MX Family Datasheet 20240528 English 3

MX FA M I LY DATA SH E ET
Meraki MX Cloud-Managed
Security and SD-WAN
Overview
The Cisco Meraki MX is a multifunctional security and SD-WAN enterprise
appliance with a wide set of capabilities to address multiple use cases—from an
all-in-one device. Organizations of all sizes and across all industries rely on the
MX to deliver secure connectivity to hub locations or multicloud environments, as
well as application quality of experience (QoE), through advanced analytics with
machine learning.
The MX is 100% cloud managed, so installation and remote management is truly

zero touch, making it ideal for distributed branches, campuses, and data center
locations. Natively integrated with a comprehensive suite of secure network and
assurance capabilities, the MX eliminates the need for multiple appliances. These
capabilities include application-based firewalling, content filtering, web search
filtering, SNORT®-based intrusion detection and prevention, Cisco Advanced
Malware Protection (AMP), site-to-site Auto VPN, client VPN, WAN and cellular
failover, dynamic path selection, web application health, VoIP health, and more.
SD-WAN can easily be extended to deliver optimized access to resources in
public and private cloud environments with virtual MX (vMX) appliances. Public
clouds supported with vMX include Amazon Web Services (AWS), Microsoft
Azure, Google Cloud Platform, and Alibaba Cloud, and private cloud support
through Cisco NFVIS.
MERAKI.COM
M X FA M I LY DATA S H E E T 2
Advanced quality of experience (QoE) analytics

• Monitor end-to-end health of web applications at a glance across the LAN, WAN,
and application server
• Machine-learned smart application thresholds autonomously apply to identify true

anomalies based on past behavioral patterns
• Monitor the health of all MX WAN links, including cellular, across your entire organization
• Get detailed hop-by-hop VoIP performance analysis across all uplinks
Agile on-premises and cloud security capabilities

informed by Cisco Talos
• Next-gen layer 7 firewall for identity-based security policies and application management
• Advanced Malware Protection with sandboxing; file reputation-based protection engine

powered by Cisco AMP
• Intrusion prevention: PCI-compliant IPS sensor using industry-leading SNORT® signature

database from Cisco
• Granular and automatically updated category-based content filtering
• Other capabilities: SSL decryption/inspection, data loss prevention (DLP), cloud access
security broker (CASB), SaaS tenant restrictions, granular app control, file type control
Branch gateway services

• Built-in DHCP, NAT, QoS, and VLAN management services
• Web caching: accelerates frequently accessed content
• Load balancing: combines multiple WAN links into a single high-speed interface, with
policies for QoS, traffic shaping, and failover
• Smart connection monitoring provides automatic detection of layer 2 and layer 3 outages
and fast failover, including the option of integrated LTE Advanced or 3G/4G modems
MERAKI.COM
Industry-leading cloud management

• Unified firewall, switching, wireless LAN, and mobile device management through an
intuitive web-based dashboard
• Template-based settings scale easily from small deployments to tens of thousands

of devices
• Role-based administration, configurable email alerts for a variety of important events, and
easily auditable change logs
• Summary reports with user, device, and application usage details archived in the cloud
Intelligent site-to-site VPN with Cisco Meraki SD-WAN

• Auto VPN allows automatic VPN route generation using IKE/IKEv2/IPsec setup; runs on
physical MX appliances and as a virtual instance in public and private clouds
• SD-WAN with active/active VPN, policy-based routing, dynamic VPN path selection, and
support for application-layer performance profiles to ensure prioritization of applications
types that matter
• Interoperates with all IPsec VPN devices and services
• Automated MPLS to VPN failover within seconds of a connection failure
• Layer 2 TP IPsec remote client VPN included at no extra cost with support for native
Windows, Mac OS X, iPad, and Android clients
• Support for Cisco AnyConnect remote client VPN (AnyConnect license required)
Mix-and-match Meraki and Cisco Catalyst SD-WAN

• A native and resilient link can easily be established between Meraki and Catalyst SD-WAN
to allow the flow of desired traffic—all from the Meraki dashboard
• Choose between Meraki and Catalyst SD-WAN for the best fit across all your disparate
location types and streamline management from a single dashboard
• Sites with similar attributes can run the most operationally efficient SD-Branch solution
with Meraki MX and locations that demand precise WAN configurations can run the most
customizable SD-WAN with Catalyst
MERAKI.COM
Inside the Meraki MX

