Cloud Managed Security Appliance for Large Branch / Campus Networks
(REQUIRES LICENSE TO OPERATE)
The Cisco Meraki MX250 Security Appliance is ideal for organizations considering a Unified Threat Management (UTM) solution, for distributed sites, campuses or datacenter VPN concentration. Since the MX is 100% cloud-managed, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include SD-WAN capabilities, application-based firewalling, content filtering*, web search filtering, SNORT® based intrusion detection and prevention*, Cisco Advanced Malware Protection (AMP)*, web caching, 4G cellular failover and more.
*Content Filtering, SNORT® based intrusion detection and prevention and Cisco Advanced Malware Protection (AMP) features require Advanced Security License.
The following table provides a list of major MX features and their required license edition:
|
Feature |
Enterprise |
Advanced Security |
Secure SD-WAN Plus |
|
Centralized management |
✔ |
✔ |
✔ |
|
Zero-touch firmware updates |
✔ |
✔ |
✔ |
|
True zero-touch provisioning |
✔ |
✔ |
✔ |
|
24x7 enterprise support |
✔ |
✔ |
✔ |
|
Open APIs |
✔ |
✔ |
✔ |
|
Automatic WAN failover |
✔ |
✔ |
✔ |
|
Sub-second site-to-site VPN failover |
✔ |
✔ |
✔ |
|
Sub-second dynamic path selection |
✔ |
✔ |
✔ |
|
Stateful firewall |
✔ |
✔ |
✔ |
|
VLAN to VLAN routing |
✔ |
✔ |
✔ |
|
Advanced Routing |
✔ |
✔ |
✔ |
|
Link bonding/failover |
✔ |
✔ |
✔ |
|
3G / 4G cellular failover |
✔ |
✔ |
✔ |
|
Traffic shaping/prioritization |
✔ |
✔ |
✔ |
|
Site-to-site VPN |
✔ |
✔ |
✔ |
|
Client VPN |
✔ |
✔ |
✔ |
|
MPLS to VPN Failover |
✔ |
✔ |
✔ |
|
Splash pages |
✔ |
✔ |
✔ |
|
Configuration templates |
✔ |
✔ |
✔ |
|
Group Policies |
✔ |
✔ |
✔ |
|
Client connectivity alerts |
✔ |
✔ |
✔ |
|
Essential SD-WAN |
✔ |
✔ |
✔ |
|
Source-Based Routing |
✔ |
✔ |
✔ |
|
Local Breakout (IP based) |
✔ |
✔ |
✔ |
|
Geography based firewall rules |
|
✔ |
✔ |
|
Intrusion detection & prevention |
|
✔ |
✔ |
|
Content filtering |
|
✔ |
✔ |
|
Youtube for Schools |
|
✔ |
✔ |
|
Web Search Filtering |
|
✔ |
✔ |
|
Cisco Advanced Malware Protection (AMP) |
|
✔ |
✔ |
|
Umbrella DNS Integration** |
|
✔ |
✔ |
|
Threat Grid Integration** |
✔ |
✔ |
|
|
Web App Health Analytics |
✔ |
||
|
WAN Health Analytics |
✔ |
||
|
VoIP Health Analytics |
✔ |
||
|
Smart breakout * |
✔ |
*coming soon
**Requires a separate license
Product Highlights
• Recommended for campus or VPN concentrator networks with up to 2,000 users
• Up to 4 Gbps of stateful firewall throughput
• Integrated Content Filtering, SNORT® intrusion detection / prevention and Cisco Advanced Malware Protection (AMP) features available with purchase of Advanced Security License
• 8 x 1G RJ45 LAN Interfaces
• 8 x 1G SFP LAN interfaces*
• 8 x 10G SFP+ LAN interfaces*
• 2 x 10G SFP+ WAN interfaces*
• Auto VPN for intelligent site-to-site VPN connectivity
• 802.1x port authentication for wired devices
• Layer 7 application traffic shaping and prioritization
• Layer 3 firewall to separate corporate data from personal traffic
• Self-configuring, plug-and-play deployment
• Integrated mounting brackets for rack and desk mounting
• Support for field replaceable, redundant power supplies
• USB port for 3G/4G connectivity
*SFP modules sold separately.