Cisco Meraki mx67- Cloud Managed Firewall Appliance

The Cisco Meraki MX67 is a cloud-managed next-generation firewall and SD-WAN security appliance designed for small branch offices, distributed retail sites, and organisations requiring enterprise-grade network security without on-site IT expertise. Fully managed through the Cisco Meraki Dashboard, the MX67 delivers true zero-touch deployment, centralised policy management, and unified visibility across all connected sites from a single pane of glass.

100% Cloud Management with Zero-Touch Deployment

The MX67 requires no CLI, no complex configuration files, and no on-site engineer to deploy. Simply mount the appliance, connect power and internet, and the device automatically contacts the Meraki cloud to receive its configuration. Security policies, firmware updates, and network changes are pushed instantly from the Meraki Dashboard — enabling IT teams to manage hundreds of distributed sites as easily as one.

Comprehensive Security in a Single Appliance

The MX67 eliminates the need for multiple security devices by integrating a Layer 7 next-generation firewall, SNORT-based IPS/IDS, Cisco Advanced Malware Protection (AMP) with Threat Grid sandbox analysis, content filtering, SSL inspection, DLP, CASB, and Cisco Umbrella DNS-layer security in one box. The Advanced Security licence unlocks the full threat protection suite, while the Enterprise licence provides stateful firewall, VPN, and SD-WAN capabilities.

Auto VPN & SD-WAN

Meraki’s Auto VPN technology enables secure, full-mesh site-to-site VPN in just three clicks — no manual tunnel configuration required. The integrated SD-WAN engine provides application-aware traffic steering across multiple WAN links, automatically failing over to a secondary connection or 4G/LTE USB modem when the primary link degrades, ensuring business continuity without manual intervention.

Unified Platform

The Meraki Dashboard provides a single interface for managing the MX67 alongside Meraki wireless access points, switches, IP cameras, mobile device management (MDM), and IoT — giving IT teams complete network-wide visibility, security event monitoring, and policy control without switching between tools.

Backed by a limited lifetime hardware warranty and Cisco Meraki’s global cloud infrastructure, the MX67 sets the standard for effortless, enterprise-grade branch office security.

—

Technical Specifications

Performance

• Firewall Throughput: 450 Mbps
• Advanced Security Throughput: 300 Mbps
• VPN Throughput: 200 Mbps
• Max VPN Peers (Default/Max): 50 / 50
• Recommended Users: Up to 50
• Concurrent Sessions: Up to 100,000

Ports & Interfaces

• GbE WAN Ports: 2x (1x dedicated WAN + 1x WAN/LAN dual-use)
• GbE LAN Ports: 4x (1x WAN/LAN dual-use)
• Total GbE Ports: 6
• USB Port: 1x USB 2.0 (3G/4G LTE cellular failover modem)
• Bypass: No hardware bypass

Security Features

• Firewall: Layer 7 stateful NGFW with application awareness
• IDS/IPS: SNORT-based intrusion detection and prevention (Adv. Sec.)
• Malware Protection: Cisco AMP + Threat Grid cloud sandbox (Adv. Sec.)
• Content Filtering: 80+ URL categories, CIPA-compliant (Adv. Sec.)
• Web Search Filtering: Safe Search enforcement
• SSL Inspection: Full SSL/TLS decryption and re-encryption
• DNS Security: Cisco Umbrella integration (SASE/SIG)
• DLP: Data Loss Prevention
• CASB: Cloud Access Security Broker
• SaaS Controls: Tenant restrictions, granular app control
• Remote Browser Isolation: Supported (licence-dependent)
• DoS Protection: Yes
• Access Control: IP/MAC/L7 ACLs, URL filtering

VPN

• Auto VPN: Site-to-site full-mesh in 3 clicks
• IPsec: Site-to-site and client VPN
• VPN Throughput: 200 Mbps
• Max Concurrent VPN Peers: 50
• Client VPN: Cisco AnyConnect (licence required)
• Encryption: AES-256
• Authentication: Pre-shared key, certificates
• Meraki vMX: Auto VPN peering with AWS and Azure virtual MX

SD-WAN

• WAN Links: Dual active WAN with automatic failover
• Path Selection: Application-aware, policy-based, dynamic
• Link Monitoring: Real-time latency, jitter, packet loss
• Failover: Automatic WAN failover + 4G/LTE USB backup
• Traffic Shaping: Application-based QoS and prioritisation
• Cellular Backup: Via USB 3G/4G modem (modem sold separately)

Routing & Networking

• Routing: Static, OSPF, BGP
• IPv6: Full dual-stack IPv4/IPv6
• DHCP: Server, client, relay
• DNS: Proxy, custom DNS
• NAT: Full NAT, PAT, 1:1 NAT, port forwarding
• VLAN: 802.1Q, multiple VLANs
• QoS: Application-based traffic shaping and prioritisation
• IGMP Snooping: Multicast support
• Web Caching: Integrated WAN optimisation cache

Management

• Platform: Cisco Meraki Dashboard (cloud)
• Deployment: True zero-touch provisioning
• API: REST API (full read/write)
• SNMP: v1/v2c/v3
• Syslog: Remote syslog
• Reporting: Real-time and historical traffic analytics
• Alerts: Email and webhook alerts
• Firmware: Automatic cloud-pushed updates (scheduled windows)
• Unified Management: Security + SD-WAN + Wi-Fi + switching + MDM + IoT

Physical Specifications

• Form Factor: Desktop (wall-mountable)
• Dimensions (W x D x H): 200 x 118 x 28 mm (7.87 x 4.65 x 1.10 in)
• Weight: 0.33 kg (0.73 lbs)
• Housing: Plastic chassis
• Cooling: Fanless (passive — silent operation)
• Mounting: Desktop or wall-mount
• LED Indicators: Power, WAN, LAN activity

Power

• Input: 100-240V AC, 50-60Hz (auto-switching)
• Power Supply: External power adapter
• Power Consumption: ~7W (typical)

Environmental

• Operating Temperature: 0°C to 40°C (32°F to 104°F)
• Storage Temperature: -20°C to 70°C
• Operating Humidity: 10% to 90% non-condensing

Certifications

• FCC, CE, IC (Canada), VCCI, UL
• RoHS compliant

Licensing (Required to Operate)

• Enterprise Licence:
• Stateful firewall, Auto VPN, SD-WAN
• Layer 7 traffic shaping, application visibility
• Centralised Meraki Dashboard management
• Advanced Security Licence:
• All Enterprise features
• IDS/IPS (SNORT), AMP malware protection
• Content & web search filtering
• Cisco Umbrella integration, SSL inspection
• DLP, CASB, Remote Browser Isolation
• Secure SD-WAN Plus Licence:
• Advanced SD-WAN and application features
• Terms: 1, 3, 5, 7, 10-year licence options
• ⚠ Device will not function without a valid active licence

Warranty & Support

• Hardware Warranty: Limited Lifetime Hardware Warranty
• Advanced Replacement: Included with valid support licence
• Technical Support: 24×7 Meraki cloud monitoring; TAC via licence

Variants

• MX67-HW — Wired only (this model)
• MX67W — With integrated 802.11ac Wave 2 dual-band Wi-Fi
• MX67C — With integrated 4G LTE modem + SIM slot

Ordering

• Part Number: MX67-HW
• Smaller Model: MX67 (this) — up to 50 users
• Larger Model: MX68 — up to 50 users, more ports
• Next Tier: MX75 — up to 200 users, higher throughput