MX450 shown, features vary by model
Redundant power Modular fans

Reliable, energy-efficient High-performance front-
design with field- to-back cooling with
replaceable field-replaceable fans
power supplies
Additional memory
For high-performance
Cryptographic content filtering
acceleration
Reduced load with Enhanced CPU
hardware crypto assist
Layer 3-7 firewall and
traffic shaping
Front of the Cisco Meraki MX

MX450 shown, features vary by model
3G/4G modem Dual 10G WAN interfaces 1G/10G Ethernet/SFP+ interfaces

support
Load balancing and SD-WAN 10G SFP+ interfaces for high-speed
Multicolor status LED Automatic LAN connectivity
Monitor device status cellular failover Management interface
Local device access
MERAKI.COM
Security and SD-WAN
Security and SD-WAN is delivered by MX appliances. Security and SD-WAN has helped thousands
of organizations rapidly save costs by reducing their dependence on MPLS without compromising on
performance. As enterprises continue to shift from hub-centric architectures interconnected with VPN to
ones that leverage public internet connectivity, SD-WAN powered by Meraki delivers advanced analytics
with ML to monitor and optimize quality of experience (QoE) for applications, regardless of where they might
be hosted.
Transport independence Advanced analytics
Leverage more than one uplink of any type Coming soon: at a glance health of web
with automatic failover, including MPLS, broadband, applications with ML thresholds, VoIP, and WAN
fiber, or cellular. with predictive analytics.
Native security SaaS quality of experience
Integrated with next-gen firewall, content filtering, Manual and performance-based path selection
Advanced Malware Protection (AMP), and IDS/IPS using advanced analytics.
informed by Cisco Talos.
MERAKI.COM
Ironclad security
The MX platform has an extensive suite of security features, including IDS/IPS,

content filtering, web search filtering, anti-malware, GeoIP-based firewalling, IPsec VPN
connectivity, and Cisco AMP, while providing the performance required for modern,
bandwidth-intensive networks.
Layer 7 fingerprinting technology lets administrators identify unwanted content and

applications and prevents recreational apps like BitTorrent from wasting precious bandwidth.
The integrated Cisco SNORT® engine delivers superior intrusion prevention coverage, a
key requirement for PCI 3.2 compliance. The MX also uses the Webroot BrightCloud® URL
categorization database for CIPA/IWF-compliant content filtering, Cisco AMP engine for anti-
malware, Cisco AMP Threat Grid - Cloud, and MaxMind for GeoIP-based security rules.
Best of all, these industry-leading layer 7 security engines and signatures are always kept up
to date via the cloud, simplifying network security management and providing peace of mind
to IT administrators.
Organization-level threat assessment with Meraki Security Center
MERAKI.COM
Identity-based policy management Cisco AMP Thread Grid - Cloud
Cloud-managed architecture
Built on the award-winning cloud architecture of Cisco Meraki, the MX is the industry’s only 100% cloud-
managed solution for unified threat management (UTM) and SD-WAN in a single appliance. MX appliances
self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote
management tools provide network-wide visibility and control and enable administration without the need
for on-site networking expertise.
Cloud services deliver seamless firmware and security signature updates, automatically establish site-
to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX’s intuitive browser-based
management interface removes the need for expensive and time-consuming training.
For customers moving IT services to a public cloud service, Meraki offers a virtual MX for use in Amazon
Web Services and Microsoft Azure, enabling Auto VPN peering and SD-WAN for dynamic path selection.
Branch office Retail store
Campus/HQ Teleworker
Cloud-Hosted
Management
http://meraki.com
http://meraki.com
Management
data
On-premises hardware Browser-based management
Cisco Meraki cloud-management architecture End-to-end network visibility and troubleshooting
MERAKI.COM
Integrated 802.11ac Wave 2 wireless
The MX67W, MC68W, and MX68CW integrate

award-winning wireless technology from Meraki
with powerful MX network security features in a
compact form factor ideal for branch offices or
small enterprises.
• Dual-band 802.11n/ac Wave 2, 2x2 MU-MIMO

with two spatial streams
• Unified management of network security

and wireless
MX68CW security and SD-WAN appliance
• Integrated enterprise security and guest access
LTE Advanced
The MX67C and MX68CW include a SIM slot and
internal LTE modem. This integrated functionality
removes the need for external hardware and allows
for cellular visibility and configuration within the
Meraki dashboard.
• 1× Cat 6 300 Mbps LTE modem
• 1× nano SIM slot (4FF form factor)
• Global coverage with individual orderable

SKUs for North America and worldwide MX67C SIM slot
MERAKI.COM
Power over Ethernet (PoE)

