Meraki Store from

Dedicated Cisco Meraki Networking Store

product unavailable

EOL: Meraki MX600 Cloud Managed Security Appliance

Meraki MX600 Cloud-Managed Security Appliance: EOL replacement is MX450

Campus Firewall or VPN concentrator for 10,000 users

2 x GbE (LAN bypass) LAN ports
2 x GbE RJ45 WAN ports

End Of Life: replacement is MX250
From: £18,054.25 +VAT (£21,665.10 incl. VAT)

Meraki MX600 Security Device License and Support


A license is required for the MX600 Firewall / Security Device. The license permits the product to function, connect to the Dashboard, gives support and warranty.


Meraki AC Power Cord for MX and MS (Various Plugs) – optional


MX250 needs 2 power cords


EOS Meraki 8 x 1 GbE Copper Interface Module for MX400 and MX600 – optional


EOS Meraki 8 x 1 GbE Copper Interface Module for MX400 and MX600

product no longer availavle

Availability: Out of stock

EOS Meraki 8 x 1 GbE SFP Interface Module for MX400 and MX600 – optional


EOS Meraki 8 x 1 GbE SFP Interface Module for MX400 and MX600

Product no longer available

Availability: Out of stock

EOS Meraki 2 x 10 GbE SFP+ Interface Module for MX400 and MX600 – optional



Meraki 2 x 10 GbE SFP+ Interface Module for MX400 and MX600

Availability: Out of stock

Meraki Insight (X-Large) above 2Gbps – optional


for MX450 and MX600 devices

Meraki Insight Licenses will soon no longer be available for purchase.
All Meraki Insight product functionality will remain active and now be included under the upgraded SD-WAN Plus and Per-device SD-WAN Plus licenses specific to your MX model. 


End of Sale date will be July 26th, 2024. 

Meraki Insight helps IT administrators optimize the end user experience, significantly reducing the time it takes to isolate network or application problems that lie beyond the LAN, and create happy, productive users.


Availability: End Of Life (no longer for sale)


This product is now EOL. Please see MX450-HW which is functionally equivalent (and more!)
  • SFP / SFP+ for 1G / 10G connectivity
  • Swappable interface modules
  • Stateful firewall throughput: 1 Gbps
  • Redundant power supplies
  • Recommended maximum clients: 10,000
Cloud-based centralized management
  • Managed centrally over the Web
  • Classifies applications, users and devices
  • Zero-touch, self-provisioning deployments
Networking and security
  • Stateful firewall
  • Auto VPN™ self-configuring site-to-site VPN
  • Active Directory integration
  • Identity-based policies
  • Client VPN (IPsec)
  • Smart link bonding
Traffic shaping and application management
  • Layer 7 application visibility and traffic shaping
  • Application prioritization
  • Web caching
  • Choose WAN uplink based on traffic type
Advanced security services1
    • Content filtering
    • Google SafeSearch and YouTube for Schools
    • Intrusion detection & prevention (IDS/IPS)
    • Advanced Malware Protection (AMP)


1 Requires Advanced Security License

Additional information

Weight 24 kg
Dimensions 55.9 × 48.3 × 89 cm
Firewall dual-purpose ports

Firewall Integrated Wireless

Firewall LAN Ports

Firewall WAN Ports

Form Factor

Recommended clients

Meraki MX600 Security Device License and Support

Security License Type

Advanced Security, Enterprise, No License Ordered

Licence length

1yr, 3yr, 5yr, 7yr, 10yr, No License Ordered, 1day (for per-device licensing model only)

Meraki AC Power Cord for MX and MS (Various Plugs)

Weight N/A
Dimensions N/A
Country for plug


Meraki Insight (X-Large) above 2Gbps

Insight capacity

Licence length

1yr, 3yr, 5yr, 7yr, 10yr, 1day (for per-device licensing model only)


Network and Security Services
  • Stateful firewall, 1:1 NAT, DHCP, DMZ, static routing
  • Identity-based policies
  • Auto VPN™ self-configuring site-to-site VPN
  • Client VPN (IPsec)
  • User and device quarantine
  • VLAN support and DHCP services
Advanced Security Services
  • Content filtering (Webroot BrightCloud CIPA-compliant URL database)
  • Web search filtering (including Google and Bing SafeSearch)
  • YouTube for Schools
  • Intrusion prevention (SourceFire Snort based)
  • Cisco Advanced Malware Protection (AMP)
  • Requires Advanced Security License
WAN Performance Management
  • Web caching
  • WAN link aggregation
  • Application level (Layer 7) traffic analysis and shaping
  • Automatic Layer 3 failover (including VPN connections)
  • WAN uplink selection based on traffic type
Monitoring and Management
  • Web based management and configuration
  • Throughput, connectivity monitoring and alerts
  • Network asset discovery and user identification
  • Built-in network-wide reporting, monitoring and alerts
  • Centralized policy management
  • Real-time diagnostic and troubleshooting over the web
  • Automatic firmware upgrades and security patches
  • Searchable network-wide event logs
  • 2 × GbE (WAN)
  • 8 × GbE
  • 8 × GbE (SFP)
  • 4 × 10 GbE (SFP+)
  • USB: 1 × USB 2.0 for 3G/4G failover (supported devices)
  • Stateful firewall throughput: 1 Gbps
  • VPN throughput: 1 Gbps
  • Recommended for large campus / data centers (up to 10,000 users)
  • Dual 350W power supply
  • Operating temperature: 32°F to 104°F (0°C to 40°C)
  • Humidity: 5 to 95% non-condensing
  • Lifetime hardware warranty with advanced replacement included


