Meraki MR65-HW Cloud Managed Security Firewall Appliance 10xGbE 2x PoE+ SD-WAN

Cisco Meraki MX65-HW
Cloud Managed Security Appliance 10 x GbE (2 PoE+)
Cisco Meraki MX Security Appliances are ideal for organisations with large numbers of distributed sites. Since the MX is 100% cloud managed, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT based intrusion prevention, web caching, Intelligent WAN with multiple uplinks.

• Stateful firewall throughput: 250 Mbps
• Recommended maximum clients: 50
• Small form factor
• 2 PoE+ ports

Cloud-based centralised management

• Managed centrally over the Web
• Classifies applications, users and devices
• Zero-touch, self-provisioning deployments

Networking and security

• Stateful firewall
• Auto VPN self-configuring site-to-site VPN
• Active Directory integration
• Identity-based policies
• Client VPN (IPsec)
• 3G / 4G failover via USB modem
• Traffic shaping and application management

Layer 7 application visibility and traffic shaping

• Application prioritisation

Advanced security services

• Content filtering
• Google SafeSearch and YouTube for Schools
• Intrusion detection & prevention (IDS/IPS)
• Advanced Malware Protection (AMP)
• Cisco Threat Grid

The MX65 includes two ports with 802.3at (PoE+). This built-in power capability removes the need for additional hardware to power critical branch devices.
2 802.at (PoE+) ports capable of providing a total of 60W
Power APs, phones, cameras, and other PoE enabled devices without the need for AC adapters, PoE converters, or unmanaged PoE switches.

The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.

Cloud Managed Architecture
Built on Cisco Meraki's award-winning cloud-managed architecture, the MX is the industry's only 100% cloud-managed Unified Threat Management appliance. MX appliances self-provision, automatically pulling policies and configuration settings from the cloud. Powerful remote management tools provide network-wide visibility and control, and enable administration without the need for on-site networking expertise.

Cloud services deliver seamless firmware and security signature updates, automatically establish site-to-site VPN tunnels, and provide 24x7 network monitoring. Moreover, the MX's intuitive browser-based management interface removes the need for expensive and time-consuming training.

Ironclad Security
The MX platform has an extensive suite of security features including IPS, content filtering, web search filtering, anti-virus / anti-phishing, geo-IP based firewalling and IPsec VPN connectivity, while providing the performance required for modern, bandwidth-intensive networks.

Layer 7 finger printing technology lets administrators identify unwanted content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth.

The integrated Sourcefire SNORT engine delivers superior intrusion prevention coverage, a key requirement for PCI 3.0 compliance. The MX also uses the Webroot BrightCloud URL categorisation database for CIPA / IWF compliant content-filtering, Kaspersky Safestream II engine for anti-virus / anti-phishing, and MaxMind for geo-IP based security rules.

Best of all, these industry-leading Layer 7 security engines and signatures are always kept up-to-date via the cloud, simplifying network security management and providing peace of mind to IT administrators.

Intelligent WAN Made Simple
Transport independence
Dual WAN ports with load balancing and failover enable the use of MPLS and redundant, commodity Internet connections, providing additional bandwidth and higher reliability.

3G / 4G failover
The Cisco Meraki MX supports 3G/4G service providers globally for WAN connection failover. Web caching temporarily stores video, media, and web documents, lowering bandwidth usage and accelerating the download speed of Internet content.

Application optimisation
Layer 7 traffic shaping, application prioritisation optimise the traffic for mission-critical applications and user experience.

Intelligent path control
Use dynamic VPN path selection to choose the best VPN uplink based on packet loss, latency, and jitter. Define policies for sending the right traffic through the appropriate path (e.g., send voice via MPLS, http via VPN over broadband).

Secure connectivity
Cisco Meraki's unique auto provisioning site-to-site VPN (Auto VPN) connects branches securely with unmatched simplicity. MX Security Appliances automatically learn VPN parameters needed to establish and maintain VPN sessions using a 128-bit AES encryption. A unique cloud-enabled discovery mechanism enables automatic interconnection of VPN peers and routes across the WAN, and keeps them updated in dynamic IP environments.