The MX68, MX68W, and MX68CW include two ports
with 802.3at (PoE+). This built-in power capability
removes the need for additional hardware to power
critical branch devices.
• 2x 802.3at (PoE+) ports capable of providing a

total of 60 W
• APs, phones, cameras, and other PoE-enabled

devices can be powered without the need for MX68 port configuration
AC adapters, PoE converters, or unmanaged
PoE switches
Meraki virtual MX appliances for

public and private clouds
Virtual MX (vMX) is a virtual instance of a Meraki
security and SD-WAN appliance dedicated
specifically to providing the simple configuration
benefits of site-to-site Auto VPN for organizations
running or migrating IT services to public or private
cloud environments. An Auto VPN tunnel to a vMX
is like having a direct Ethernet connection to a
private data center.
Features and functionality of the vMX appliance:
• Securely connect branch sites with a physical

Meraki dashboard
MX appliance to resources in public cloud
environments in three clicks with Auto VPN
Support for private cloud environments through
• Extend SD-WAN to public cloud Cisco NFVIS vMX functions like a VPN concentrator,
environments for optimized access to and includes SD-WAN functionality like other MX
business-critical resources devices. For public cloud environments, a vMX is
added via the respective public cloud marketplace
• Only a Meraki license is required
and for private cloud environments, a vMX can be
• Available in three VPN throughput-based spun up on a Cisco UCS running NFVIS. Setup and
sizes to suit a wide range of use cases: management occurs in the Meraki dashboard, just
small, medium, large like any other MX.
MERAKI.COM
M X FA M I LY DATA S H E E T 1 0
Desktop and all-in-one models

M X67 M X67 W M X67C
Recommended
Small branch with up to 50 users
use case
NGFW
throughput
700 Mbps 700 Mbps 700 Mbps

Advanced
security services
throughput 1
Maximum
site-to-site 300 Mbps 300 Mbps 300 Mbps
VPN throughput
Maximum site-to-
50 50 50
site VPN tunnels2
WAN interfaces 1× GbE RJ45 1× GbE RJ45 1× GbE RJ45

(dedicated) 1× integrated
Cat 6 LTE
cellular modem
Dual-purpose 1× GbE RJ45 1× GbE RJ45 1× GbE RJ45
LAN interfaces
4× GbE RJ45 4× GbE RJ45 4× GbE RJ45
(fixed)
Mounting Desktop or wall mount Desktop or wall mount Desktop or wall mount
Dimensions 9.4 in x 5.1 in x 1.1 in 9.4 in x 6.5 in x 1.1 in 9.4 in x 6.9 in x 1.1 in
(w x d x h) (239 mm x 130 mm x 27 mm) (239 mm x 164 mm x 27 mm) (239 mm x 176 mm x 27 mm)
Weight 1.74 lb (0.7 kg) 1.84 lb (0.83 kg) 1.87 lb (0.85 kg)
Power supply 30 W DC 30 W DC 30 W DC
Power load 5 W/14 W 15 W/23 W 6 W/17 W

(idle/max)
Operating 32 °F to 113 °F 32 °F to 113 °F 32 °F to 113 °F

temperature (0 °C to 45 °C) (0 °C to 45 °C) (0 °C to 45 °C)
Humidity 5% to 95% 5% to 95% 5% to 95%
1
Throughput with advanced security services enabled including IDS/IPS, AMP, and secure malware analytics (formerly Threat Grid) can reach the same levels as that with
NGFW using trusted traffic exclusions. Learn more.
2
The maximum VPN tunnels are based on lab testing scenarios where no client traffic is transferring over the VPN tunnels.
For information on recommended maximum site-to-site and client VPN tunnels, visit MX Sizing Principles.
MERAKI.COM
Desktop and all-in-one models

M X6 8 M X6 8 W M X6 8 C W M X 75
Recommended Small branch with

Small branch with up to 50 users
use case up to 200 users
NGFW
throughput
700 Mbps 700 Mbps 700 Mbps 1 Gbps

