Cisco Meraki Z3C
Fast, Reliable Connectivity for the Modern Teleworker
This product is only available for license renewals.
End Of Sale
Overview:
The Cisco Meraki Z3C-Series teleworker gateway is an enterprise class firewall, VPN gateway and router. Each model offers five gigabit ethernet ports and wireless for connectivity. Each model is designed to securely extend the power of Meraki cloud managed networking to employees, IT staff, and executives working from home.
Using Meraki’s proven and highly scalable Auto VPN technology, administrators can deploy network services including VoIP and remote endpoints with automatic, zero-touch provisioning. Additionally the Z-series provides secure wired and wireless access, and increases end-user productivity through Layer 7 traffic shaping.
All models feature a high-performance stateful firewall, support for VLANs, inter-VLAN routing, and isolation to segregate corporate data from recreational traffic. The Z-series offers the latest in wireless performance with 802.11ac Wave 2 technology with MU-MIMO support to provide reliable and high speed network access for most demanding business applications and latest devices.
Z-Series and Meraki Cloud Management: A Powerful Combo
All Meraki devices are managed via the Meraki cloud, with an intuitive browser-based interface. Since the Z-series is self-configuring and managed over the web, you can repidly deploy at remote locations without any assistance from end-users.
Meraki Cloud services monitor all devices 24×7 and deliver real-time alerts if any device encounters a problem. Remote diagnostics tools enable real-time troubleshooting through any web browser. New features and enhancements are delivered seamlessly over the web, so you never have to manually download software updates or worry about missing security patches.
Z3C Highlights:
Hardware
- 802.11ac Wave 2 WiFi for fast and reliable connectivity
- 4 wired ports with one PoE-powered port, ideal for phones
- 1 GbE WAN port, 4 GbE LAN ports
- 3G / 4G failover via CAT 3 LTE or USB modem
- Sleek, low profile design with optional desk stand
Wireless
- Dual-band 802.11ac Wave 2 radios
- 2×2 MU-MIMO, up to 1.3 Gbps data rate
- Supports up to 4 SSIDs
Traffic shaping and application management
- Layer 7 application visibility and traffic shaping
- Application prioritization
Teleworker gateway services
- Stateful firewall separates corporate and personal traffic
- Extend VoIP phones over WAN
- 802.1x support for wired port authentication
- Auto VPN™ self-configuring site-to-site VPN
- Access corporate HQ via site-to-site VPN
Cloud-based centralized management
- Managed centrally over the Web
- Classifies applications, users and devices
- Zero-touch, self-provisioning deployments
Pricing Notes:
- Pricing and product availability subject to change without notice.
Features:
Auto VPN
Leveraging Meraki’s cloud architecture, VPN tunnels to HQ or the data center can be enabled via a single click without any commandline configurations or multi-step key permission setups. Meraki’s patent-pending Auto VPN technology automatically tunnels, hole punches, sets up route tables, and establishes the IPsec connections, completely eliminating the complexity seen in traditional site-to-site VPN solutions.

Auto Configuring Site-to-Site VPN
Application-aware traffic shaping
The Z-Series includes an integrated layer 7 packet inspection, classification, and control engine, enabling you to set QoS policies based on traffic type. Prioritize your mission critical applications like VoIP or remote desktop, while setting limits on recreational traffic, e.g., peerto-peer and video streaming.

Application Visibility and Control
Simple, powerful security from end to end
With end-to-end VPN encryption, corporate data is always protected. Additionally the Meraki Z3 supports 802.1x wired port authentication, offering network and endpoint security no matter where the gateway may be deployed.
Self-configuring, self-optimizing, self-healing
When plugged in, the Z-Series automatically connects to the Meraki cloud, downloads its configuration, and joins your network. In case of WAN IP address changes, the Z-Series self heals by re-establishing the site-to-site VPN tunnels using the new IP address. Also, if a supported 3G/4G modem is connected and primary WAN uplink connectivity fails, the Z-Series will automatically failover to cellular.
Industry-leading cloud management
Meraki’s award-winning cloud management architecture unifies WAN, LAN, and wireless management under a web based dashboard, and scales easily from small deployments to large, multi-site deployments with tens of thousands of devices. The Meraki dashboard provides intuitive yet powerful role-based administration, firmware updates, configuration changes, email alerts, and easy to audit change logs.

