with the relevant license for your use case.
Documentation:
Download the Cisco Meraki MX Family Datasheet Datasheet (PDF).
Pricing Notes:
- Pricing and product availability subject to change without notice.
Important Licensing Information: To activate and manage your Cisco Meraki Cloud Managed Security Appliance, a purchase of a Cisco Meraki license is mandatory.
List Price:
Our Price: $9,222.86
List Price:
Our Price: $2,660.52
List Price:
Our Price: $5,986.36
List Price:
Our Price: $6,996.16
List Price:
Our Price: $13,967.92
List Price:
Our Price: $5,320.32
List Price:
Our Price: $11,970.54
List Price:
Our Price: $13,990.79
List Price:
Our Price: $6,934.62
List Price:
Our Price: $439.68
List Price:
Our Price: $381.91
List Price:
Our Price: $874.98
List Price:
Our Price: $96.68
List Price:
Our Price: $145.02
List Price:
Our Price: $297.95
List Price:
Our Price: $1.45