Advanced
security services
throughput 1
Maximum
site-to-site 300 Mbps 300 Mbps 300 Mbps 900 Mbps
VPN throughput
Maximum site-to-
50 50 50 75
site VPN tunnels2
WAN interfaces 2× GbE RJ45 2× GbE RJ45 2× GbE RJ45 1× GbE SFP
(dedicated) 2× GbE RJ45
1× integrated Cat 6 LTE
cellular modem
(cellular failover)
Dual-purpose - - - -
LAN interfaces 10× GbE RJ45 10× GbE RJ45 10× GbE RJ45 10× GbE RJ45
(fixed) (2× PoE+) (2× PoE+) (2× PoE+) (2× PoE)
Mounting Desktop or wall mount Desktop or wall mount Desktop or wall mount Desktop or wall mount
Dimensions 11.2 in x 5.8 in x 1.1 in 11.2 in x 6.8 in x 1.1 in 11.2 in x 7 in x 1.1 in 11.14 in x 5.83 in x 1.06 in
(w x d x h) (284 mm x 148 mm x 27 mm) (284 mm x 172 mm x 27 mm) (284 mm x 178 mm x 27 mm) (283 mm x 148 mm x 27 mm)
Weight 2.46 lb (1.12 kg) 2.55 lb (1.16 kg) 2.61 lb (1.18 kg) 1.87 lb (0.85 kg)
Power supply 100 W DC 100 W DC 100 W DC 100 W DC
Power load
11 W/79 W 19 W/87 W 19 W/89 W 12 W/96 W
(idle/max)
Operating 32 °F to 113 °F 32 °F to 113 °F 32 °F to 113 °F 32 °F to 113 °F

temperature (0 °C to 45 °C) (0 °C to 45 °C) (0 °C to 45 °C) (0 °C to 45 °C)
Humidity 5% to 95% 5% to 95% 5% to 95% 5% to 95%
1
Throughput with advanced security services enabled including IDS/IPS, AMP, and secure malware analytics (formerly Threat Grid)
can reach the same levels as that with NGFW using trusted traffic exclusions. Learn more.
2
The maximum VPN tunnels are based on lab testing scenarios where no client traffic is transferring over the VPN tunnels. MERAKI.COM
Rack mount models

M X8 5 MX95
Recommended Small to medium branch Medium to large branch

use case with up to 250 users with up to 500 users
NGFW
throughput
1 Gbps 2.5 Gbps

Advanced
security services
throughput 1
Maximum
site-to-site 1 Gbps 2.5 Gbps
VPN throughput
Maximum site-to-
200 500
site VPN tunnels2
WAN interfaces 2× GbE SFP 2× 10 GbE SFP+

(dedicated) 2× GbE RJ45 (1x PoE+) 2× 2.5 GbE RJ45 (1x PoE+)
Dual-purpose - -
LAN interfaces 8× GbE RJ45 4× GbE RJ45

(fixed) 2x GbE SFP 2x 10 GbE SFP+
Mounting 1U rack 1U rack
Dimensions 19 in x 9.8 in x 1.7 in 19.08 in x 11.23 in x 1.73 in

(w x d x h) (484.6 mm x 250 mm x 43.8 mm) (484.6 mm x 285.2 mm x 44 mm)
Weight 8.2 lb (3.7 kg) 6.99 lbs (3.17 kg)
Internal 100-127 V Internal 100-127 V

Power supply
200-240 V (50/60 Hz) 200-240 V (50/60 Hz)
Power load
12 W/55 W 42 W/109 W
(idle/max)
Operating 32 °F to 104 °F 32 °F to 104 °F

temperature (0 °C to 40 °C) (0 °C to 40 °C)
Humidity 5% to 95% 5% to 95%
1
NGFW using trusted traffic exclusions. Learn more.
2
MERAKI.COM
Rack mount models

M X1 0 5 MX250 M X4 5 0
Campus or VPN Campus or VPN

Recommended Large branch
concentrator with concentrator with
use case with up to 750 users
up to 2,000 users up to 10,000 users
NGFW
throughput
5 Gbps 7.5 Gbps 10 Gbps

Advanced
security services
throughput 1
Maximum
site-to-site 3 Gbps 3.5 Gbps 4.5 Gbps
VPN throughput
Maximum site-to-
1,000 3,000 5,000
site VPN tunnels2
WAN interfaces 2x 10GbE SFP+ 2x 10 GbE SFP+ 2x 10 GbE SFP+

(dedicated) 2x 2.5GbE RJ45
1x PoE+
Dual-purpose - - -
8× GbE RJ45 8× GbE RJ45

LAN interfaces 4× GbE RJ45
8× GbE SFP 8× GbE SFP
(fixed) 2x 10 GbE SFP+
8x 10 GbE SFP+ 8× 10 GbE SFP+
Mounting 1U rack 1U rack 1U rack
Dimensions 19.08 in x 12.4 in x 1.73 in (484.6 mm x 19 in x 17.3 in x 1.75 in 19 in x 17.3 in x 1.75 in

