cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

vMX100 License

BS
Getting noticed

vMX100 License

Hi all,

 

If I buy a vMX license does it come with IPS/AM features?

 

Regards

BS

7 REPLIES 7
Kind of a big deal

Re: vMX100 License

Fairly certain that those functions are not included with the vMX, its strictly an Auto-VPN concentrator
Nolan Herring | nolanwifi.com
TwitterLinkedIn
BS
Getting noticed

Re: vMX100 License

Which means we need to have next generation features on a different box?
Kind of a big deal

Re: vMX100 License

"Virtual MX is a virtual instance of a Meraki security appliance, dedicated specifically to providing the simple configuration benefits of site-to-site Auto VPN for customers running or migrating IT services to an Amazon Web Services or Microsoft Azure Virtual Private Cloud (VPC)."

So you basically would want to apply any of your IPS/AMP/L3/L7 policies/rules at the SPOKE (say an MX65 at a remote site) where as the vMX would be your HUB to simply terminate the vpn tunnels.
Nolan Herring | nolanwifi.com
TwitterLinkedIn
Kind of a big deal

Re: vMX100 License

Pretty sure that you'll need to have the Advanced Security licenses on the spoke MX appliances in order to get those features.
Nolan Herring | nolanwifi.com
TwitterLinkedIn
Kind of a big deal

Re: vMX100 License

The vMX can only be a VPN concentrator and nothing else.

New here

Re: vMX100 License

Correct.   The vMX100 is only used as an AutoVPN endpoint.

 

I wonder about its cohabitation with an MX that has Advanced Security in the same Organization.   You cannot mix and match Advanced and Enterprise licensing in the same organization.   So, if you have a Z3 user, you must create a new Organization for just that user.   

 

They need to fix that.   Such a pain.

Kind of a big deal

Re: vMX100 License

>I wonder about its cohabitation with an MX that has Advanced Security in the same Organization.   You cannot mix and match Advanced and Enterprise licensing in the same organization

 

The VMX is an exception.  You can have a VMX and other devices with Advanced Security in the same organisation.

Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.