Cisco Meraki Cloud Networking CloudWifiWorks

Transcription

Datasheet MXMeraki MXCloud Managed Security & SD-WANOverviewCisco Meraki MX Security Appliances are ideal for organizations considering a Unified Threat Managment (UTM) solution, for distributedsites, campuses or datacenter VPN concentration. Since the MX is 100% cloud managed, installation and remote management is simple. TheMX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include SD-WAN capabilities,application-based firewalling, content filtering, web search filtering, SNORT based intrusion detection and prevention, Cisco Advanced MalwareProtection (AMP), web caching, 4G cellular failover and more. Auto VPN and SD-WAN features are available on our hardware and virtual appliances, configurable in Amazon Web Services.FEATURE-RICH UNIFIED THREAT MANAGEMENT (UTM)CAPABILITIESINTELLIGENT SITE-TO-SITE VPN WITH MERAKI SD-WANJ Application-aware traffic control: bandwidth policies for Layer 7application types (e.g., block YouTube, prioritize Skype, throttleBitTorrent). Auto VPN: automatic VPN route generation using IKE/IPsec setup.Runs on physical MX appliances and as a virtual instance withinthe Amazon AWS cloud services. Content filtering: CIPA-compliant content filter, safe-seach enforcement(Google/Bing), and YouTube for Schools. SD-WAN with active / active VPN, policy-based-routing, dynamicVPN path selection and support for application-layer performanceprofiles to ensure prioritization of the applications types that matter Intrusion prevention: PCI-compliant IPS sensor using industry-leadingSNORT signature database from Cisco Sourcefire. Interoperates with all IPsec VPN devices and services. Advanced Malware Protection: file reputation-based protectionengine powered by Cisco AMP. Automated MPLS to VPN failover within seconds of a connectionfailure Identity-based security policies and application management. Client VPN: L2TP IPsec support for native Windows, Mac OS X,iPad and Android clients with no per-user licensing fees.INDUSTRY-LEADING CLOUD MANAGEMENTBRANCH GATEWAY SERVICES Unified firewall, switching, wireless LAN, and mobile device management through an intuitive web-based dashboard. Built-in DHCP, NAT, QoS, and VLAN management services. Web caching: accelerates frequently accessed content. Template based settings scale easily from small deployments totens of thousands of devices. Role-based administration, configurable email alerts for a variety ofimportant events, and easily auditable change logs. Summary reports with user, device, and application usagedetails archived in the cloud. Load balancing: combines multiple WAN links into a single highspeed interface, with policies for QoS, traffic shaping, and failover. Smart connection monitoring: automatic detection of layer 2 andlayer 3 outages and fast failover, including 3G/4G USB modems.

INSIDE THE CISCO MERAKI MXMX450 shown, features vary by modelRedundant PowerModular FansReliable, energy efficientdesign with field replaceablepower suppliesHigh-performance frontto-back cooling with fieldreplaceable fansAdditional MemoryFor high-performance contentfilteringCryptographicAccelerationEnhanced CPUReduced load withhardware crypto assistLayer 3-7 firewalland traffic shapingWeb Caching128G SSD diskFRONT OF THE CISCO MERAKI MXMX450 shown, features vary by model23G/4G Modem SupportDual 10G WAN Interfaces1G/10G Ethernet/SFP InterfacesAutomatic cellular failoverLoad balancing and SD-WAN10G SFP interfaces for high-speedLAN connectivityMulticolor Status LEDManagement InterfaceMonitor device statusLocal device accessCisco Systems, Inc. 500 Terry A. Francois Blvd, San Francisco, CA 94158 (415) 432-1000 sales@meraki.com