(w x d x h) 315 mm x 44 mm) (483 mm x 440 mm x 44 mm) (483 mm x 440 mm x 44 mm)
10.74 lbs (4.87 kg)

Weight (with two fans and 16 lb (7.3 kg) 16 lb (7.3 kg)
two PSUs)
Modular 100-127 V Modular 100-220 V Modular 100-220 V

Power supply 200-240 V (50/60 Hz) 50/60 Hz 50/60 Hz
2x 150 W PSU 2x 250 W PSU 2x 250 W PSU
Power load
53 W/123 W 105 W/190 W 105 W/190 W
(idle/max)
Operating 32 °F to 104 °F 32 °F to 104 °F 32 °F to 104 °F

temperature (0 °C to 40 °C) (0 °C to 40 °C) (0 °C to 40 °C)
Humidity 5% to 95% 5% to 95% 5% to 95%
1
NGFW using trusted traffic exclusions. Learn more. MERAKI.COM
2
Virtual appliance models

Meraki switches include all of the traditional Ethernet features found in modern
enterprise access switches, including:
vMX – Smal l v MX – Me di u m v MX – L arge
Recommended use
Extend secure SD-WAN connectivity from branch sites to resources in public and private cloud environments
cases
Interfaces Virtual Virtual Virtual
Supported AWS AWS

cloud platforms AWS
Azure Azure
Google Cloud Platform
Google Cloud Platform Google Cloud Platform
Alibaba Cloud
Alibaba Cloud Alibaba Cloud
Cisco NFVIS
Cisco NFVIS Cisco NFVIS
Maximum
site-to-site 270 Mbps 500 Mbps 1 Gbps
VPN throughput
Maximum
concurrent
50 250 1,000
site-to-site
VPN tunnels
Client VPN
Yes Yes Yes
support
MERAKI.COM
Included in the box
Package contents Model(s)
MX67, MX67W, MX67C, MX68, MX68W, MX68CW, MX250, MX450

Mounting kit
Cat 5 Ethernet cable (2) MX67, MX67W, MX67C, MX68, MX68W, MX68CW
AC power adapter MX67, MX67W, MX67C, MX68, MX68W, MX68CW, MX75
Wireless external omni antenna (2) MX67W, MX68W
150W power supply (2) MX105
250W power supply (2) MX250, MX450
System fan (2) MX105, MX250, MX450
SIM card ejector tool MX67C, MX68CW
Fixed external wireless and LTE paddle antennas MX68CW
Removable external LTE paddle antennas MX67C
Lifetime warranty with next-day advanced replacement
Meraki MX appliances include a limited lifetime hardware warranty that provides next-day
advance hardware replacement. The Meraki simplified software and support licensing model
also combines software upgrades, centralized systems management, and phone support
under a single, easy-to-understand model.
For complete details, please visit meraki.cisco.com/support.
MERAKI.COM
Per-device licensing
There are three license tiers for MX appliances to provide you the flexibility to select the one most
appropriate for your intended use. Pair your chosen MX appliance(s) with the relevant license for your
use case.
SD-WAN plus Advanced security Enterprise

Sites with critical Sites with critical Fully backhauled
FEATURE HIGHLIGHTS
SaaS usage SaaS usage environment
Three-click secure SD-WAN connectivity ● ● ●
Layer 7 NGFW ● ● ●
Advanced malware protection (AMP) ● ● ✗
Intrusion detection and prevention ● ● ✗
Content filtering ● ● ✗
Internet outages from ThousandEyes ● ✗ ✗
Internet intelligence from ThousandEyes ● ○ ✗
Smart layer 7 local internet breakout ● ✗ ✗
Performance-based internet routing ● ✗ ✗
ML-powered SD-WAN analytics ● ✗ ✗
Mixed-license environment ● ● ✗
A full list of features by license type is available here.
Mixed-license environments
The SD-WAN Plus and Advanced Security licenses can be selected on a per-device basis for a mixed-
license deployment. In this way, some sites could have MXs with full SD-WAN Plus license functionality
and remaining sites with Advanced Security license features. Enterprise licenses can only be applied
organization-wide.
MERAKI.COM
Subscription licensing
Meraki subscription licensing offers a simple, flexible, and hardware-agnostic purchasing model for Meraki
products. MX appliance subscriptions are available for any term length starting from 1 year up to 10 years.
More information including MX subscription types and SKU list can be found here.
General information on subscription licensing can be found here.
Accessories
The Meraki MX250 and MX450 models support