Aggregate data rate of up to 1.3 Gbps*

A 5 GHz 2×2:2 radio supporting 80 MHz channel widths and a 2.4 GHz 2×2:2 radio supporting 40 MHz channel widths offer a combined dual-radio aggregate frame rate of 1.3 Gbps*, with up to 866 Mbps in the 5 GHz band thanks to 802.11ac Wave 2 and 400 Mbps in the 2.4 GHz band.

Multi User Multiple Input Multiple Output (MU-MIMO)

With support for the 802.11ac Wave 2 standard, the MR30H offers MU-MIMO for more effcient transmission to multiple clients. Especially suited for enviroments with numerous mobile devices, MU-MIMO enables multiple clients to receive data simultanously. This increases the total network perfomance and the improves the end user experience.

Dedicated third radio delivers 24×7 wireless security and RF analytics

The MR30H’s sophisticated, dedicated dual-band third radio scans the environment continuously, characterizing RF interference and containing wireless threats like rogue access points. No more need to choose between wireless security, advanced RF analysis, and serving client data: a dedicated third radio means that all three occur in real-time, without any impact to client traffic or AP throughput.

Bluetooth Low Energy beacon and scanning

An integrated Bluetooth low energy radio provides seamless deployment of BLE beacon functionality and effortless visibility of BLE devices within range of the AP. The MR30H enables the next generation of location-aware applications and engagement right out of the box.

Automatic cloud-based RF optimization

The MR30H’s sophisticated, automated RF optimization algorithms use a dedicated third radio to collect real-time, full-spectrum RF analysis data — which is continuously fed back to the Meraki cloud. The Meraki cloud then automatically tunes the MR30H’s channel selection and transmit power for optimal performance under the most challenging RF conditions.

Secure wireless environments using 24×7 Air Marshal

No longer choose between a wireless intrusion prevention system (WIPS) and serving client data: thanks to the dedicated third radio, Air Marshal, a highly optimized built-in WIPS, scans continuously for threats and remediates them as commanded, all without disrupting client service. Alarms and optional auto- ontainment of rogue APs are configured via flexible remediation policies, ensuring optimal security and performance in even the most challenging wireless environments.

Integrated enterprise security and guest access

The MR30H features integrated, easy-to-use security technologies to provide secure connectivity for employees and guests alike. Advanced security features such as AES hardware-based encryption and WPA2-Enterprise authentication with 802.1X provide wire-like security while still being easy to configure. One-click guest isolation provides secure, Internet-only access for visitors. Our policy firewall (Identity Policy Manager) enables group or devicebased, granular access policy control. Meraki Teleworker VPN makes it easy to extend the corporate LAN to remote sites, without requiring all clients and devices to have client VPN software. PCI compliance reports check network settings against PCI requirements to simplify secure retail deployments.

Application-aware traffic shaping

The MR30H includes an integrated layer 7 packet inspection, classification, and control engine, enabling you to set QoS policies based on traffic type. Prioritize your mission critical applications, while setting limits on recreational traffic, e.g., peer-to-peer and video streaming.

Voice and Video optmizations

Industry standard QoS features are easy to configure like Wireless Multi Media (WMM) Access Categories, 802.1p, and DSCP.

Low-profile, sleek, and compact design

Despite its robust feature set, the MR30H is packaged in a sleek, low-profile enclosure that blends seamlessly into any environment.

Self-configuring, self-optimizing, self-healing

When plugged in, the MR30H automatically connects to the Meraki cloud, downloads its configuration, and joins the appropriate network. The MR30H then self-optimizes, determining the ideal channel, transmit power, and client connection parameters. As necessary, it will also self-heal, responding automatically to switch failures and other errors.

*Refers to maximum over-the-air data frame rate capability of the radio chipset, and may exceed data rates allowed by IEEE Std 802.11ac-compliant operation.

You may also like…

  • It looks like your shopping cart is such that we can give you a discount on your order!

    That might be worth up to about 5% to you.

    We can email you a quote same day, but it might take a couple of days to confirm the details. We WILL need the details of the end user of the purchase if that isn't you. We won't contact them, though!

    So if you have the time, you might want to ask MerakiStore for a quote instead of checking out today.

    Add all the items in your shopping list to the cart and then use the 'Request Quote' button.
    Or simply email us your shopping list!