Ironclad SecurityThe MX platform has an extensive suite of security featuresincluding IDS/IPS, content filtering, web search filtering, antimalware, geo-IP based firewalling, IPsec VPN connectivityand Cisco Advanced Malware Protection, while providing theperformance required for modern, bandwidth-intensive networks.Layer 7 fingerprinting technology lets administrators identifyunwanted content and applications and prevent recreational appslike BitTorrent from wasting precious bandwidth.The integrated Cisco SNORT engine delivers superior intrusionprevention coverage, a key requirement for PCI 3.0 compliance.The MX also uses the Webroot BrightCloud URL categorizationdatabase for CIPA / IWF compliant content-filtering, CiscoAdvanced Malware Protection (AMP) engine for anti-malware,AMP Threat Grid Cloud, and MaxMind for geo-IP based securityrules.Best of all, these industry-leading Layer 7 security engines andsignatures are always kept up-to-date via the cloud, simplifyingnetwork security management and providing peace of mind toIT administrators.Organization Level Threat Assessment with Meraki Security CenterIdentity Based Policy Management3Cisco Threat Grid Cloud for Malicious File SandboxingCisco Systems, Inc. 500 Terry A. Francois Blvd, San Francisco, CA 94158 (415) 432-1000 sales@meraki.com

SD-WAN Made SimpleSoftware-defined WAN is a new approach to network connectivity that lowers operational costs and improves resource usage for multisite deployments to use bandwidth more efficiently. This allows service providers to offer their customers thehighest possible level of performance for critical applications without sacrificing security or data privacy.Transport independenceApplication optimizationIntelligent path controlSecure connectivityApply bandwidth, routing, andsecurity policies across a variety of mediums (MPLS, Internet,or 3G/4G LTE) with a singleconsistent, intuitive workflowLayer 7 traffic shaping and application prioritization optimize thetraffic for mission-critical applications and user experience.Dynamic policy and performance based path selectionwith automatic load balancingfor maximum network reliabilityand performanceIntegrated Cisco Securitythreat defense technologiesfor direct Internet accesscombined with IPsec VPN toensure secure communicationwith cloud applications, remoteoffices, or datacentersCloud Managed ArchitectureBuilt on Cisco Meraki’s award-winning cloud architecture, theMX is the industry’s only 100% cloud-managed solution for UnifiedThreat Management (UTM) and SD-WAN in a single appliance.MX appliances self-provision, automatically pulling policiesand configuration settings from the cloud. Powerful remotemanagement tools provide network-wide visibility and control,and enable administration without the need for on-site networkingexpertise.Cisco Meraki Cloud Management Architecture4Cloud services deliver seamless firmware and security signatureupdates, automatically establish site-to-site VPN tunnels, andprovide 24x7 network monitoring. Moreover, the MX’s intuitivebrowser-based management interface removes the need forexpensive and time-consuming training.For customers moving IT services to a public cloud service,Meraki offers a virtual MX for use in Amazon Web Services,enabling Auto VPN peering and SD-WAN for dynamic pathselection.End-to-End Network Visibility and TroubleshootingCisco Systems, Inc. 500 Terry A. Francois Blvd, San Francisco, CA 94158 (415) 432-1000 sales@meraki.com

Integrated 802.11ac WirelessThe MX64W and MX65W integrate Cisco Meraki’s award-winningwireless technology with the powerful MX network security featuresin a compact form factor ideal for branch offices or small enterprises. Dual-band 802.11n/ac, 2x2 MIMO with 2 spatial streams Unified management of network security and wireless Integrated enterprise security and guest accessMX65W Security ApplianceThe MX65 and MX65W include two ports with 802.3at (PoE ). Thisbuilt-in power capability removes the need for additional hardware topower critical branch devices. 2 x 802.3at (PoE ) ports capable of providing a total of 60W APs, phones, cameras, and other PoE enabled devices can bepowered without the need for AC adapters, PoE converters, orunmanaged PoE switches.MX65 Port ConfigurationMeraki vMX100Virtual MX is a virtual instance of a Meraki security appliance, dedicated specifically to providing the simple configuration benefits ofsite-to-site Auto VPN for customers running or migrating IT servicesto the public cloud. A virtual MX is added via the Amazon Web Services marketplace and then configured in the Meraki dashboard, justlike any other MX. It functions like a VPN concentrator. An Auto VPN to a virtual MX is like having a direct Ethernet connection to a private datacenter. The virtual MX can support upto 500 Mbps of VPN throughput, providing ample bandwidth formission critical IT services hosted in the public cloud, like ActiveDirectory, logging, or file and print services. Support for Amazon Web Services (AWS) No hardware, only a Meraki license is required5Cisco Systems, Inc. 500 Terry A. Francois Blvd, San Francisco, CA 94158 (415) 432-1000 sales@meraki.com