Specifications
General

• Device Type: Security appliance
• Width: 10.1 in
• Depth: 5.2 in
• Height: 1 in
• Weight: 3.37 lbs

Networking

• Form Factor: External
• Ports Qty: 10
• Connectivity Technology: Wired
• Data Link Protocol: Ethernet, Fast Ethernet, Gigabit Ethernet
• Network / Transport Protocol: L2TP, IPSec, PPPoE, DHCP
• Routing Protocol: MPLS
• Performance: Firewall throughput: 250 Mbps Advanced security throughput: 100 Mbps
• Capacity: Maximum VPN sessions: 25
• Features: Firewall protection, DHCP support, NAT support, load balancing, VLAN support, traffic shaping, content filtering, Intrusion Prevention System (IPS), wall mountable, Quality of Service (QoS), 3G/4G USB Dongle Support, Link Aggregation
• Authentication Method: Active Directory
• Compliant Standards: IEEE 802.3af, IEEE 802.3at

Expansion / Connectivity

• Interfaces: 2 x 1000Base-T - RJ-45 (WAN) 8 x 1000Base-T - RJ-45 2 x 1000Base-T (PoE+) - RJ-45

Power

• Power Over Ethernet (PoE) Supported: PoE+
• Power Consumption Operational: 72 Watt

Environmental Parameters

• Min Operating Temperature: 32 °F
• Max Operating Temperature: 104 °F
• Humidity Range Operating: 5 - 95%

Management

• Managed via the web using the Cisco Meraki dashboard
• Single pane-of-glass into managing wired and wireless networks
• Zero-touch remote deployment (no staging needed)
• Automatic firmware upgrades and security patches Templates based multi-network management
• Org-level two-factor authentication and single sign-on
• Role based administration with change logging and alerts

Monitoring and Reporting

• Throughput, connectivity monitoring and email alerts
• Detailed historical per-port and per-client usage statistics
• Application usage statistics
• Org-level change logs for compliance and change management
• VPN tunnel and latency monitoring
• Network asset discovery and user identification
• Periodic emails with key utilisation metrics
• Syslog integration

Remote Diagnostics

• Live remote packet capture
• Real-time diagnostic and troubleshooting tools
• Aggregated event logs with instant search

Network and Security Services

• Stateful firewall, 1:1 NAT, DMZ
• Identity-based policies
• Auto VPN: Automated site-to-site (IPsec) VPN, for hub-and-spoke or mesh topologies
• Client (IPsec L2TP) VPN
• Multiple WAN IP, PPPoE, NAT
• VLAN support and DHCP services
• Static routing
• User and device quarantine

WAN Performance Management

• Web caching (not available on the MX64/MX64W and MX65/MX65W)
• WAN link aggregation
• Automatic Layer 3 failover (including VPN connections)
• 3G / 4G USB modem failover
• Application level (Layer 7) traffic analysis and shaping
• Ability to choose WAN uplink based on traffic type
• IWAN: Dual active VPN with policy based routing and dynamic path selection

Advanced Security Services

• Content filtering (Webroot BrightCloud CIPA compliant URL database)
• Web search filtering (including Google / Bing SafeSearch)
• YouTube for Schools
• Intrusion-prevention sensor (Sourcefire SNORT based)
• Anti-virus engine and anti-phishing filtering (Kaspersky SafeStream II engine)
• Geography based firewall rules (MaxMind Geo-IP database)
• Note: Advanced security services require Advanced Security license.

Integrated Wireless

• 1 x 802.11a/n/ac (5 GHz) radio
• 1 x 802.11b/g/n (2.4 GHz) radio
• Max data rate 1.2 Gbit/s (aggregate)
• 2 x 2 MIMO with two spatial streams
• 2 external dual-band dipole antennas (connector type: RP-SMA)
• Antenna gain: 3.0 dBi @ 2.4 GHz, 3.5 dBi @ 5 GHz
• WEP, WPA, WPA2-PSK, WPA2-Enterprise with 802.1X authentication
• FCC (US): 2.412-2.462 GHz, 5.150-5.250 GHz (UNII-1), 5.250-5.350 GHZ (UNII-2), 5.470- 5.725 GHz (UNII-2e), 5.725 -5.825 GHz (UNII-3)
• CE (Europe): 2.412-2.484 GHz, 5.150-5.250 GHz (UNII-1), 5.250-5.350 GHZ (UNII-2) 5.470-5.600 GHz, 5.660-5.725 GHz (UNII-2e)
• Additional regulatory information: IC (Canada), C-Tick (Australia/New Zealand), RoHS

Power over Ethernet

• 2 x PoE+ (802.3at) LAN ports
• 30W maximum per port