Description
Enterprise or Advanced Security License for Meraki MX67 security devices.
All current Cisco Meraki products require valid licensing to operate. All licensing related operations can be performed from the Organization > Configure > License Info page of the Meraki Dashboard. For more information about the License Info page specifically, please refer to Meraki's License Info Page article.
Having licenses allows your organisation's cloud-based online Dashboard, hosted by Meraki, to connect to and configure & manage all your Meraki devices. All devices are controlled under a single pane of glass in the dashboard.
Everything is included in the cloud dashboard, which is just one license SKU.
Given the range of use cases that can be solved, there are three license options for the MX appliance that provides customers the flexibility to select the license most appropriate for their intended use.
|
Enterprise
|
Advanced Security
|
Secure SD-WAN Plus
|
| “All I require is Auto VPN and a firewall” |
“I connect directly to the Internet so need a UTM too” |
“My business is reliant on SaaS/IaaS/DC served apps” |
|
|
|
|
The licensing structure for MX appliances is the same as that of any other Meraki device – 1:1 ratio of devices to licenses. Pair your chosen MX appliance(s) with the relevant license for your use case.
| Enterprise license |
OR |
Advanced security license |
OR |
Secure SD-WAN Plus license |
All Cisco Meraki licenses include warranty, 24x7 Enterprise support, software and feature updates, and cloud dashboard access.
New features come at no extra cost—and there are no per-user license fees.
Features by License Option
|
Feature
|
Enterprise
|
Advanced Security
|
Secure SD-WAN Plus
|
|
Centralized management
|
✔
|
✔
|
✔
|
|
Zero-touch firmware updates
|
✔
|
✔
|
✔
|
|
True zero-touch provisioning
|
✔
|
✔
|
✔
|
|
24x7 enterprise support
|
✔
|
✔
|
✔
|
|
Open APIs
|
✔
|
✔
|
✔
|
|
Automatic WAN failover
|
✔
|
✔
|
✔
|
|
Sub-second site-to-site VPN failover
|
✔
|
✔
|
✔
|
|
Sub-second dynamic path selection
|
✔
|
✔
|
✔
|
|
Stateful firewall
|
✔
|
✔
|
✔
|
|
VLAN to VLAN routing
|
✔
|
✔
|
✔
|
|
Advanced Routing
|
✔
|
✔
|
✔
|
|
Link bonding/failover
|
✔
|
✔
|
✔
|
|
3G / 4G cellular failover
|
✔
|
✔
|
✔
|
|
Traffic shaping/prioritization
|
✔
|
✔
|
✔
|
|
Site-to-site VPN
|
✔
|
✔
|
✔
|
|
Client VPN
|
✔
|
✔
|
✔
|
|
MPLS to VPN Failover
|
✔
|
✔
|
✔
|
|
Splash pages
|
✔
|
✔
|
✔
|
|
Configuration templates
|
✔
|
✔
|
✔
|
|
Group Policies
|
✔
|
✔
|
✔
|
|
Client connectivity alerts
|
✔
|
✔
|
✔
|
|
Essential SD-WAN
|
✔
|
✔
|
✔
|
|
Source-Based Routing
|
✔
|
✔
|
✔
|
|
Local Breakout (IP based)
|
✔
|
✔
|
✔
|
|
Geography based firewall rules
|
|
✔
|
✔
|
|
Intrusion detection & prevention
|
|
✔
|
✔
|
|
Content filtering
|
|
✔
|
✔
|
|
Youtube for Schools
|
|
✔
|
✔
|
|
Web Search Filtering
|
|
✔
|
✔
|
|
Cisco Advanced Malware Protection (AMP)
|
|
✔
|
✔
|
|
Umbrella DNS Integration**
|
|
✔
|
✔
|
|
Threat Grid Integration**
|
|
✔ |
✔
|
|
Web App Health Analytics
|
|
|
✔
|
|
WAN Health Analytics
|
|
|
✔
|
|
VoIP Health Analytics
|
|
|
✔
|
|
Smart breakout *
|
|
|
✔
|
*coming soon
**Requires a separate license
License Start Date
Licenses start consuming time from the date purchased, not the date they are added to an Organization.
Note: Waiting to activate a license in Dashboard does not delay its activation date. There is no time benefit gained from delaying an activation.
MX Licensing Options
The MX Security Devices and the Z accessories have licenses on a per-model basis, so every MX or Z model has a corresponding license. Please note that these licenses are non-transferrable between different models.
FAQs
Q: How does Meraki licensing work?
A: Meraki devices use the Meraki cloud for centralized management and control. The Meraki cloud is licensed on a “per device, per year” basis. Each organization is licensed for a certain number of devices through a termination date.
Q: How much does an Enterprise Cloud license cost?
A: License prices vary for each product line. For example, a one year wireless license is $150 list price and a three year switch license is $400 list price. Licenses are available across the MR, MX and MS products for different time durations (1, 3, 5, 7 and 10 years).
Q: How do I buy an Enterprise Cloud License?
A: You can buy a license through an authorized Meraki Partner.
Q: Do I have to buy more licenses every time I buy new hardware?
A: Not necessarily. Licenses are sold separately from the hardware. For example, you could upgrade from the MR16 to the MR24 without buying new licenses. The same will apply for new products that are released in the future.
Q: Do I need to have a license for every piece of Meraki hardware?
A: Yes, every Meraki hardware component requires a cloud license to be managed. If you see a warning that says ‘Your organization is in excess of its device limits’ on the Meraki Dashboard, this means that you have more devices than licenses in your organization.
Q: Are there different license tiers or editions?
A: The wireless and switch lines have one tier: Enterprise. The MX line has two tiers: Enterprise and Advanced Security.