pluggable optics for high-speed backbone connections
between wiring closets or to aggregation switches.
Meraki offers several standards-based Gigabit and 10
Gigabit pluggable modules. Each appliance has also
been tested for compatibility with several third-party
modules.
MERAKI.COM
Accessories/SFP transceivers
Supported Cisco Meraki accessory modules
Model Description
MA-SFP-1GB-SX Cisco Meraki 1 GbE SFP SX Fiber Module (1000BASE-SX, range: 550 m) for MX75, MX85, MX95,
MX105, MX250, MX450
MA-SFP-1GB-TX Cisco Meraki 1 GbE RJ45 Copper Module (1000BASE-T for twisted pair) for MX75, MX85, MX95,
MX105, MX250, MX450
MA-SFP-10GB-SR Cisco Meraki 10 GbE Twinax Cable with SFP+ Connectors (10GSFP+Cu, range: 1 m) for MX95,
MX105, MX250, MX450
MA-CBL-TA-1M Cisco Meraki 10 GbE Twinax Cable with SFP+ Connectors (10GSFP+Cu, range: 3 m) for MX95,
MX105, MX250, MX450
MA-CBL-TA-3M Cisco Meraki 10 GbE Twinax Cable with SFP+ Connectors (10GSFP+Cu, range: 3m) for MX95,
MX105, MX250, MX450
MA-PWR-30WAC Replacement Power Adapter (30W) for MX67, MX67W, MX67C
MA-PWR-100WAC Replacement Power Adapter (100W) for MX68, MX68W, MX68CW
MA-PWR-100WAC-A Replacement Power Adapter (100W) for MX75
MA-PWR-150WAC Meraki MX105 Power Supply Unit (PSU)
MA-PWR-250WAC Meraki MX250/MX450 Power Supply Unit (PSU)
MA-FAN-18K Meraki 18K RPM System Fan for MX105, MX250 and MX450
MA-ANT-MX One pair of external dual-band dipole antennas (connector type: RP-SMA) for MX67W, or MX68W
Power cables SKU
1x power cable required for each MX; 2x power MA-PWR-CORD-US

MA-PWR-CORD-EU
cables required for MX105, MX250, and MX450. For MA-PWR-CORD-EU
U.S. customers, all required power cables will be MA-PWR-CORD-AU
automatically included. Customers outside the U.S.

are required to order power cords separately.
MERAKI.COM
MX specifications
Management Network and firewall services
Managed via the web using the Cisco Meraki dashboard NGFW, 1:1 NAT, DMZ
Single dashboard management of wired and wireless Identity-based policies

networks
Auto VPN: automated site-to-site (IPsec) VPN for
Zero-touch remote deployment (no staging needed) hub-and-spoke or mesh topologies
Automatic firmware upgrades and security patches Client (IPsec L2TP) VPN
Template-based multi-network management Multiple WAN IP, PPPoE, NAT
Org-level two-factor authentication and single sign-on VLAN support and DHCP services
Role-based administration with change logging and alerts Static routing
User and device quarantine
Monitoring and reporting
Throughput, connectivity monitoring, and email alerts WAN performance management
Detailed historical per-port and per-client usage statistics WAN link aggregation
Application usage statistics Automatic layer 3 failover (including VPN connections)
Org-level change logs for compliance and change 3G/4G USB modem failover or single uplink
management
Application-level (layer 7) traffic analysis and shaping
VPN tunnel and latency monitoring
Ability to choose WAN uplink based on traffic type
Network asset discovery and user identification
SD-WAN: dual-active VPN with policy-based routing
Periodic emails with key utilization metrics and dynamic path selection
Device performance and utilization reporting Cat 6 LTE modem for failover or single uplink 1
Netflow support 1
MX67C and MX68CW only
Syslog integration
Management
Live remote packet capture
Real-time diagnostic and troubleshooting tools
Aggregated event logs with instant search
MERAKI.COM
MX specifications
Advanced security services1 Integrated cellular (MX67C and MX68CW only)
Content filtering (Webroot BrightCloud CIPA-compliant LTE bands: 2, 4, 5, 12, 13, 17, and 19 (North America).
URL database) 1, 3, 5, 7, 8, 20, 26, 28A, 28B, 34, 38, 39, 40, and 41
(worldwide).
Web-search filtering (including Google/Bing SafeSearch)
300 Mbps Cat 6 LTE
YouTube for Schools
Additional regulatory information: PTCRB (North America),
Intrusion-prevention sensor (Cisco SNORT®-based) RCM (ANZ, APAC), GCF (EU)
Cisco Advanced Malware Protection (AMP)

