Overview:

The Cisco Meraki MX64 is an integrated router, next-generation firewall, traffic shaper, and Internet gateway that is centrally managed over the web. The MX64 offers an extensive feature set, yet is incredibly easy to deploy and manage. Intuitive web-based administration eliminates specialized training and dedicated staff, and cloud-based centralized management provides seamless multi-site networks, automatic firmware upgrades, and much more.

The MX64 supports bleeding-edge and market-leading intrusion prevention (IPS) via an integrated Sourcefire engine. IPS is performed via rulesets: pre-defined security policies that determine the level of protection needed. Sourcefire refreshes rulesets daily to ensure protection against the latest vulnerabilities—including exploits, viruses, rootkits, and more—and these are pushed via the cloud to MX customers within an hour, with no manual staging or patching needed.

Combine this threat protection with integrated malware/anti-phishing and cloud content filtering, and network admins have a robust security solution that is easy to deploy and seamlessly maintains itself.

MX64 Highlights

A Complete Solution for Distributed Networks

The MX provides a complete networking and security solution that typically requires up to four appliances: branch router, next-generation firewall, Layer 7 traffic shaper, and CIPA-compliant content filter.

This integrated architecture dramatically reduces up-front costs and ongoing support and maintenance. Moreover, it provides unified, single pane-of-glass management, speeding deployment and eliminating the need for specialized training.

The First Cloud Managed Networking and Security Platform

The Cisco Meraki MX is a complete networking and security solution, designed to make distributed networks fast, secure, and easy to manage.

The MX is managed entirely through Cisco Meraki’s web based dashboard. Designed with intuitive controls for IT generalists, the MX requires no training or specialized staff. The MX will even self-provision, allowing for remote branch deployments without on site IT.

Powerful Hardware Platform

The MX hardware platform is purpose-built for cloud management, with CPU and memory resources designed to provide application and content-aware security at the edge. The MX's robust platform enables advanced features like layer 7 application traffic shaping, content filtering, antivirus/antiphishing, and site-to-site VPN, while providing the throughput and capacity for modern, high-density networks.

Easy to Manage Without Training or On-Site Networking Expertise

The MX was designed for ease of use, even in branches without on-site IT. An intuitive interface, contextual help, and real-time support from the cloud eliminate specialized training. To deploy the MX in remote locations, simply connect the MX to the Internet, and it will securely self-provision from the cloud. Firmware upgrades, security patches, and signature updates are all delivered seamlessly from the cloud, ensuring that the MX is always up to date. Integrating broad security and networking features into a single intuitive device drastically reduces complexity in the branch.

Secure, Reliable Distributed Networking Without Costly MPLS

The MX eliminates costly MPLS tunnels with secure site-to-site VPN over redundant Internet connections. Using IPsec over the Internet, the MX links your branches to headquarters as well as to one another as if connected with a virtual Ethernet cable. Configuration headaches like NAT traversal are handled automatically from the cloud. The MX70's dual WAN ports with balancing and failover enable the use of redundant commodity Internet connections, providing more bandwidth and higher reliability than MPLS, at a fraction of the cost.

Connects and Secures Branches from the Cloud

Cisco Meraki’s cloud management platform makes it easy to deploy secure, interconnected, centrally managed multi-site networks. Add new sites in seconds with auto-configuring VPN. Centrally manage user, content and application-aware firewall policies across your entire network.

 

Control Applications, Users, and Devices

The MX provides complete control over users, content, and applications, giving the visibility, security, and control required for mixed-use networks. Layer 7 fingerprinting technology lets administrators block objectionable content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth. Likewise, the MX can prioritize critical applications like voice and video. User fingerprinting identifies clients by name, operating system, or device (e.g. iPad). Fast search, automatic reports, and device quarantine provide complete visibility and control over the users across the entire network.