Q: How does licensing vary between different Meraki product lines, e.g., wireless, switches, and security appliances?
A: In general, all Meraki products follow the same licensing model. The primary difference between them is that with all wireless access points (MR series) the license is the same for all hardware models, whereas with the switches (MS series) and security appliance line (MX series) each hardware model has a different license. Example: the LIC-ENT-1YR (1 year enterprise MR license) applies to any of the MR access points. The LIC-MS220-24-1YR (1 year enterprise MS220-24 license) applies to the MS220-24 model. The LIC-ENT-MX64-1YR (1 year enterprise MX64 license) applies to the MX64.
Q: Is Advanced Security Licensing available for Z-Series devices?
A: Advanced Security licensing and features are currently only available on MX devices, not on Z-Series devices, or any other Meraki series of devices.
Q: Can I upgrade from Enterprise to Advanced Security (MX Only)?
A: You can purchase an Advanced Security key which includes all of the devices you would like to be licensed for and apply it as a renewal onto your account. You can also contact the Cisco Meraki Support team, and they can upgrade your organization to Advanced Security.
Q. Can my organization be downgraded from Advanced Security to Enterprise?
Yes, you can purchase and apply an Enterprise renewal key that covers all devices in your organization; this will revert your organization to an Enterprise state. You can also contact Meraki Support and have your organization downgraded. Please note that if the organization is downgraded, you will not receive any additional time from the downgraded license keys.
Q: How does support relate to licensing?
A: A Meraki license includes enterprise-class support.
Q: How does hardware warranty relate to licensing?
A: The hardware warranty is tied to the hardware unit, not the license. Hardware that has a lifetime warranty (e.g., the MR24) is warranted for the life of the hardware. Hardware with a fixed term warranty, e.g., 1 year, has a 1 year warranty regardless of the license.
Q: Can I move licenses between organizations?
A: Yes you can. Licenses that have been applied to an organization within the last 7 days can be re-applied to another organization. Please read this article for more details.
Q: What happens if I add devices in the middle of my license term?
A: Meraki sells 1, 3, 5, 7 and 10 year licenses, but does not sell pro-rated licenses. When you add a license to an existing account, we calculate the amount of extra time in your account and extend the co-terminating renewal date for all your devices accordingly.
Let’s say you originally purchased a 10 AP, 1 year license. 4 months into the license term you decide to add a 6 AP, 1 year license. You have extra credit of 4 x 6 = 24 AP-months. We automatically apply those 24 AP-months for your new 16 AP network. This gives you an additional 24 / 16 = 1.5 months.
In this way an account only has a single co-terminating renewal date, avoiding the confusion associated with multiple renewal dates. To anticipate how new licenses will affect your co-termination date, please reference Meraki’s License Calculator.
Q: What happens when my license runs out?
A: You can purchase a renewal through an authorized Meraki partner. If you chose not to renew, you will no longer be able to manage your devices via the Meraki cloud, and your Meraki network devices will cease to function. This means that you will no longer be able to configure or make changes to your Meraki network equipment, and your Meraki network products will no longer allow traffic to pass to the Internet. With Systems Manager networks, you will no longer be able to enroll devices or change settings for currently enrolled devices.
Q: How do I know which licenses to renew?
A: Cisco Meraki Licensing is co-terminating. This means the end dates for all licensing is averaged together based on device type and licensing limits. In other words, your individual licenses don’t expire because they are averaged into one expiration date.
Q: How do I renew my licensing?
A: The recommended practice for applying a renewal is to purchase a single license key that covers every device currently in the Organization for some number of years. Applying that license key as a renewal will then extend the Organization’s licensing by that many years.
When a license key is applied as a renewal, the Organization’s licensing state updates to match the device count of that license key. For example, if an Organization with licensing for 5 APs were to have a 2-AP license applied as a renewal, that Organization would only be licensed for 2 APs. In this instance, it would be 3 APs over their license limit, and therefore out-of-compliance.
Q: Will I be notified before my license expires?
A: Yes, administrators listed on the account will be sent notifications 30 days prior to account expiration outlining the steps for license extension. A further e-mail will be sent 3 days prior to account expiration. In addition, an account expiration banner will be displayed in the Meraki dashboard during this time.
Q: Will I be notified before my account is shut off if I am in excess of my device limits?
A: Yes, administrators listed on accounts that have more devices than cloud licenses will be sent notifications 30 days prior to account expiration outlining the steps for license purchase.
Q: What does it mean to be ‘out of license’?
A: ‘Out of license’ is a term that refers to an organization that is in one of the following two states: (1) Cloud license has expired, or (2) The number of hardware devices exceeds the number of cloud licenses. If an organization is out of license it means it has been deactivated, and either license renewals or additional licenses are required for the Meraki products to function, and for these products to be manageable using the Meraki cloud.
Q: How long do I have to reactivate my account after it expires?
A: You can reactivate your account at any point in the future after it expires by adding the necessary number of valid licenses. Please note that once your account expires, your products will stop functioning.
Q: Can I purchase a new license for a used piece of hardware purchased on the secondary market?
A: Before purchasing any piece of Cisco Meraki hardware on a secondary market such as eBay, you are advised to contact Cisco Meraki support (https://meraki.cisco.com/support) to confirm that the hardware has not been reported stolen from a Cisco Meraki trial program or a bona fide purchaser. Please have the serial number of each piece of hardware available when you contact Cisco Meraki support. Cisco Meraki will not support or sell licenses for hardware units that have been reported stolen.
Q: Do I need duplicate licenses to cover my security appliance in a warm spare configuration?
A: No, if two security appliances are in a warm spare/HA configuration licensing is only required for one of the two devices. The only additional cost of a warm spare configuration is the redundant hardware. Switches in warm spare/HA will require two individual licenses.
