| Management |
| Managed via the web using the Cisco Meraki dashboard |
| Single pane-of-glass into managing wired and wireless networks |
| Zero-touch remote deployment (no staging needed) |
| Automatic firmware upgrades and security patches |
| Templates based multi-network management |
| Org-level two-factor authentication and single sign-on |
| Role based administration with change logging and alerts |
|
| Monitoring and Reporting |
| Throughput, connectivity monitoring and email alerts |
| Detailed historical per-port and per-client usage statistics |
| Application usage statistics |
| Org-level change logs for compliance and change management |
| VPN tunnel and latency monitoring |
| Network asset discovery and user identification |
| Periodic emails with key utilization metrics |
| Device performance and utilization reporting |
| Netflow support |
| Syslog integration |
|
| Remote Diagnostics |
| Live remote packet capture |
| Real-time diagnostic and troubleshooting tools |
| Aggregated event logs with instant search |
|
| Network and Firewall Services |
| Stateful firewall, 1:1 NAT, DMZ |
| Identity-based policies |
| Auto VPN: Automated site-to-site (IPsec) VPN, for hub-and-spoke or mesh topologies |
| Client (IPsec L2TP) VPN |
| Multiple WAN IP, PPPoE, NAT |
| VLAN support and DHCP services |
| Static routing |
| User and device quarantine |
|
| WAN Performance Management |
| Web caching (available on the MX84, MX100, MX250, MX450) |
| WAN link aggregation |
| Automatic Layer 3 failover (including VPN connections) |
| 3G / 4G USB modem failover or single-uplink |
| Application level (Layer 7) traffic analysis and shaping |
| Ability to choose WAN uplink based on traffic type |
| SD-WAN: Dual active VPN with policy based routing and dynamic path selection |
| CAT 6 LTE modem for failover or single-uplink1 |
| 1MX67C and MX68CW only |
|
| Advanced Security Services1 |
| Content filtering (Webroot BrightCloud CIPA compliant URL database) |
| Web search filtering (including Google / Bing SafeSearch) |
| YouTube for Schools |
| Intrusion-prevention sensor (Cisco SNORT® based) |
| Advanced Malware Protection (AMP) |
| AMP Threat Grid2 |
| Geography based firewall rules (MaxMind Geo-IP database) |
| 1 Advanced security services require Advanced Security license |
| 2 Threat Grid services require additional sample pack licensing |
|
| Integrated Wireless (MX64W, MX65W, MX67W, MX68W, MX68CW) |
| 1 x 802.11a/n/ac (5 GHz) radio |
| 1 x 802.11b/g/n (2.4 GHz) radio |
| Max data rate 1.2 Gbps aggregate (MX64W, MX65W), 1.3Gbps aggregate (MX67W,MX68W, MX68CW) |
| 2 x 2 MU-MIMO with two spatial streams (MX67W, MX68W, MX68CW) |
| 2 external dual-band dipole antennas (connector type: RP-SMA) |
| Antenna gain: 3.0 dBi @ 2.4 GHz, 3.5 dBi @ 5 GHz |
| WEP, WPA, WPA2-PSK, WPA2-Enterprise with 802.1X authentication |
| FCC (US): 2.412-2.462 GHz, 5.150-5.250 GHz (UNII-1), 5.250-5.350 GHZ (UNII-2), 5.470- |
| 5.725 GHz (UNII-2e), 5.725 -5.825 GHz (UNII-3) |
| CE (Europe): 2.412-2.484 GHz, 5.150-5.250 GHz (UNII-1), 5.250-5.350 GHZ (UNII-2) |
| 5.470-5.600 GHz, 5.660-5.725 GHz (UNII-2e) |
| Additional regulatory information: IC (Canada), C-Tick (Australia/New Zealand), RoHS |
|
| Integrated Cellular (MX67C and MX68CW only) |
| LTE bands: 2, 4, 5, 12, 13, 17, and 19 (North America). 1, 3, 5, 7, 8, 20, 26, 28A, 28B, 34, 38, 39, 40, and 41 (Worldwide) |
| 300 Mbps CAT 6 LTE |
| Additional regulatory information: PTCRB (North America), RCM (ANZ, APAC), GCF (EU) |
|
| Power over Ethernet (MX65, MX65W, MX68, MX68W, MX68CW) |
| 2 x PoE+ (802.3at) LAN ports |
| 30W maximum per port |
|
| Regulatory |
| FCC (US) |
| CB (IEC) |
| CISPR (Australia/New Zealand) |
| PTCRB (North America) |
| RCM (Australia/New Zealand, Asia Pacific) |
| GCF (EU) |
|
| Warranty |
| Full lifetime hardware warranty with next-day advanced replacement included. |