Desktop and All-in-one ModelsMX64MX64WMX65MX65WSmall branchSmall branchSmall branchSmall branch50505050Stateful FirewallThroughput250 Mbps250 Mbps250 Mbps250 MbpsAdvanced SecurityThroughput200 Mbps200 Mbps200 Mbps200 Mbps100 Mbps100 Mbps100 Mbps100 Mbps50505050Recommendeduse casesRecommended clientsMaximum VPNThroughputMaximum concurrentVPN tunnelsWAN InterfacesDedicated1 x GbE RJ451 x GbE RJ452 x GbE RJ452 x GbE RJ451 x USB (cellular failover1)1 x USB (cellular failover1)1 x USB (cellular failover1)1 x USB (cellular failover1)1 x GbE RJ451 x GbE RJ45--4 x GbE RJ454 x GbE RJ4510 x GbE RJ45 (2 x PoE )10 x GbE RJ45 (2 x PoE )----Desktop or Wall mountDesktop or Wall mountDesktop or Wall mountDesktop or Wall mount9.5” x 5.2” x 1” (239mmx 132mm x 25mm)9.5” x 5.2” x 1” (239mmx 132mm x 25mm)10.0” x 5.2” x 1” (256mmx 132mm x 25mm)10.0” x 5.2” x 1” (256mmx 132mm x 25mm)1.61 lb (0.7 kg)3.04 lb (1.4 kg)1.98 lb (0.9 kg)3.37 lb (1.53 kg)18W DC (included)18W DC (included)90W DC (included)90W DC (included)Power Load(idle/max)4W / 10W6W / 13W6W / 72W9W / 79WOperatingTemperature32 F to 104 F(0 C to 40 C)32 F to 104 F(0 C to 40 C)32 F to 104 F(0 C to 40 C)32 F to 104 F(0 C to 40 C)5% to 95%5% to 95%5% to 95%5% to 95%Dual-purpose2LAN InterfacesFixedWeb CachingMountingDimensions(w x d x h)WeightPower SupplyHumidity61Requires separate cellular modem2Interface configurable for WAN or LAN useCisco Systems, Inc. 500 Terry A. Francois Blvd, San Francisco, CA 94158 (415) 432-1000 sales@meraki.com

