Refurbished Cisco Meraki MX95 (Installation to be done by customer)

Overview

MX95 Highlights

Hardware

• Stateful firewall throughput: 2 Gbps
• Recommended for up to 500 users

Cloud-based centralized management

• Managed centrally over the web
• Classifies applications, users and devices
• Zero-touch, self-provisioning deployments

Networking and security

• Stateful firewall
• Auto VPN™ self-configuring site-to-site VPN
• Active Directory integration
• Identity-based policies
• Client VPN (IPsec)
• 3G / 4G failover via USB modem

Traffic shaping and application management

• Layer 7 application visibility and traffic shaping
• Application prioritization

Advanced security services

• Content filtering ¹
• Google Safe Search and YouTube for Schools ¹
• Intrusion detection & prevention (IDS/IPS) ¹
• Advanced Malware Protection (AMP) ¹
• Cisco Threat Grid ²

Secure Cisco SD-WAN powered by Meraki

Transport independence

Leverage more than one uplink of any type with automatic failover — MPLS, broadband, fiber, or cellular.

Advanced analytics

At-a-glance health of web applications with ML thresholds, VoIP, and WAN with predictive analytics.

Native security

Integrated next-gen firewall, content filtering, Advanced Malware Protection (AMP) and IDS/IPS informed by Cisco Talos.

SaaS quality of experience

Manual and performance-based path selection using advanced analytics.

¹ Requires Advanced Security License.
² Requires Threat Grid cloud subscription.

Features

Advanced quality of experience (QoE) analytics

• End-to-end health of web applications at-a-glance across the LAN, WAN, and application server
• Machine-learned smart application thresholds autonomously applied to identify true anomalies based on past behavioral patterns
• Monitor the health of all MX WAN links, including cellular, across your entire organization
• Detailed hop-by-hop VoIP performance analysis across all uplinks

Agile on-premises and cloud security capabilities informed by Cisco Talos

• Next-gen Layer 7 firewall for identity-based security policies and application management
• Advanced Malware Protection with sandboxing; file reputation-based protection engine powered by Cisco AMP
• Intrusion prevention: PCI-compliant IPS sensor using industry-leading SNORT® signature database from Cisco
• Granular and automatically updated category-based content filtering
• Other capabilities: SSL decryption/inspection, data loss prevention (DLP), cloud access security broker (CASB), SaaS tenant restrictions, granular app control, file type control

Branch gateway services

• Built-in DHCP, NAT, QoS, and VLAN management services
• Web caching: accelerates frequently accessed content
• Load balancing: combines multiple WAN links into a single high-speed interface, with policies for QoS, traffic shaping, and failover
• Smart connection monitoring provides automatic detection of Layer 2 and Layer 3 outages and fast failover, including the option of integrated LTE Advanced or 3G/4G modems

Industry-leading cloud management

• Unified firewall, switching, wireless LAN, and mobile device management through an intuitive web-based dashboard
• Template-based settings scale easily from small deployments to tens of thousands of devices
• Role-based administration, configurable email alerts for a variety of important events, and easily auditable change logs
• Summary reports with user, device, and application usage details archived in the cloud

Intelligent site-to-site VPN with Cisco SD-WAN powered by Meraki

• Auto VPN allows automatic VPN route generation using IKE/IKEv2/IPsec setup; runs on physical MX appliances and as a virtual instance in public and private clouds
• SD-WAN with active/active VPN, policy-based routing, dynamic VPN path selection, and support for application-layer performance profiles to ensure prioritization of application types that matter
• Interoperates with all IPsec VPN devices and services
• Automated MPLS to VPN failover within seconds of a connection failure
• L2TP IPsec remote client VPN included at no extra cost with support for native Windows, macOS, iPad, and Android clients
• Support for Cisco AnyConnect remote client VPN (AnyConnect license required)

Specifications

Interfaces	WAN: 2 × 10GbE SFP+, 2 × 2.5GbE RJ45 (1 × PoE+) LAN: 4 × GbE RJ45, 2 × 10GbE SFP+ USB: 1 × USB 2.0 for 3G/4G failover (supported devices)
Performance	Stateful firewall throughput: 2 Gbps VPN throughput: 800 Mbps Recommended for medium branches with up to 500 users
Network and security services	Stateful firewall, 1:1 NAT, DHCP, DMZ, static routing Identity-based policies Auto VPN™ self-configuring site-to-site VPN Client VPN (IPsec) User and device quarantine VLAN support and DHCP services
Advanced security services *	Content filtering (Webroot BrightCloud CIPA-compliant URL database) Web search filtering (including Google and Bing SafeSearch) YouTube for Schools Intrusion prevention (SNORT® based) Cisco Advanced Malware Protection (AMP)
WAN performance management	WAN link aggregation Application level (Layer 7) traffic analysis and shaping Automatic Layer 3 failover (including VPN connections) WAN uplink selection based on traffic type
Monitoring and management	Web based management and configuration Throughput, connectivity monitoring and alerts Network asset discovery and user identification Built-in network-wide reporting, monitoring and alerts Centralized policy management Real-time diagnostic and troubleshooting over the web Automatic firmware upgrades and security patches Searchable network-wide event logs
Power	Single 100 W power supply
Environment	Operating temperature: 32°F to 113°F (0°C to 45°C) Humidity: 5 to 95% non-condensing
Warranty	Lifetime hardware warranty with advanced replacement included.

^* Advanced security services require an Advanced Security License.