Meraki MX250 – Powerful Security and SD-WAN for the Branch & Campus

Meraki MX250 – Powerful Security and SD-WAN for the Branch & Campus

(UTM) CAPABILITIES

• Application-aware traffic control: bandwidth policies for Layer 7 application types (e.g., block YouTube, prioritize Skype, throttle BitTorrent)
• Content filtering: CIPA-compliant content filter, safe-seach enforcement (Google/Bing), and YouTube for Schools
• Intrusion prevention: PCI-compliant IPS sensor using industry-leading SNORT® signature database from Cisco
• Advanced Malware Protection: file reputation-based protection engine powered by Cisco AMP
• Identity-based security policies and application management
• Auto VPN: automatic VPN route generation using IKE/IPsec setup. Runs on physical MX appliances and as a virtual instance within the Amazon AWS or Microsoft Azure cloud services
• SD-WAN with active / active VPN, policy-based-routing, dynamic VPN path selection and support for application-layer performance profiles to ensure prioritization of the applications types that matter
• Interoperates with all IPsec VPN devices and services
• Automated MPLS to VPN failover within seconds of a connection failure
• Client VPN: L2TP IPsec support for native Windows, Mac OS X, iPad and Android clients with no per-user licensing fees

INDUSTRY-LEADING CLOUD MANAGEMENT                                                    BRANCH GATEWAY SERVICES

• Unified firewall, switching, wireless LAN, and mobile device man-agement through an intuitive web-based dashboard
• Template based settings scale easily from small deployments to tens of thousands of devices
• Role-based administration, configurable email alerts for a variety of important events, and easily auditable change logs
• Summary reports with user, device, and application usage details archived in the cloud
• Built-in DHCP, NAT, QoS, and VLAN management services
• Web caching: accelerates frequently accessed content
• Load balancing: combines multiple WAN links into a single high-speed interface, with policies for QoS, traffic shaping, and failover

Smart connection monitoring: automatic detection of layer 2 and layer 3 outages and fast failover, including option of integrated LTE Advanced or 3G/4G modems

Hardware

• 10G SFP+ WAN interfaces for high-speed connectivity
• 1G/10G fiber and copper interfaces for flexible LAN connectivity
• Stateful firewall throughput: 4 Gbps
• Redundant power supplies and fans
• Recommended maximum clients: 2,000

Cloud-based centralized management

• Managed centrally over the Web
• Classifies applications, users and devices
• Zero-touch, self-provisioning deployments

Networking and security

• Stateful firewall
• Auto VPN™ self-configuring site-to-site VPN
• Powerful SD-WAN capabilities
• Active Directory integration
• Identity-based policies
• Client VPN (IPsec)
• Smart link bonding

Traffic shaping and application management

• Layer 7 application visibility and traffic shaping
• Application prioritization
• Web caching
• Choose WAN uplink based on traffic type

Advanced security services¹

• • Content filtering
  • Geo-based IP firewall
  • Google SafeSearch and YouTube for Schools
  • Intrusion detection & prevention (IDS/IPS)
  • Advanced Malware Protection (AMP)
  • Cisco Threat Grid¹

¹ Requires Advanced Security License
² Requires additional licensing for Threat Grid Cloud