Meraki MX68 Features Supported

[LeAnts]

Hi All,

looking to purchase a mx68 with advanced security licensing for a small office location..

from the list below.. please can you tel me what is and what is not supported - the datasheet is very limited.

SSL VPN tunnel - yes but requires a anyconnect license? or covered by the advanced security license and how many users? 

DLP  - cannot see specific data pertaining to the mx68?

Web filtering - supported yes but limited cannot do custom profiles etc that i am aware off.

WIDS (wireless intrusion detection) supported?

thank in adv

[Brash]

Hope this answers your questions:

Remote access SSL VPN: Requires Any connect licensing separate from Advanced Security

DLP: Not a feature of the Meraki MX. You would deploy in tandem with another security solution.

Web Filtering: Layer 7 rules and content filtering is supported. More limited than a NGFW however

WIDS: The MX does support IDS/IPS or traffic through it but no additional WIDS capabilities 

If all of those are a must have, it might be worth looking into Cisco Umbrella integration and Cisco Any connect for a full SASE solution (Cisco Secure Connect)

[PhilipDAth]

>Web filtering - supported yes but limited cannot do custom profiles etc that i am aware off.

You can create group policies with content filtering and layer 7 rules, and apply them to specific machines or VLAN interfaces.  This needs an Advanced Security licence.

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Creating_and_Applying...

>WIDS (wireless intrusion detection) supported?

You really want to use a Meraki MR axxess point if you want strong features in this area.  They support Air Marshall.

https://documentation.meraki.com/MR/Monitoring_and_Reporting/Air_Marshal

The WiFi built into the MX models is very basic.

ps. The MX68 has two PoE LAN ports - so you can plug an MR directly into one of the PoE ports to power it.