Power over Ethernet
AMP Threat Grid2
(MX68, MX68W, MX68CW)
1
Advanced security services require Advanced Security license
2
Threat Grid services require additional sample pack licensing 2× PoE+ (802.3at) LAN ports
30 W maximum per port

Integrated wireless
(MX67W, MX68W, MX68CW)
Regulatory
1x 802.11a/n/ac (5 GHz) radio
FCC (U.S.)
1x 802.11b/g/n (2.4 GHz) radio
CB (IEC)
Max data rate 1.3 Gbps aggregate
(MX67W, MX68W, MX68CW) CISPR (Australia/New Zealand)
2x2 MU-MIMO with two spatial streams PTCRB (North America)

(MX67W, MX68W, MX68CW)
RCM (Australia/New Zealand, Asia Pacific)
2× external dual-band dipole antennas (connector type:
RP-SMA) GCF (EU)
Antenna gain: 3.0 dBi @ 2.4 GHz, 3.5 dBi @ 5 GHz
Warranty
WEP, WPA, WPA2-PSK, WPA2-Enterprise with 802.1X
authentication
Full lifetime hardware warranty with next-day advanced
replacement included.
FCC (U.S.): 2.412-2.462 GHz, 5.150-5.250 GHz (UNII-1),
5.250-5.350 GHz (UNII-2), 5.470-5.725 GHz (UNII-2e),
5.725 -5.825 GHz (UNII-3)
CE (Europe): 2.412-2.484 GHz, 5.150-5.250 GHz (UNII-

1), 5.250-5.350 GHz (UNII-2) 5.470-5.600 GHz, 5.660-
5.725 GHz (UNII-2e)
Additional regulatory information: IC (Canada), C-Tick

(Australia/New Zealand), RoHS
MERAKI.COM
Hardware and license SKU list
Mo del L icense Description
MX67-HW LIC-MX67-ENT-1Y Cisco Meraki MX67, 1-year Enterprise License and Support
LIC-MX67-ENT-3Y Cisco Meraki MX67, 3-year Enterprise License and Support
LIC-MX67-SEC-1Y Cisco Meraki MX67, 1-year Advanced Security License and Support
LIC-MX67-SDW-1Y Cisco Meraki MX67, 1-year Secure SD-WAN Plus License and Support
MX67W-HW LIC-MX67W-ENT-1Y Cisco Meraki MX67W, 1-year Enterprise License and Support
LIC-MX67W-ENT-3Y Cisco Meraki MX67W, 3-year Enterprise License and Support
LIC-MX67W-SEC-1Y Cisco Meraki MX67W, 1-year Advanced Security License and Support
LIC-MX67W-SDW-1Y Cisco Meraki MX67W, 1-year Secure SD-WAN Plus License and Support
MX67C-HW-NA LIC-MX67C-ENT-1Y Cisco Meraki MX67C, 1-year Enterprise License and Support
(North America) LIC-MX67C-ENT-3Y Cisco Meraki MX67C, 3-year Enterprise License and Support
LIC-MX67C-ENT-5Y Cisco Meraki MX67C, 5-year Enterprise License and Support
MX67C-HW-WW LIC-MX67C-ENT-7Y Cisco Meraki MX67C, 7-year Enterprise License and Support
(worldwide)
LIC-MX67C-SEC-1Y Cisco Meraki MX67C, 1-year Advanced Security License and Support
LIC-MX67C-SDW-1Y Cisco Meraki MX67C, 1-year Secure SD-WAN Plus License and Support
MERAKI.COM
MX68W-HW LIC-MX68W-ENT-1Y Cisco Meraki MX68W, 1-year Enterprise License and Support
MX68CW-HW-NA LIC-MX68CW-ENT-1Y Cisco Meraki MX68CW, 1-year Enterprise License and Support
(North America) LIC-MX68CW-ENT-3Y Cisco Meraki MX68CW, 3-year Enterprise License and Support
LIC-MX68CW-ENT-5Y Cisco Meraki MX68CW, 5-year Enterprise License and Support
MX68CW-HW-WW LIC-MX68CW-ENT-7Y Cisco Meraki MX68CW, 7-year Enterprise License and Support
(worldwide)
LIC-MX68CW-SEC-1Y Cisco Meraki MX68CW, 1-year Advanced Security License and Support
LIC-MX68CW-SDW-1Y Cisco Meraki MX68CW, 1-year Secure SD-WAN Plus License and Support
MERAKI.COM
MX75-HW LIC-MX75-ENT-1Y Cisco Meraki MX75, 1 year Enterprise License and Support
LIC-MX75-ENT-3Y Cisco Meraki MX75, 3 year Enterprise License and Support
LIC-MX75-SEC-1Y Cisco Meraki MX75, 1 year Advanced Security License and Support
LIC-MX75-SDW-1Y Cisco Meraki MX75, 1 year Secure SD-WAN Plus License and Support
MERAKI.COM
vMX LIC-VMX-S-ENT-1Y Cisco Meraki Small vMX, 1-year License and Support
LIC-VMX-S-ENT-3Y Cisco Meraki Small vMX, 3-year License and Support
LIC-VMX-S-ENT-5Y Cisco Meraki Small vMX, 5-year License and Support
LIC-VMX-M-ENT-1Y Cisco Meraki Medium vMX, 1-year License and Support

