Cisco Meraki MX65
Cloud-Managed Security Appliance for Small Branch Deployments
This product is only available for license renewals.
End Of Sale
Overview:
Cisco Meraki MX65 Security Appliances are ideal for organizations with large numbers of distributed sites. Since the MX is 100% cloud man – aged, installation and remote management is simple. The MX has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include Layer 7 application firewall, content filtering, web search filtering, SNORT based intrusion prevention, web caching, Intelligent WAN with multiple uplinks and 4G failover.
MX65 Highlights
Hardware
- Stateful firewall throughput: 250 Mbps
- Recommended maximum clients: 50
- Small form factor
- 10 LAN ports, including 2 PoE+ ports
Cloud-based centralized management
- Managed centrally over the web
- Classifies applications, users and devices
- Zero-touch, self-provisioning deployments
Networking and security
- Stateful firewall
- Auto VPN self-configuring site-to-site VPN
- Active Directory integration
- Identity-based policies
- Client VPN (IPsec)
- 3G / 4G failover via USB modem
Traffic shaping and application management
- Layer 7 application visibility and traffic shaping
- Application prioritization
Advanced security services
- Content filtering
- Google SafeSearch and YouTube for Schools
- Intrusion detection & prevention (IDS/IPS)
- Advanced Malware Protection (AMP)
- Cisco Threat Grid
A Complete Solution for Distributed Networks
The MX provides a complete networking and security solution that typically requires up to four appliances: branch router, next-generation firewall, Layer 7 traffic shaper, and CIPA-compliant content filter.
This integrated architecture dramatically reduces up-front costs and ongoing support and maintenance. Moreover, it provides unified, single pane-of-glass management, speeding deployment and eliminating the need for specialized training.
The First Cloud Managed Networking and Security Platform
The Cisco Meraki MX is a complete networking and security solution, designed to make distributed networks fast, secure, and easy to manage.
The MX is managed entirely through Cisco Meraki’s web based dashboard. Designed with intuitive controls for IT generalists, the MX requires no training or specialized staff. The MX will even self-provision, allowing for remote branch deployments without on site IT.
Powerful Hardware Platform
The MX hardware platform is purpose-built for cloud management, with CPU and memory resources designed to provide application and content-aware security at the edge. The MX’s robust platform enables advanced features like layer 7 application traffic shaping, content filtering, antivirus/antiphishing, and site-to-site VPN, while providing the throughput and capacity for modern, high-density networks.
Easy to Manage Without Training or On-Site Networking Expertise
The MX was designed for ease of use, even in branches without on-site IT. An intuitive interface, contextual help, and real-time support from the cloud eliminate specialized training. To deploy the MX in remote locations, simply connect the MX to the Internet, and it will securely self-provision from the cloud. Firmware upgrades, security patches, and signature updates are all delivered seamlessly from the cloud, ensuring that the MX is always up to date. Integrating broad security and networking features into a single intuitive device drastically reduces complexity in the branch.
Secure, Reliable Distributed Networking Without Costly MPLS
The MX eliminates costly MPLS tunnels with secure site-to-site VPN over redundant Internet connections. Using IPsec over the Internet, the MX links your branches to headquarters as well as to one another as if connected with a virtual Ethernet cable. Configuration headaches like NAT traversal are handled automatically from the cloud. The MX70’s dual WAN ports with balancing and failover enable the use of redundant commodity Internet connections, providing more bandwidth and higher reliability than MPLS, at a fraction of the cost.
Connects and Secures Branches from the Cloud
Cisco Meraki’s cloud management platform makes it easy to deploy secure, interconnected, centrally managed multi-site networks. Add new sites in seconds with auto-configuring VPN. Centrally manage user, content and application-aware firewall policies across your entire network.
