Description
Cisco Meraki MX100 Security Appliance Kenya
The Cisco Meraki MX100 Kenya is ideal for organizations considering a Unified Threat Management (UTM) solution, for distributed sites, campuses or datacenter VPN concentration. Since the MX100 is 100% cloud managed, installation and remote management are simple. The Cisco Meraki MX100 Kenya has a comprehensive suite of network services, eliminating the need for multiple appliances. These services include SD-WAN capabilities, application-based firewalling, content filtering, web search filtering, SNORT® based intrusion detection and prevention, Cisco Advanced Malware Protection (AMP), web caching, 4G cellular failover and more. Auto VPN and SD-WAN features are available on our hardware and virtual appliances, configurable in Amazon Web Services or Microsoft Azure.
 MX100 Features
- Application-aware traffic control: bandwidth policies for Layer 7 application types (e.g., block YouTube, prioritize Skype, throttle BitTorrent)
- Content filtering: CIPA-compliant content filter, safe-search enforcement (Google/Bing), and YouTube for Schools
- Intrusion prevention: PCI-compliant IPS sensor using industry-leading SNORT® signature database from Cisco
- Advanced Malware Protection: file reputation-based protection engine powered by Cisco AMP
- Identity-based security policies and application management
Identity-Based Firewall
Automatically assigns firewall and traffic shaping rules, VLAN tags, and bandwidth limits to enforce the right policies for each class of users.
Auto VPN
Securely connects branch locations using mesh or hub-and-spoke tMopologies. Provides simple VPN access into Amazon Web Services and Microsoft Azure.
Advanced Malware Protection
Protect your network against malware using the latest threat intelligence, and identify previously unknown malicious files with retrospective detection.
Application Visibility & Control
Identify which applications are being used, and then prioritize critical apps while limiting recreational apps.
Intrusion Prevention
Protects critical network resources from the latest security threats and vulnerabilities.
Content Filtering
Block undesirable web content across 70+ categories, and leverage cloud lookups to filter billions of URLs.
High Availability & Failover
Provides device and connection integrity through multiple uplinks, warm spare failover, and self-healing VPN.
Centralized Management
Seamlessly manage campus-wide WiFi deployments and distributed multi-site networks from a single pane-of-glass.
MX100 Specification
General
- Recommended Use Cases : Large branch
- Recommended Clients : 500
- Stateful Firewall Throughput : 750 Mbps
- Advanced Security Throughput : 650 Mbps
- Maximum VPN Throughput : 500 Mbps
- Maximum Concurrent VPN Tunnels :250
- WAN Interfaces ( Dedicated) : 1 x GbE RJ45 1 x USB (cellular failover )
- Dual Purpose : 1 x GbE RJ45
- LAN Interfaces : Fixed 8 x GbE 2 x GbE (SFP)
- Web Caching : 1TB
- Mounting : 1U rack
- Dimensions : 19” x 10 “ x 1.75” (483 mm x 254mm x 44 mm)
- Weight : 9 lb (4.1kg)
- Power Supply : Internal 100-220V 50/60Hz AC
- Power Load : (idle/max)30W / 55W
- Operating Temperature : 32°F to 104°F (0°C to 40°C)
- Humidity : 5% to 95%
Management
- Managed via the web using the Cisco Meraki dashboard
- Single-pane-of-glass into managing wired and wireless networks
- Zero-touch remote deployment (no staging needed)
- Automatic firmware upgrades and security patches
- Templates based multi-network management
- Org-level two-factor authentication and single sign-on
- Role-based administration with change logging and alerts
Monitoring and Reporting
- Throughput, connectivity monitoring and email alerts
- Detailed historical per-port and per-client usage statistics
- Application usage statistics
- Org-level change logs for compliance and change management
- VPN tunnel and latency monitoring
- Network asset discovery and user identification
- Periodic emails with key utilisation metrics
- Device performance and utilisation reporting
- Netflow support
- Syslog integration
Remote Diagnostics
- Live remote packet capture
- Real-time diagnostic and troubleshooting tools
- Aggregated event logs with instant search
Network and Firewall Services
- Stateful firewall, 1:1 NAT, DMZ
- Identity-based policies
- Auto VPN: Automated site-to-site (IPsec) VPN, for hub-and-spoke or mesh topologies
- Client (IPsec L2TP) VPN
- Multiple WAN IP, PPPoE, NAT
- VLAN support and DHCP services
- Static routing
- User and device quarantine
WAN Performance Management
- Web caching (available on the MX84, MX100, MX250, MX450)
- WAN link aggregation
- Automatic Layer 3 failover (including VPN connections)
- 3G / 4G USB modem failover or single-uplink
- Application level (Layer 7) traffic analysis and shaping
- Ability to choose WAN uplink based on traffic type
- SD-WAN: Dual active VPN with policy-based routing and dynamic path selection
- CAT 6 LTE modem for failover or single-uplink1
Advanced Security Services
- Content filtering (Webroot BrightCloud CIPA compliant URL database)
- Web search filtering (including Google / Bing SafeSearch)
- YouTube for Schools
- Intrusion-prevention sensor (Cisco SNORT® based)
- Advanced Malware Protection (AMP)
- AMP Threat Grid
- Geography-based firewall rules (MaxMind Geo-IP database)
Integrated Cellular
- LTE bands: 2, 4, 5, 12, 13, 17, and 19 (North America). 1, 3, 5, 7, 8, 20, 26, 28A, 28B, 34, 38, 39, 40, and 41 (Worldwide)
- 300 Mbps CAT 6 LTE
- Additional regulatory information: PTCRB (US), RCM (ANZ, APAC), GCF (EU)