Increases WAN Performance and Reduces Bandwidth Costs

Block unwanted bandwidth hogs like BitTorrent, and add capacity with WAN load balancing. Cache, deduplicate, and optimize traffic with WAN optimization to lower bandwidth consumption by up to 99% and improve application performance by up to 209x.


 

Management

• Managed via the web using the Cisco Meraki dashboard
• Single pane-of-glass into managing wired and wireless networks
• Zero-touch remote deployment (no staging needed)
• Automatic firmware upgrades and security patches
• Templates based multi-network management
• Org-level two-factor authentication and single sign-on
• Role based administration with change logging and alerts

Monitoring and Reporting

• Throughput, connectivity monitoring and email alerts
• Detailed historical per-port and per-client usage statistics
• Application usage statistics
• Org-level change logs for compliance and change management
• VPN tunnel and latency monitoring
• Network asset discovery and user identification
• Periodic emails with key utilization metrics
• Syslog integration

Remote Diagnostics

• Live remote packet capture
• Real-time diagnostic and troubleshooting tools
• Aggregated event logs with instant search

Network and Security Services

• Stateful firewall, 1:1 NAT, DMZ
• Identity-based policies
• Auto VPN: Automated site-to-site (IPsec) VPN, for hub-and-spoke or mesh topologies
• Client (IPsec L2TP) VPN
• Multiple WAN IP, PPPoE, NAT
• VLAN support and DHCP services
• Static routing
• User and device quarantine

WAN Performance Management

• Web caching
• WAN link aggregation
• Automatic Layer 3 failover (including VPN connections)
• 3G / 4G USB modem failover
• Application level (Layer 7) traffic analysis and shaping
• Ability to choose WAN uplink based on traffic type
• Note: Web caching is not available on the MX64 or MX64W models.

Advanced Security Services

• Content filtering (Webroot BrightCloud CIPA compliant URL database)
• Web search filtering (including Google / Bing SafeSearch)
• YouTube for Schools
• Intrusion-prevention sensor (Sourcefire SNORT® based)
• Anti-virus engine and anti-phishing filtering (Kaspersky SafeStream II engine)
• Geography based firewall rules (MaxMind Geo-IP database)
• Note: Advanced security services require Advanced Security license.

Regulatory

• FCC (US)
• CB (IEC)
• CISPR (Australia/New Zealand)

Warranty

• Full lifetime hardware warranty with next-day advanced replacement included.

Multi-Site Cloud Management

The Cisco Meraki Cloud Networking architecture enables plug and play branch deployments and provides centralized visibility and control across any number of distributed locations.

MX security appliances self-provision – automatically pulling policies and configuration from the cloud – enabling branch deployments without on-site IT. The Cisco Meraki cloud delivers seamless firmware and security signature updates, automatically establishes site-to-site VPN tunnels, and provides automatic network monitoring and alerts.

Since the MX is managed entirely through the Cisco Meraki web-based dashboard, configuration and diagnostics can be performed remotely just as easily as they can be performed on-site, eliminating costly field visits. Even firmware updates are performed seamlessly, over the web.
 

Auto VPN

Cisco Meraki's unique auto provisioning site-to-site VPN connects branches securely with complete simplicity. Using IPsec over any wide area network, the MX links your branches to headquarters as well as to one another as if connected with a virtual Ethernet cable.

Site-to-site connectivity is established through a single click in Cisco Meraki's dashboard. Gone are the configuration headaches of traditional site-to-site VPNs: route discovery, key negotiation, authentication, security policies, crypto maps, and access lists are all handled automatically from the cloud.

Ease of use does not come at the expense of flexibility. Both full and split tunnel VPNs can be configured easily. New sites can similarly be added with a few simple clicks.
 

Application-Aware Firewall

An integrated application-aware stateful firewall secures your network from malicious entities threatening today's networks. It's no longer enough to simply block protocols, hosts, and ports – a firewall must also be user, content, and application aware.