Control Applications, Users, and Devices
![]()
The MX provides complete control over users, content, and applications, giving the visibility, security, and control required for mixed-use networks. Layer 7 fingerprinting technology lets administrators block objectionable content and applications and prevent recreational apps like BitTorrent from wasting precious bandwidth. Likewise, the MX can prioritize critical applications like voice and video. User fingerprinting identifies clients by name, operating system, or device (e.g. iPad). Fast search, automatic reports, and device quarantine provide complete visibility and control over the users across the entire network.

Increases WAN Performance and Reduces Bandwidth Costs Block unwanted bandwidth hogs like BitTorrent, and add capacity with WAN load balancing. Cache, deduplicate, and optimize traffic with WAN optimization to lower bandwidth consumption by up to 99% and improve application performance by up to 209x.
Requires Advanced Security License
Requires Threat Grid cloud subscription
Pricing Notes:
- Pricing and product availability subject to change without notice.
Features:
Identity-Based Firewall
Automatically assigns firewall and traffic shaping rules, VLAN tags, and bandwidth limits to enforce the right policies for each class of users.
Intrusion Prevention
Protects critical network resources from the latest security threats and vulnerabilities.
Auto VPN
Securely connects branch locations using mesh or hub-and-spoke tMopologies. Provides simple VPN access into Amazon Web Services and Microsoft Azure.
Content Filtering
Block undesirable web content across 70+ categories, and leverage cloud lookups to filter billions of URLs.
Advanced Malware Protection
Protect your network against malware using the latest threat intelligence, and identify previously unknown malicious files with retrospective detection.
High Availability & Failover
Provides device and connection integrity through multiple uplinks, warm spare failover, and self-healing VPN.
Application Visibility & Control
Identify which applications are being used, and then prioritize critical apps while limiting recreational apps.
Centralized Management
Seamlessly manage campus-wide WiFi deployments and distributed multi-site networks from a single pane-of-glass.
Pricing Notes:
- Pricing and product availability subject to change without notice.
Specifications:
Network and Security Services
- Stateful firewall, 1:1 NAT, DHCP, DMZ, static routing
- Identity-based policies
- Auto VPN self-configuring site-to-site VPN
- Client VPN (IPsec)
- User and device quarantine
- VLAN support and DHCP services
Advanced Security Services
- Content filtering (Webroot BrightCloud CIPA-compliant URL database)
- Web search filtering (including Google and Bing SafeSearch)
- YouTube for Schools
- Intrusion prevention (SourceFire Snort based)
- Cisco Advanced Malware Protection (AMP)
- Requires Advanced Security License
WAN Performance Management
- WAN link aggregation
- Application level (Layer 7) traffic analysis and shaping
- Automatic Layer 3 failover (including VPN connections)
- WAN uplink selection based on traffic type
Monitoring and Management
- Web based management and configuration
- Throughput, connectivity monitoring and alerts
- Network asset discovery and user identification
- Built-in network-wide reporting, monitoring and alerts
- Centralized policy management
- Real-time diagnostic and troubleshooting over the web
- Automatic firmware upgrades and security patches
- Searchable network-wide event logs
Interfaces
- WAN: 2 × 1 GbE
- LAN: 10 × 1 GbE (2 PoE+)
- USB: 1 × USB 2.0 for 3G/4G failover
Performance
- Stateful firewall throughput: 250 Mbps
- VPN throughput: 100 Mbps
- Recommended for small branches (up to 50 users)
Power
- Single 90W power supply
Environment
- Operating temperature: 32°F to 104°F (0°C to 40°C)
- Humidity: 5 to 95% non-condensing
Warranty
- Lifetime hardware warranty with advanced replacement included
- The device-specific licenses corresponding to discontinued hardware products will be available for purchase after the EOS Date unless the license(s) is/are listed in the “End-of-Life Products” list provided below. Cisco Meraki typically provides support for a given product for a period of five (5) years after the EOS date. If the discontinued product is not available for replacement or repair of an in-warranty return, Cisco Meraki may replace the discontinued product with functionally equivalent hardware and transfer the remaining license term from the replaced product to the replacement hardware.
Pricing Notes:
- Pricing and product availability subject to change without notice.




