Item: Cisco Meraki MX
Rating: 8
Author: Peter Muchau

Use Cases and Deployment Scope

We use the Cisco Meraki MX for location coupling via SD-WAN and the connection to our cloud. The Cisco Meraki MX can be seen as a rudimentary firewall with basic functions. We also use the Cisco Meraki MX for AMP and IDS/IPS. Client VPN connections are terminated at the main location (Secure access).

Pros and Cons

Client VPN
SD Wan Connections
IDS/IPS

The firewall's livelog is missing
IDS / IPS Livelog (detail) is missing
Inside NAT (Source NAT)

Return on Investment

IDP and IPS functions can only be configured in a rudimentary manner
Simple integration of the SD makes site networking easier
Logging and connection table is not useful

Simplified Management

The firewall rules can be easily rolled out using templates. With a large set of rules, you quickly lose track of things; that's something that needs to be worked on. The security center provides rather less information; this is not enough to keep the operation running.

Integrations with other Cisco products

Cisco Meraki SD-WAN

Simple implementation with a high benefit factor, locations can be easily integrated worldwide.

Scalability

The Cisco Meraki MX is basically a good product, but not perfect. If you compare the Cisco Meraki MX with a Fortigate or Cisco Firepower, you quickly realize that this system can do less than the reference product. The Cisco Meraki MX can be used in small environments, but in large environments you have to check carefully whether it really makes sense to use it.

Alternatives Considered

Cisco Secure Access

We are currently testing Cisco Secure Access, the result is still pending.

Key Insights

Do you think Cisco Meraki MX delivers good value for the price?

Are you happy with Cisco Meraki MX's feature set?

Yes

Did Cisco Meraki MX live up to sales and marketing promises?

Yes

Did implementation of Cisco Meraki MX go as expected?

Yes

Would you buy Cisco Meraki MX again?

Yes

Other Software Used

Cisco Meraki SD-WAN, Cisco Secure Access, Azure VPN Gateway

Likelihood to Recommend

The Cisco Meraki MX is well suited for small system solutions; compared to a Cisco Firepower, an MX is unfortunately just a packet filter. Functions such as livelog, connection table, extended troubleshooting are missing. Unfortunately, these functions are not integrated and this hinders the work of the firewall. You have no control function and have to rely on the configuration.

Cisco Meraki MX, a Real Firewall ?

Modules Used

Overall Satisfaction with Cisco Meraki MX