Cisco Meraki MX250 Large Branch Cloud Managed Wired Firewall Security Appliance

The Cisco Meraki MX are multifunctional security & SD-WAN enterprise appliances with a wide set of capabilities to address multiple use cases–from an all-in-one device. Organizations of all sizes and across all industries rely on the MX to deliver secure connectivity to hub locations or multi-cloud environments, as well as application quality of experience (QoE), through advanced analytics with machine learning.

Hardware:

• 10G SFP+ WAN interfaces for high-speed connectivity
• 1G/10G fibre and copper interfaces for flexible LAN connectivity
• Stateful firewall throughput: 4 Gbps
• Redundant power supplies and fans
• Recommended maximum clients: 2,000

Cloud-based centralized management:

• Managed centrally over the Web
• Classifies applications, users and devices
• Zero-touch, self-provisioning deployments

Networking and security:
Stateful firewall

• Auto VPN self-configuring site-to-site VPN
• Powerful SD-WAN capabilities
• Active Directory integration
• Identity-based policies
• Client VPN (IPsec)
• Smart link bonding

Traffic shaping and application management:

• Layer 7 application visibility and traffic shaping
• Application prioritization
• Web caching
• Choose WAN uplink based on traffic type

Advanced security services:

• Content filtering
• Geo-based IP firewall
• Google SafeSearch and YouTube for Schools
• Intrusion detection & prevention (IDS/IPS)
• Advanced Malware Protection (AMP)
• Cisco Threat Grid

Network and Security Services:

• Stateful firewall, 1:1 NAT, DHCP, DMZ, static routing
• Identity-based policies
• Auto VPN self-configuring site-to-site VPN
• Client VPN (IPsec)
• User and device quarantine
• VLAN support and DHCP services

Advanced Security Services:

• Content filtering (Webroot BrightCloud CIPA-compliant URL database)
• Web search filtering (including Google and Bing SafeSearch)
• YouTube for Schools
• Intrusion prevention (SourceFire Snort based)
• Cisco Advanced Malware Protection (AMP)
• Requires Advanced Security License

WAN Performance Management:

• Web caching
• WAN link aggregation
• Application level (Layer 7) traffic analysis and shaping
• Automatic Layer 3 failover (including VPN connections)
• WAN uplink selection based on traffic type

Monitoring and Management:

• Web based management and configuration
• Throughput, connectivity monitoring and alerts
• Network asset discovery and user identification
• Built-in network-wide reporting, monitoring and alerts
• Centralized policy management
• Real-time diagnostic and troubleshooting over the web
• Automatic firmware upgrades and security patches
• Searchable network-wide event logs

Interfaces:

• 2 × 10GbE SFP+ (WAN)
• 8 × GbE (RJ45)
• 8 × GbE (SFP)
• 8 × 10GbE (SFP+)
• USB: 1 × USB 2.0 for 3G/4G failover (supported devices)

Performance:

• Stateful firewall throughput: 4 Gbps
• VPN throughput: 1 Gbps
• Recommended for large campus / data centres (up to 2,000 users)

Power:

• Dual 250W power supplies (included)

Environment:

• Operating temperature: 0°C to 40°C
• Humidity: 5 to 95% non-condensing

Note: Meraki advanced security license required.