Firewall Cisco-Meraki MX250 Cloud Managed Security Appliance

Firewall Cisco-Meraki MX series. Modelo MX250. 100% centralized cloud management for security, networking, and application control.

Identity-Based Firewall: Automatically assigns firewall and traffic shaping rules, VLAN tags, and bandwidth limits to enforce the right policies for each class of users.

Intrusion Prevention: Protects critical network resources from the latest security threats and vulnerabilities.

Auto VPN: Securely connects branch locations using mesh or hub-and-spoke topologies. Provides simple VPN access into Amazon Web Services and Microsoft Azure.

Content Filtering. Block undesirable web content across 70+ categories, and leverage cloud lookups to filter billions of URLs.

Advanced Malware Protection: Protect your network against malware using the latest threat intelligence, and identify previously unknown malicious files with retrospective detection.

High Availability & Failover: Provides device and connection integrity through multiple uplinks, warm spare failover, and self-healing VPN.

Application Visibility & Control. Identify which applications are being used, and then prioritize critical apps while limiting recreational apps.

Centralized Management: Seamlessly manage campus-wide WiFi deployments and distributed multi-site networks from a single pane-of-glass.

- Hardware: 10G SFP+ WAN interfaces for high-speed connectivity. 1G/10G fiber and copper interfaces for flexible LAN connectivity. Stateful firewall throughput: 4 Gbps. Redundant power supplies and fans
- Recommended maximum clients: 2,000. Cloud-based centralized management: Managed centrally over the Web. Classifies applications, users and devices. Zero-touch, self-provisioning deployments.
- Networking and security: Stateful firewall. Auto VPN™ self-configuring site-to-site VPN. Powerful SD-WAN capabilities. Active Directory integration. Identity-based policies. Client VPN (IPsec). Smart link bonding
- Traffic shaping and application management: Layer 7 application visibility and traffic shaping. Application prioritization. Web caching. Choose WAN uplink based on traffic type.
- Advanced security services (1): Content filtering. Geo-based IP firewall. Google SafeSearch and YouTube for Schools. Intrusion detection & prevention (IDS/IPS). Advanced Malware Protection (AMP). Cisco Threat Grid(2). (1). Requires Advanced Security License. (2) Requires additional licensing for Threat Grid Cloud.

Network and Security Services:
- Stateful firewall, 1:1 NAT, DHCP, DMZ, static routing
- Identity-based policies
- Auto VPN™ self-configuring site-to-site VPN
- Client VPN (IPsec)
- User and device quarantine
- VLAN support and DHCP services

Advanced Security Services
- Content filtering (Webroot BrightCloud CIPA-compliant URL database)
- Web search filtering (including Google and Bing SafeSearch)
- YouTube for Schools
- Intrusion prevention (SourceFire Snort based)
- Cisco Advanced Malware Protection (AMP)
- Requires Advanced Security License

WAN Performance Management
- Web caching
- WAN link aggregation
- Application level (Layer 7) traffic analysis and shaping
- Automatic Layer 3 failover (including VPN connections)
- WAN uplink selection based on traffic type

Monitoring and Management
- Web based management and configuration
- Throughput, connectivity monitoring and alerts
- Network asset discovery and user identification
- Built-in network-wide reporting, monitoring and alerts
- Centralized policy management
- Real-time diagnostic and troubleshooting over the web
- Automatic firmware upgrades and security patches
- Searchable network-wide event logs

Interfaces:
- 2 × 10GbE SFP+ (WAN)
- 8 × GbE (RJ45)
- 8 × GbE (SFP)
- 8 × 10GbE (SFP+)
- USB: 1 × USB 2.0 for 3G/4G failover (supported devices)

Performance:
- Stateful firewall throughput: 4 Gbps
- VPN throughput: 1 Gbps
- Recommended for large campus / data centers (up to 2,000 users)

Power
- Dual 250W power supplies (included)

Environment:
- Operating temperature: 32°F to 104°F (0°C to 40°C)
- Humidity: 5 to 95% non-condensing

Warranty:
- Lifetime hardware warranty with advanced replacement included