| Management | 
| Managed via the web using the Cisco Meraki dashboard | 
| Single pane-of-glass into managing wired and wireless networks | 
| Zero-touch remote deployment (no staging needed) | 
| Automatic firmware upgrades and security patches | 
| Templates based multi-network management | 
| Org-level two-factor authentication and single sign-on | 
| Role based administration with change logging and alerts | 
|  | 
| Monitoring and Reporting | 
| Throughput, connectivity monitoring and email alerts | 
| Detailed historical per-port and per-client usage statistics | 
| Application usage statistics | 
| Org-level change logs for compliance and change management | 
| VPN tunnel and latency monitoring | 
| Network asset discovery and user identification | 
| Periodic emails with key utilization metrics | 
| Device performance and utilization reporting | 
| Netflow support | 
| Syslog integration | 
|  | 
| Remote Diagnostics | 
| Live remote packet capture | 
| Real-time diagnostic and troubleshooting tools | 
| Aggregated event logs with instant search | 
|  | 
| Network and Firewall Services | 
| Stateful firewall, 1:1 NAT, DMZ | 
| Identity-based policies | 
| Auto VPN: Automated site-to-site (IPsec) VPN, for hub-and-spoke or mesh topologies | 
| Client (IPsec L2TP) VPN | 
| Multiple WAN IP, PPPoE, NAT | 
| VLAN support and DHCP services | 
| Static routing | 
| User and device quarantine | 
|  | 
| WAN Performance Management | 
| Web caching (available on the MX84, MX100, MX250, MX450) | 
| WAN link aggregation | 
| Automatic Layer 3 failover (including VPN connections) | 
| 3G / 4G USB modem failover or single-uplink | 
| Application level (Layer 7) traffic analysis and shaping | 
| Ability to choose WAN uplink based on traffic type | 
| SD-WAN: Dual active VPN with policy based routing and dynamic path selection | 
| CAT 6 LTE modem for failover or single-uplink1 | 
| 1MX67C and MX68CW only | 
|  | 
| Advanced Security Services1 | 
| Content filtering (Webroot BrightCloud CIPA compliant URL database) | 
| Web search filtering (including Google / Bing SafeSearch) | 
| YouTube for Schools | 
| Intrusion-prevention sensor (Cisco SNORT® based) | 
| Advanced Malware Protection (AMP) | 
| AMP Threat Grid2 | 
| Geography based firewall rules (MaxMind Geo-IP database) | 
| 1 Advanced security services require Advanced Security license | 
| 2 Threat Grid services require additional sample pack licensing | 
|  | 
| Integrated Wireless (MX64W, MX65W, MX67W, MX68W, MX68CW) | 
| 1 x 802.11a/n/ac (5 GHz) radio | 
| 1 x 802.11b/g/n (2.4 GHz) radio | 
| Max data rate 1.2 Gbps aggregate (MX64W, MX65W), 1.3Gbps aggregate (MX67W,MX68W, MX68CW) | 
| 2 x 2 MU-MIMO with two spatial streams (MX67W, MX68W, MX68CW) | 
| 2 external dual-band dipole antennas (connector type: RP-SMA) | 
| Antenna gain: 3.0 dBi @ 2.4 GHz, 3.5 dBi @ 5 GHz | 
| WEP, WPA, WPA2-PSK, WPA2-Enterprise with 802.1X authentication | 
| FCC (US): 2.412-2.462 GHz, 5.150-5.250 GHz (UNII-1), 5.250-5.350 GHZ (UNII-2), 5.470- | 
| 5.725 GHz (UNII-2e), 5.725 -5.825 GHz (UNII-3) | 
| CE (Europe): 2.412-2.484 GHz, 5.150-5.250 GHz (UNII-1), 5.250-5.350 GHZ (UNII-2) | 
| 5.470-5.600 GHz, 5.660-5.725 GHz (UNII-2e) | 
| Additional regulatory information: IC (Canada), C-Tick (Australia/New Zealand), RoHS | 
|  | 
| Integrated Cellular (MX67C and MX68CW only) | 
| LTE bands: 2, 4, 5, 12, 13, 17, and 19 (North America). 1, 3, 5, 7, 8, 20, 26, 28A, 28B, 34, 38, 39, 40, and 41 (Worldwide) | 
| 300 Mbps CAT 6 LTE | 
| Additional regulatory information: PTCRB (North America), RCM (ANZ, APAC), GCF (EU) | 
|  | 
| Power over Ethernet (MX65, MX65W, MX68, MX68W, MX68CW) | 
| 2 x PoE+ (802.3at) LAN ports | 
| 30W maximum per port | 
|  | 
| Regulatory | 
| FCC (US) | 
| CB (IEC) | 
| CISPR (Australia/New Zealand) | 
| PTCRB (North America) | 
| RCM (Australia/New Zealand, Asia Pacific) | 
| GCF (EU) | 
|  | 
| Warranty | 
| Full lifetime hardware warranty with next-day advanced replacement included. |