Multi-Site Management via the Meraki Cloud
Pricing Notes:
- Pricing and product availability subject to change without notice.
Technical Specifications:
Interfaces
- WAN: 1 × 1 GbE
- LAN: 4 × 1 GbE, 1 x CAT 3 LTE Cellular Modem
- PoE: 1 × 802.3af PoE enabled port
- USB: 1 × USB 2.0 (for 3G/4G failover)
Network and Security Services
- Stateful firewall, 1:1 NAT, DMZ
- Auto VPN™ self-configuring site-to-site VPN
- Client VPN (IPSec L2TP), limit 2 authorized users (with Meraki-hosted authentication only)
- VLAN and DHCP services
- 802.1x wired port authentication
- Static routing
- User and device quarantine
Integrated Wireless
- 4 SSIDs
- 2 × 802.11a/b/g/n/ac (2.4Ghz or 5 Ghz), 2x2 MU-MIMO with 2 spatial streams
- Max data rate 1.3 Gbit/s
- 4 × interal dipole antennas (gain: 3 dBi @ 2.4 GHz, 4 dBi @ 5 GHz)
- WPA2-PSK authentication
- Regulatory: FCC (US), IC (Canada), C-Tick (Australia / New Zealand), RoHS
Monitoring and Reporting
- Throughput, connectivity monitoring, and email alerts
- Detailed historical per-port and per-client usage statistics
- Application usage statistics
- Org-level change logs for compliance and change management
- VPN tunnel and latency monitoring
- Network asset discovery and user identification
- Periodic emails with key utilization metrics
- Syslog integration
Remote Diagnostics
- Live remote packet capture
- Real-time diagnostic and troubleshooting over the web
- Aggregated event logs with instant search
WAN Performance Management
- Automatic Layer 3 failover (including VPN connections)
- Application level (Layer 7) traffic analysis and shaping
Management
- Managed via the web using the Meraki dashboard
- Single pane-of-glass management of wired and wireless networks
- Zero-touch remote deployment (no staging needed)
- Automatic firmware upgrades and security patches
- Centralized policy management
- Org-level two-factor authentication and single sign-on
- Role-based adminstration with change logging and alerts
Performance
- Stateful firewall throughput: 100 Mbps
- VPN throughput: 50 Mbps
- Recommended for teleworker (up to 5 clients)
- CAT 3 LTE Cellular Modem: 100 Mbps
Physical and Environmental Specifications
- Dimensions: 7.9" × 4.41" × 1.04" (200mm × 112mm × 26mm)
- Weight: 1.1 lbs (0.487 kg)
- Power: single 50W (54 V / 0.9 A) power supply included, power cord sold separately
- Operating temperature: 32°F to 104°F (0°C to 40°C)
- Humidity: 5 to 95% non-condensing
- Desktop or wall mount (all standard mounting hardware included)
- Kensington lock hard point
Regulatory
- FCC (US)
- CB (IEC)
- CISPR (Australia / New Zealand)
Warranty
- Lifetime hardware warranty with advanced replacement included
- The device-specific licenses corresponding to discontinued hardware products will be available for purchase after the EOS Date unless the license(s) is/are listed in the “End-of-Life Products” list provided below. Cisco Meraki typically provides support for a given product for a period of five (5) years after the EOS date. If the discontinued product is not available for replacement or repair of an in-warranty return, Cisco Meraki may replace the discontinued product with functionally equivalent hardware and transfer the remaining license term from the replaced product to the replacement hardware.
Pricing Notes:
- Pricing and product availability subject to change without notice.
