Overview
The Meraki MX is a multi-functional security & SD-WAN enterprise appliance with a wide set of capabilities to address multiple use cases for organizations of all sizes, in all industries.
Given the range of use cases that can be solved, there are three license options for the MX appliance that provides customers the flexibility to select the license most appropriate for their intended use.
|
Enterprise |
Advanced Security |
Secure SD-WAN Plus |
| “All I require is Auto VPN and a firewall” | “I connect directly to the Internet so need a UTM too” | “My business is reliant on SaaS/IaaS/DC served apps” |
|
|
|
The licensing structure for MX appliances is the same as that of any other Meraki device – 1:1 ratio of devices to licenses. Pair your chosen MX appliance(s) with the relevant license for your use case
-
Enterprise license
OR
-
Advanced security license
OR
-
Secure SD-WAN Plus license
Features byLicense Option
|
Feature |
Enterprise |
Advanced Security |
Secure SD-WAN Plus |
|
Centralized management |
✔ |
✔ |
✔ |
|
Zero-touch firmware updates |
✔ |
✔ |
✔ |
|
True zero-touch provisioning |
✔ |
✔ |
✔ |
|
24x7 enterprise support |
✔ |
✔ |
✔ |
|
Open APIs |
✔ |
✔ |
✔ |
|
Automatic WAN failover |
✔ |
✔ |
✔ |
|
Sub-second site-to-site VPN failover |
✔ |
✔ |
✔ |
|
Sub-second dynamic path selection |
✔ |
✔ |
✔ |
|
Stateful firewall |
✔ |
✔ |
✔ |
|
VLAN to VLAN routing |
✔ |
✔ |
✔ |
|
Advanced Routing |
✔ |
✔ |
✔ |
|
Uplink Load Balancing/failover |
✔ |
✔ |
✔ |
|
3G / 4G cellular failover |
✔ |
✔ |
✔ |
|
Traffic shaping/prioritization |
✔ |
✔ |
✔ |
|
Site-to-site VPN |
✔ |
✔ |
✔ |
|
Client VPN |
✔ |
✔ |
✔ |
|
MPLS to VPN Failover |
✔ |
✔ |
✔ |
|
Splash pages |
✔ |
✔ |
✔ |
|
Configuration templates |
✔ |
✔ |
✔ |
|
Group Policies |
✔ |
✔ |
✔ |
|
Client connectivity alerts |
✔ |
✔ |
✔ |
|
Essential SD-WAN |
✔ |
✔ |
✔ |
|
Source-Based Routing |
✔ |
✔ |
✔ |
|
Local Breakout (IP and Port based) |
✔ |
✔ |
✔ |
|
Geography based firewall rules |
|
✔ |
✔ |
|
Intrusion detection & prevention |
|
✔ |
✔ |
|
Content filtering |
|
✔ |
✔ |
|
YouTube Content Restriction |
|
✔ |
✔ |
|
Web Search Filtering |
|
✔ |
✔ |
|
Cisco Advanced Malware Protection (AMP) |
|
✔ |
✔ |
|
Umbrella DNS Integration** |
|
✔ |
✔ |
|
Threat Grid Integration** |
✔ |
✔ |
|
|
Web App Health Analytics |
✔ |
||
|
WAN Health Analytics |
✔ |
||
|
VoIP Health Analytics |
✔ |
||
|
Smart breakout |
✔ |
||
| SD-Internet | ✔ |
**Requires a separate license
Teleworker Gateway License Breakdown
The Meraki Teleworker Gateway is a type of MX intended for use in small remote offices and homes of remote workers. Allowing them to securely connect back to their head offices while also offering the same security as our MX Platform.
With the introduction of the Z4, we are also introducing two new types of licenses for the Teleworker series.
|
Z-Enterprise |
Secure Teleworker |
|
|
Note: These licenses will not be supported by the Z3
Teleworker Features by License Options
|
Feature |
Z-Enterprise |
Secure Teleworker |
|
Centralized management |
✔ |
✔ |
|
Zero-touch firmware updates |
✔ |
✔ |
|
True zero-touch provisioning |
✔ |
✔ |
|
24x7 enterprise support |
✔ |
✔ |
|
Open APIs |
✔ |
✔ |
|
Automatic WAN failover |
✔ |
✔ |
|
Sub-second site-to-site VPN failover |
✔ |
✔ |
|
Sub-second dynamic path selection |
✔ |
✔ |
|
Stateful firewall |
✔ |
✔ |
|
VLAN to VLAN routing |
✔ |
✔ |
|
Advanced Routing |
✔ |
✔ |
|
Traffic shaping/prioritization |
✔ |
✔ |
|
Site-to-site VPN |
✔ |
✔ |
|
Client VPN |
✔ |
✔ |
|
Splash pages |
✔ |
✔ |
|
Configuration templates |
✔ |
✔ |
|
Group Policies |
✔ |
✔ |
|
Client connectivity alerts |
✔ |
✔ |
|
Source-Based Routing |
✔ |
✔ |
|
Local Breakout (IP based) |
✔ |
✔ |
|
Umbrella DNS Integration** |
✔ |
✔ |
|
Geography based firewall rules |
✔ |
|
|
Content filtering |
✔ |
|
|
YouTube Content Restriction |
✔ |
|
|
Web Search Filtering |
✔ |
|
|
Cisco Advanced Malware Protection (AMP) |
✔ |
|
|
Threat Grid Integration** |
✔ |
|
|
WAN Health Analytics (MI) |
✔ |
|
|
VoIP Health Analytics (MI) |
✔ |
|
|
Smart breakout |
✔ |
