Cisco Meraki MX95 Security and SD-WAN Appliance

Overview:

The Cisco Meraki MX are multifunctional security and SD-WAN enterprise appliances with a wide set of capabilities to address multiple use cases–from an all-in-one device. Organizations of all sizes and across all industries rely on the MX to deliver secure connectivity to hub locations or multi-cloud environments, as well as application quality of experience (QoE), through advanced analytics with machine learning.

The MX is 100% cloud-managed, so installation and remote management is truly zero touch, making it ideal for distributed branches, campuses, and data center locations. Natively integrated with a comprehensive suite of secure network and assurance capabilities, the MX eliminates the need for multiple appliances. These capabilities include application-based firewalling, content filtering, web search filtering, SNORT®-based intrusion detection and prevention, Cisco Advanced Malware Protection (AMP), site-to-site Auto VPN, client VPN, WAN and cellular failover, dynamic path selection, web application health, VoIP health, and more. SD-WAN can be easily be extended to deliver optimized access to resources in public and private cloud environments with virtual MX appliances (vMX). Public clouds supported with vMX include Am

MX95 Highlights

Secure Cisco SD-WAN powered by Meraki

Secure Cisco SD-WAN powered by Meraki is delivered by the MX appliances. SD-WAN powered by Meraki has helped thousands of organizations rapidly save costs by reducing their dependence on MPLS without compromising on performance. As enterprises continue to shift from hub-centric architectures interconnected with VPN to ones that leverage public internet connectivity, SD-WAN powered by Meraki delivers advanced analytics with ML to monitor and optimize quality of experience (QoE) for applications, regardless of where they might be hosted.

Transport independence

Leverage more than one uplink of any type with automatic failover–MPLS, broadband, fiber, or cellular.

Advanced analytics

Coming soon: at-a-glance health of web applications with ML thresholds, VoIP, and WAN with predictive analytics

Native security

Integrated with next-gen firewall, content filtering, and Advanced Malware Protection (AMP) and IDS/IPS informed by Cisco Talos.

SaaS quality of experience

Manual and performance-based path selection using advanced analytics.

1 Requires Advanced Security License
2 Requires Threat Grid cloud subscription

Features:

Advanced quality of experience (QoE) analytics

• End-to-end health of web applications at-a-glance across the LAN, WAN, and application server
• Machine-learned smart application thresholds autonomously applied to identify true anomalies based on past behavioral patterns
• Monitor the health of all MX WAN links, including cellular, across your entire organization
• Detailed hop-by-hop VoIP performance analysis across all uplinks

Agile on-premises and cloud security capabilities informed by Cisco Talos

• Next-gen layer 7 firewall for identity-based security policies and application management
• Advanced Malware Protection with sandboxing; file reputationbased protection engine powered by Cisco AMP
• Intrusion prevention: PCI-compliant IPS sensor using industry-leading SNORT® signature database from Cisco
• Granular and automatically updated category-based content filtering
• Other capabilities: SSL decryption/inspection, data loss prevention (DLP), cloud access security broker (CASB), SaaS tenant restrictions, granular app control, file type control

Branch gateway services

• Built-in DHCP, NAT, QoS, and VLAN management services
• Web caching: accelerates frequently accessed content
• Load balancing: combines multiple WAN links into a single high-speed interface, with policies for QoS, traffic shaping, and failover
• Smart connection monitoring provides automatic detection of layer 2 and layer 3 outages and fast failover, including the option of integrated LTE Advanced or 3G/4G modems

Industry-leading cloud management

• Unified firewall, switching, wireless LAN, and mobile device management through an intuitive web-based dashboard
• Template-based settings scale easily from small deployments to tens of thousands of devices
• Role-based administration, configurable email alerts for a variety of important events, and easily auditable change logs
• Summary reports with user, device, and application usage details archived in the cloud

Intelligent site-to-site VPN with Cisco SD-WAN powered by Meraki

• Auto VPN allows automatic VPN route generation using IKE/ IKEv2/IPsec setup; runs on physical MX appliances and as a virtual instance in public and private clouds
• SD-WAN with active / active VPN, policy-based-routing, dynamic VPN path selection, and support for application-layer performance profiles to ensure prioritization of applications types that matter
• Interoperates with all IPsec VPN devices and services
• Automated MPLS to VPN failover within seconds of a connection failure
• L2TP IPsec remote client VPN included at no extra cost with support for native Windows, Mac OS X, iPad, and Android clients
• Support for Cisco AnyConnect remote client VPN (AnyConnect license required)

Product Options