Protect your network using an integrated Snort-based intrusion detection system (IDS) featuring signature, protocol, and anomaly-based inspection. Use custom firewall rules to secure your network, allowing only approved, essential services and connections. Easily segregate voice, video, and data traffic, and deploy global firewall rules across VPN networks with a single click.


 

Intrusion Prevention

Every Cisco Meraki MX Security Appliance supports unparalleled threat prevention via an integrated Sourcefire engine. Networks can be secured in seconds from the latest exploits, vulnerabilities, viruses, rootkits and more, with threat definitions automatically updated for bleeding edge protection.

View comprehensive security reports, displayed directly in the intuitive Meraki dashboard, from any Internet-accessible device. Data is presented in real time, allowing IT admins to quickly gauge current threat status—as well as view historical trends—for informed decision-making.

 

Control Applications, Users, and Devices

The MX was purpose-built for modern, multi-use networks, providing extensive visibility and control over users, content, and applications. Far beyond simple host- and port-based solutions, the MX's Layer 7 fingerprinting classifies evasive and encrypted applications including P2P. Block unwanted web traffic with CIPA-compliant content filtering, throttle bandwidth hogs like Netflix and BitTorrent, and even prioritize productivity apps like VoIP.

The MX also provides insight into the users on the network, identifying clients by device type (e.g., iPads) and even username. Inspect, throttle, or block users, and integrate with Active Directory to apply different policies to different classes of users.
 

Content Filtering

The MX's CIPA-compliant content filter enables administrators to block categories of content (adult, drugs, gambling, etc.) as well as individual URLs. Active Directory integration allows for different content filtering policies for different groups of users. The MX automatically refreshes its filtering lists from the cloud, so that your rules are always up to date, even as websites change.

Built-in Google SafeSearch and YouTube for Schools enable a safe and secure learning environment without additional appliances or complex configuration. Integrated web caching dramatically accelerates browsing for users watching videos or using online apps.
 

WAN Optimization

Reduce intersite application bandwidth by up to 99% and accelerate CIFS, FTP, HTTP, and TCP traffic by up to 209x with the MX. A state-of-the-art WAN optimization engine uses advanced algorithms, deduplication, compression, and hard-disk based caching to make the WAN feel like a LAN.

Integrated web caching dramatically accelerates browsing for users watching videos or using online apps.

Built-in WAN optimization aids in server consolidation and private cloud initiatives, as well as any distributed network where end-user bandwidth costs or performance are a priority.

 

Smart Link Bonding

Connect your branch with multiple WAN links, e.g., cable, DSL, T1, or even 3G/4G. Configure the MX to balance traffic between primary uplinks and failover to 3G/4G if those connections go down.

The MX's Smart Link Bonding increases bandwidth and reduces cost. Supplement a T1 with an affordable DSL connection, increasing bandwidth for video and cloud applications. For maximum cost savings, forgo leased lines altogether by deploying the MX's site-to-site VPN over DSL, cable, or 3G/4G for secure, redundant, inexpensive connectivity.
 

Branch Routing

The MX provides a complete networking solution, with a host of networking services for branch environments. Manage IP addresses with built-in DHCP and NAT. Enforce DMZs, punch firewall holes in seconds, segregate traffic with VLANs, and create routes through an intuitive web interface.

Networking features integrate seamlessly with site to site VPN, stateful firewall, and other services, eliminating the need for an external branch router in most environments.

 

Bonjour Gateway

The MX includes an integrated Bonjour gateway, enabling seamless support of Apple TVs, printers, AirPlay mirroring, and any other Bonjour server device. Selective bridging of services with subnet filtering allows for Bonjour support without overloading the network with multicast traffic.

The MX's intuitive configuration interface simplifies management of large-scale networks with many Apple devices, allowing for Bonjour support to be enabled with just a few clicks.

Be The First To Review This Product!

Help other KS Computer Technology Pty Ltd users shop smarter by writing reviews for products you have purchased.

Write a product review