Description

Meraki MX100 Firewall Oman

The Cisco Meraki MX100 Oman is ideal for organizations considering a Unified Threat Management (UTM) solution, for distributed sites, campuses or datacenter VPN concentration. Since the MX100 is 100% cloud managed, installation and remote management are simple. The Cisco Meraki MX100 Oman has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include SD-WAN capabilities, application-based firewalling, content filtering, web search filtering, SNORT® based intrusion detection and prevention, Cisco Advanced Malware Protection (AMP), web caching, 4G cellular failover and more. Auto VPN and SD-WAN features are available on our hardware and virtual appliances, configurable in Amazon Web Services or Microsoft Azure.

Key Features

Application-aware traffic control: bandwidth policies for Layer 7 application types (e.g., block YouTube, prioritize Skype, throttle BitTorrent)
Content filtering: CIPA-compliant content filter, safe-search enforcement (Google/Bing), and YouTube for Schools
Intrusion prevention: PCI-compliant IPS sensor using industry-leading SNORT® signature database from Cisco
Advanced Malware Protection: file reputation-based protection engine powered by Cisco AMP
Identity-based security policies and application management

Technical Specification

General

Recommended Use Cases : Large branch
Recommended Clients : 500
Stateful Firewall Throughput : 750 Mbps
Advanced Security Throughput : 650 Mbps
Maximum VPN Throughput : 500 Mbps
Maximum Concurrent VPN Tunnels : 250
WAN Interfaces ( Dedicated) : 1 x GbE RJ45 1 x USB (cellular failover )
Dual Purpose : 1 x GbE RJ45
LAN Interfaces : Fixed 8 x GbE 2 x GbE (SFP)
Web Caching : 1TB
Mounting : 1U rack
Dimensions : 19” x 10 “ x 1.75” (483 mm x 254mm x 44 mm)
Weight : 9 lb (4.1kg)
Power Supply : Internal 100-220V 50/60Hz AC
Power Load : (idle/max)30W / 55W
Operating Temperature : 32°F to 104°F (0°C to 40°C)
Humidity : 5% to 95%

Management

Managed via the web using the Cisco Meraki dashboard
Single-pane-of-glass into managing wired and wireless networks
Zero-touch remote deployment (no staging needed)
Automatic firmware upgrades and security patches
Templates based multi-network management
Org-level two-factor authentication and single sign-on
Role-based administration with change logging and alerts

Monitoring and Reporting

Throughput, connectivity monitoring and email alerts
Detailed historical per-port and per-client usage statistics
Application usage statistics
Org-level change logs for compliance and change management
VPN tunnel and latency monitoring
Network asset discovery and user identification
Periodic emails with key utilisation metrics
Device performance and utilisation reporting
Netflow support
Syslog integration

Remote Diagnostics

Live remote packet capture
Real-time diagnostic and troubleshooting tools
Aggregated event logs with instant search

Network and Firewall Services

Stateful firewall, 1:1 NAT, DMZ
Identity-based policies
Auto VPN: Automated site-to-site (IPsec) VPN, for hub-and-spoke or mesh topologies
Client (IPsec L2TP) VPN
Multiple WAN IP, PPPoE, NAT
VLAN support and DHCP services
Static routing
User and device quarantine

WAN Performance Management

Web caching (available on the MX84, MX100, MX250, MX450)
WAN link aggregation
Automatic Layer 3 failover (including VPN connections)
3G / 4G USB modem failover or single-uplink
Application level (Layer 7) traffic analysis and shaping
Ability to choose WAN uplink based on traffic type
SD-WAN: Dual active VPN with policy-based routing and dynamic path selection
CAT 6 LTE modem for failover or single-uplink1

Advanced Security Services

Content filtering (Webroot BrightCloud CIPA compliant URL database)
Web search filtering (including Google / Bing SafeSearch)
YouTube for Schools
Intrusion-prevention sensor (Cisco SNORT® based)
Advanced Malware Protection (AMP)
AMP Threat Grid
Geography-based firewall rules (MaxMind Geo-IP database)

Integrated Cellular

LTE bands : 2, 4, 5, 12, 13, 17, and 19 (North America). 1, 3, 5, 7, 8, 20, 26, 28A, 28B, 34, 38, 39, 40, and 41 (Worldwide)
300 Mbps CAT 6 LTE
Additional regulatory information : PTCRB (US), RCM (ANZ, APAC), GCF (EU)