Choosing the right Cisco Meraki MX security appliance is a crucial step in designing a secure and scalable network. IT managers, MSPs, and enterprise procurement teams must balance throughput, client load, security requirements, and budget when selecting a model. This guide provides a detailed comparison of Meraki MX models, including deployment scenarios, technical specifications, licensing options, and procurement considerations, helping organizations make informed decisions.
Table of Contents
Part 1: Deployment ScenariosPart 2: Technical Comparison & Features
Part 3: Licensing & Subscription Models
Part 4: EoL Planning and Upgrade Paths
Part 5: Procurement Considerations
Part 6: Conclusion & Decision Guidance
FAQ
Part 1: Deployment Scenarios
Selecting the correct MX appliance depends on client count, required throughput, and enabled security features. Devices should operate below 85% utilization for optimal performance.
Small Offices and Branches (Up to 200 Users)
Desktop models provide integrated security and SD-WAN for small branches or remote offices.
| Model(s) | Recommended Use Case | Key Features |
| MX64 / MX64W | Very small branch (up to 50 users) | Desktop form factor; MX64W includes integrated wireless. |
| MX65 / MX65W | Small branch (up to 50 users) | Higher throughput than MX64; MX65W includes Wi-Fi. |
| MX67 / MX68 | Small branch (up to 50 users) | Desktop; MX68 has 10x GbE LAN ports (2x PoE+). |
| MX75 | Small branch (up to 200 users) | Desktop unit; NGFW throughput ~1 Gbps, 10x GbE LAN ports, 2x PoE. |
Medium Branch Offices (250–750 Users)
Rack-mount models support higher throughput and VPN capacity for medium-sized branches.
| Model(s) | Recommended Use Case | Key Features |
| MX85 | Small to medium branch (up to 250 users) | 1U rack; 8x GbE LAN, 2x GbE SFP LAN; web caching. |
| MX95 | Medium branch (up to 500 users) | NGFW throughput up to 1.5 Gbps; higher session capacity. |
| MX100 / MX105 | Medium to large branch (up to 750 users) | NGFW throughput ~2 Gbps; 1U rack, 2x 10 GbE SFP+ WAN uplinks. |
Large Sites, Campuses, Data Centers (2,000+ Users)
High-capacity appliances serve aggregation or core deployments for large networks.
| Model(s) | Recommended Use Case | Key Features |
| MX250 | Campus / VPN concentrator (up to 2,000 users) | Dual power supply, 10 GbE SFP+ uplinks, high throughput. |
| MX450 | Large campus / data center (up to 10,000 users) | Maximum capacity, redundant power, high-performance NGFW. |
Part 2: Technical Comparison & Features
This section provides throughput and performance metrics along with key security features of Meraki MX models.
| Model | Max Clients | Max Concurrent Sessions | Firewall Throughput | NGFW Throughput | Max VPN Tunnels |
| MX64 / MX64W | 50 | 25,000 | 250 Mbps | 150 Mbps | 50 |
| MX65 / MX65W | 50 | 25,000 | 250 Mbps | 200 Mbps | 50 |
| MX67 / MX68 | 50 | 25,000 | 700 Mbps | 300 Mbps | 50 |
| MX75 | 200 | 50,000 | 1 Gbps | 500 Mbps | 75 |
| MX85 | 250 | 125,000 | 1 Gbps | 500 Mbps | 100 |
| MX95 | 500 | 200,000 | 3 Gbps | 1.5 Gbps | 250 |
| MX100 / MX105 | 750 | 250,000 | 5 Gbps | 2 Gbps | 500 |
| MX250 | 2,000 | 500,000 | 7 Gbps | 2 Gbps | 1,000 |
| MX450 | 10,000 | 1,000,000 | 10 Gbps | 5 Gbps | 1,500 |
Security Features Overview
Meraki MX integrates Unified Threat Management (UTM) and SD-WAN. Key features include NGFW, AMP, IDS/IPS, and Auto VPN for site-to-site connectivity.
Part 3: Licensing & Subscription Models
Meraki licensing is required for cloud management, firmware updates, and support.
| Licensing Model | Description | Enforcement | Recommendation |
| Co-Term | Single dynamic expiration for all devices | Network shutdown risk if licenses expire | Existing simple networks |
| Per-Device | 1:1 license per device | Device shutdown 30 days after expiry | Legacy; not for new purchases |
| Subscription | Fixed network-level expiration, hardware-agnostic SKUs | Amber Mode: network forwards traffic, management disabled | Recommended for scalability |
Part 4: EoL Planning and Upgrade Paths
Cisco Meraki supports hardware until its End-of-Support (EoS) date. Post-EoS, firmware updates and technical support may cease.
| Model | End-of-Support |
| MX65 / MX65W | May 28, 2026 |
| MX84 | October 31, 2026 |
| MX100 | February 1, 2027 |
| MX64 / MX64W | July 26, 2027 |
Migration strategies include equipment refresh or extended Third-Party Maintenance to extend the lifecycle.
Part 5: Procurement Considerations
Fast deployment requires access to genuine hardware, flexible payment options, and multi-brand sourcing. Trusted partners like Router-switch provide global stock visibility, quick quotes, and technical guidance for IT teams and MSPs.
Part 6: Conclusion & Decision Guidance
Selecting the right Meraki MX model requires balancing client load, throughput, security features, and licensing. Subscription Licensing offers flexibility, Amber Mode continuity, and hardware-agnostic SKUs. Partnering with suppliers providing certified hardware and fast delivery ensures seamless deployment.
FAQ
Which Meraki MX model fits a small branch office?
Up to 50 clients: MX64 / MX64W, MX65 / MX65W, MX67 / MX68. Up to 200 clients: MX75.
Differences between MX65, MX67, and MX75?
MX65 is legacy, 250 Mbps firewall. MX67 has NGFW ~700 Mbps. MX75 is desktop, NGFW ~1 Gbps, supports 200 clients.
MX85 vs MX95 vs MX100 throughput and features?
MX85: up to 250 users, 1 Gbps NGFW. MX95: up to 500 users, 1.5 Gbps NGFW. MX100: legacy, ~650 Mbps NGFW; replacement: MX95 or MX105.
How to migrate from EoL devices?
Verify EoS dates. Upgrade to supported hardware or use TPM. Subscription Licensing simplifies future license transfers.
Can licenses transfer to new MX models?
Replacement under warranty may allow license transfer. Subscription Licensing SKUs are hardware-agnostic, enabling flexibility within device families.
Best procurement channels?
Partners providing global stock visibility, fast quotes, flexible payment, and multi-brand sourcing streamline deployment and budget management.
Expertise Builds Trust
20+ Years • 200+ Countries • 21500+ Customers/Projects
CCIE · JNCIE · NSE7 · ACDX · HPE Master ASE · Dell Server/AI Expert