Rack mount modelsMX84MX100MX250MX400MX450MX600Recommendeduse casesMedium branchLarge branchCampus orVPN concentratorCampus orVPN concentratorCampus orVPN concentratorCampus orVPN 0010,000Stateful FirewallThroughput500 Mbps750 Mbps4 Gbps1 Gbps6 Gbps1 GbpsAdvanced SecurityThroughput320 Mbps650 Mbps2 Gbps1 Gbps4 Gbps1 GbpsMaximum VPNThroughput250 Mbps500 Mbps1 Gbps1 Gbps2 Gbps1 GbpsMaximum concurrentVPN tunnels1002501,0001,0005,0005,0002 x GbE RJ451 x GbE RJ452 x 10GbE SFP 2 x 1GbE RJ452 x 10GbE SFP 2 x 1GbE RJ451 x USB (cellularfailover1)1 x USB (cellularfailover1)1 x USB (cellularfailover1)2 x USB (cellularfailover1)1 x USB (cellularfailover1)2 x USB (cellularfailover1)-1 x GbE RJ45----Fixed8 x GbE2 x GbE (SFP)8 x GbE2 x GbE (SFP)8 x GbE (RJ45)8 x GbE (SFP)8 x 10GbE (SFP )2 x GbE(LAN bypass)8 x GbE (RJ45)8 x GbE (SFP)8 x 10GbE (SFP )2 x GbE(LAN bypass)Modular---8 x GbE (RJ45)8 x GbE (SFP)2 x 10GbE (SFP )-8 x GbE (RJ45)8 x GbE (SFP)2 x 10GbE (SFP )Web Caching1TB1TB128GB (SSD)1TB128GB (SSD)4 x 1 TB (RAID)Mounting1U rack1U rack1U rack1U rack1U rack2U rackDimensions(w x d x h)19” x 10 “ x 1.75”(483 mm x 254mm x 44 mm)19” x 10 “ x 1.75”(483 mm x 254mm x 44 mm)19” x 17.3 “ x 1.75”(483 mm x 440mm x 44 mm)19” x 22“ x 1.75”(483 mm x 559mm x 44 mm)19” x 17.3 “ x 1.75”(483 mm x 440mm x 44 mm)19” x 22 “ x 3.5”(483 mm x 559mm x 89 mm)Weight9 lb (4.1kg)9 lb (4.1kg)16 lb (7.3kg)33 lb (15.0 kg)16 lb (7.3kg)53 lb (24.0 kg)Power SupplyInternal, 100-220V50/60Hz ACInternal 100-220V50/60Hz ACModular 110-220V50/60Hz ACInternal 100-220V50/60Hz ACModular 110-220V50/60Hz ACInternal 100-220V50/60Hz ACWAN InterfacesDedicatedDual-purpose2LAN Interfaces(optional, max. of 2)2 x 250WAC PSU1272 x 250WAC PSUPower Load(idle/max)26W / 32W30W / 55W105W / 190W123W / 215W105W / 190W132W / 226WOperatingTemperature32 F to 104 F(0 C to 40 C)32 F to 104 F(0 C to 40 C)32 F to 104 F(0 C to 40 C)32 F to 104 F(0 C to 40 C)32 F to 104 F(0 C to 40 C)32 F to 104 F(0 C to 40 C)Humidity5% to 95%5% to 95%5% to 95%5% to 95%5% to 95%5% to 95%Requires separate cellular modemInterface configurable for WAN or LAN useCisco Systems, Inc. 500 Terry A. Francois Blvd, San Francisco, CA 94158 (415) 432-1000 sales@meraki.com

Virtual AppliancesvMX100Recommendeduse casesExtend Auto-VPN and SD-WAN to public cloud servicesSupported PlatformsAmazon Web Services (AWS)Interfaces1 VirtualVPN Throughput500 MbpsWeb CachingNot applicableIncluded In the BoxPackage ContentsPlatform(s)Mounting kitAllCat 5 Ethernet cable (2)AllAC Power AdapterMX64, MX64W, MX65, MX65WWireless external omni antenna (2)MX64W, MX65W250W Power Supply (2)MX250, MX450400W Power Supply (2)MX400, MX600System Fan (2)MX250, MX450Mounting railsMX400, MX600Lifetime Warranty with Next-day Advanced ReplacementCisco Meraki MX appliances include a limited lifetime hardware warranty that provides next-day advance hardware replacement. Cisco Meraki’ssimplified software and support licensing model also combines all software upgrades, centralized systems management, and phone supportunder a single, easy-to-understand model. For complete details, please visit meraki.cisco.com/support.8Cisco Systems, Inc. 500 Terry A. Francois Blvd, San Francisco, CA 94158 (415) 432-1000 sales@meraki.com

AccessoriesThe Cisco Meraki MX84, MX100, MX250, MX450, MX400, andMX600 models support pluggable optics for high-speed backboneconnections between wiring closets or to aggregation switches.Cisco Meraki offers several standards-based Gigabit and 10 Gigabitplugg

Created Date: 9/25/2017 9:45:11 AM