MX Security License Comparison
All current Cisco Meraki products require valid licensing to operate. All licensing related operations can be performed from the Organization > Configure > License Info page of the Meraki Dashboard. For more information about the License Info page specifically, please refer to Meraki's License Info Page article.
Having licenses allows your organisation's cloud-based online Dashboard, hosted by Meraki, to connect to and configure & manage all your Meraki devices. All devices are controlled under a single pane of glass in the dashboard.
Everything is included in the cloud dashboard, which is just one license SKU.
Given the range of use cases that can be solved, there are three license options for the MX appliance that provides customers the flexibility to select the license most appropriate for their intended use.
Enterprise |
Advanced Security |
Secure SD-WAN Plus |
“All I require is Auto VPN and a firewall” | “I connect directly to the Internet so need a UTM too” | “My business is reliant on SaaS/IaaS/DC served apps” |
|
|
|
The licensing structure for MX appliances is the same as that of any other Meraki device – 1:1 ratio of devices to licenses. Pair your chosen MX appliance(s) with the relevant license for your use case.
Enterprise license | OR | Advanced security license | OR | Secure SD-WAN Plus license |
All Cisco Meraki licenses include warranty, 24x7 Enterprise support, software and feature updates, and cloud dashboard access.
New features come at no extra cost—and there are no per-user license fees.
Features by License Option
Feature |
Enterprise |
Advanced Security |
Secure SD-WAN Plus |
Centralized management |
✔ |
✔ |
✔ |
Zero-touch firmware updates |
✔ |
✔ |
✔ |
True zero-touch provisioning |
✔ |
✔ |
✔ |
24x7 enterprise support |
✔ |
✔ |
✔ |
Open APIs |
✔ |
✔ |
✔ |
Automatic WAN failover |
✔ |
✔ |
✔ |
Sub-second site-to-site VPN failover |
✔ |
✔ |
✔ |
Sub-second dynamic path selection |
✔ |
✔ |
✔ |
Stateful firewall |
✔ |
✔ |
✔ |
VLAN to VLAN routing |
✔ |
✔ |
✔ |
Advanced Routing |
✔ |
✔ |
✔ |
Link bonding/failover |
✔ |
✔ |
✔ |
3G / 4G cellular failover |
✔ |
✔ |
✔ |
Traffic shaping/prioritization |
✔ |
✔ |
✔ |
Site-to-site VPN |
✔ |
✔ |
✔ |
Client VPN |
✔ |
✔ |
✔ |
MPLS to VPN Failover |
✔ |
✔ |
✔ |
Splash pages |
✔ |
✔ |
✔ |
Configuration templates |
✔ |
✔ |
✔ |
Group Policies |
✔ |
✔ |
✔ |
Client connectivity alerts |
✔ |
✔ |
✔ |
Essential SD-WAN |
✔ |
✔ |
✔ |
Source-Based Routing |
✔ |
✔ |
✔ |
Local Breakout (IP based) |
✔ |
✔ |
✔ |
Geography based firewall rules |
|
✔ |
✔ |
Intrusion detection & prevention |
|
✔ |
✔ |
Content filtering |
|
✔ |
✔ |
Youtube for Schools |
|
✔ |
✔ |
Web Search Filtering |
|
✔ |
✔ |
Cisco Advanced Malware Protection (AMP) |
|
✔ |
✔ |
Umbrella DNS Integration** |
|
✔ |
✔ |
Threat Grid Integration** |
✔ |
✔ |
|
Web App Health Analytics |
✔ |
||
WAN Health Analytics |
✔ |
||
VoIP Health Analytics |
✔ |
||
Smart breakout * |
✔ |
*coming soon
**Requires a separate license
License Start Date
Licenses start consuming time from the date purchased, not the date they are added to an Organization.
Note: Waiting to activate a license in Dashboard does not delay its activation date. There is no time benefit gained from delaying an activation.
MX Licensing Options
The MX Security Devices and the Z accessories have licenses on a per-model basis, so every MX or Z model has a corresponding license. Please note that these licenses are non-transferrable between different models.