Cisco Meraki MX85 Network Security/Firewall Appliance

The Cisco Meraki MX are multifunctional security and SD-WAN enterprise appliances with a wide set of capabilities to address multiple use cases-from an all-in-one device. Organizations of all sizes and across all industries rely on the MX to deliver secure connectivity to hub locations or multi-cloud environments, as well as application quality of experience (QoE), through advanced analytics with machine learning.

The MX is 100% cloud-managed, so installation and remote management is truly zero touch, making it ideal for distributed branches, campuses, and data center locations. Natively integrated with a comprehensive suite of secure network and assurance capabilities, the MX eliminates the need for multiple appliances. These capabilities include application-based firewalling, content filtering, web search filtering, SNORT®-based intrusion detection and prevention, Cisco Advanced Malware Protection (AMP), site-to-site Auto VPN, client VPN, WAN and cellular failover, dynamic path selection, web application health, VoIP health, and more. SD-WAN can be easily be extended to deliver optimized access to resources in public and private cloud environments with virtual MX appliances (vMX). Public clouds supported with vMX include Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform, and Alibaba Cloud and private cloud support through Cisco NFVIS.

Advanced quality of experience (QoE) analytics

• End-to-end health of web applications at-a-glance across the LAN, WAN, and application server
• Machine-learned smart application thresholds autonomously applied to identify true anomalies based on past behavioral patterns
• Monitor the health of all MX WAN links, including cellular, across your entire organization
• Detailed hop-by-hop VoIP performance analysis across all uplinks

Agile on-premises and cloud security capabilities informed by Cisco Talos

• Next-gen layer 7 firewall for identity-based security policies and application management
• Advanced Malware Protection with sandboxing; file reputationbased protection engine powered by Cisco AMP
• Intrusion prevention: PCI-compliant IPS sensor using industry-leading SNORT® signature database from Cisco
• Granular and automatically updated category-based content filtering
• Other capabilities: SSL decryption/inspection, data loss prevention (DLP), cloud access security broker (CASB), SaaS tenant restrictions, granular app control, file type control

Branch gateway services

• Built-in DHCP, NAT, QoS, and VLAN management services
• Web caching: accelerates frequently accessed content
• Load balancing: combines multiple WAN links into a single high-speed interface, with policies for QoS, traffic shaping, and failover