LIC-VMX-L-ENT-1Y Cisco Meraki Large vMX, 1-year License and Support

To learn more,
visit Meraki.com MERAKI.COM

MX Family Datasheet 20240528 English 3

Uploaded by

Copyright:

Available Formats

MX Family Datasheet 20240528 English 3

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

MX Family Datasheet 20240528 English 3

Uploaded by

Copyright:

Available Formats

MX FA M I LY DATA SH E ET

The MX is 100% cloud managed, so installation and remote management is truly

Advanced quality of experience (QoE) analytics

• Machine-learned smart application thresholds autonomously apply to identify true

• Get detailed hop-by-hop VoIP performance analysis across all uplinks

Agile on-premises and cloud security capabilities

• Advanced Malware Protection with sandboxing; file reputation-based protection engine

• Intrusion prevention: PCI-compliant IPS sensor using industry-leading SNORT® signature

• Granular and automatically updated category-based content filtering

Branch gateway services

• Web caching: accelerates frequently accessed content

Industry-leading cloud management

• Template-based settings scale easily from small deployments to tens of thousands

Intelligent site-to-site VPN with Cisco Meraki SD-WAN

• Interoperates with all IPsec VPN devices and services

• Automated MPLS to VPN failover within seconds of a connection failure

Mix-and-match Meraki and Cisco Catalyst SD-WAN

Inside the Meraki MX

Redundant power Modular fans

Front of the Cisco Meraki MX

3G/4G modem Dual 10G WAN interfaces 1G/10G Ethernet/SFP+ interfaces

Security and SD-WAN

Transport independence Advanced analytics

Native security SaaS quality of experience

The MX platform has an extensive suite of security features, including IDS/IPS,

Layer 7 fingerprinting technology lets administrators identify unwanted content and

Organization-level threat assessment with Meraki Security Center

Identity-based policy management Cisco AMP Thread Grid - Cloud

Branch office Retail store

On-premises hardware Browser-based management

Cisco Meraki cloud-management architecture End-to-end network visibility and troubleshooting

Integrated 802.11ac Wave 2 wireless

The MX67W, MC68W, and MX68CW integrate

• Dual-band 802.11n/ac Wave 2, 2x2 MU-MIMO

• Unified management of network security

• 1× Cat 6 300 Mbps LTE modem

• 1× nano SIM slot (4FF form factor)

• Global coverage with individual orderable

Power over Ethernet (PoE)

• 2x 802.3at (PoE+) ports capable of providing a

• APs, phones, cameras, and other PoE-enabled

Meraki virtual MX appliances for

Features and functionality of the vMX appliance:

• Securely connect branch sites with a physical

Desktop and all-in-one models

700 Mbps 700 Mbps 700 Mbps

WAN interfaces 1× GbE RJ45 1× GbE RJ45 1× GbE RJ45

Dual-purpose 1× GbE RJ45 1× GbE RJ45 1× GbE RJ45

Power load 5 W/14 W 15 W/23 W 6 W/17 W

Operating 32 °F to 113 °F 32 °F to 113 °F 32 °F to 113 °F

Humidity 5% to 95% 5% to 95% 5% to 95%

Desktop and all-in-one models

Recommended Small branch with

700 Mbps 700 Mbps 700 Mbps 1 Gbps

Power supply 100 W DC 100 W DC 100 W DC 100 W DC

Operating 32 °F to 113 °F 32 °F to 113 °F 32 °F to 113 °F 32 °F to 113 °F

Humidity 5% to 95% 5% to 95% 5% to 95% 5% to 95%

Rack mount models

Recommended Small to medium branch Medium to large branch