Skip to main content
Cisco Meraki

Security and SD-WAN Features Directory

Security and SD-WAN Features Directory

Overview

This article describes MX/Z features and their dependencies on MX/Z firmware releases.

Note: All products have a minimum runnable firmware version, and some have a maximum runnable firmware version. Please refer to Product Firmware Version Restrictions for more information.  

The table below explains the platform differentiation:

Use Case

Platform

Compatible Licenses (detailed breakdown)

Security and SD-WAN (multi-WAN, security, wireless, HA, and cellular support)

All MX models (active models

Enterprise, Advanced Security, Secure SD-WAN Plus

Teleworker (single-WAN, basic security, wireless, and cellular support)

All Z models (active models)

Enterprise

Virtual MX (single-WAN and native-cloud hosting)

All vMX models (active models)

Enterprise

Note: There is only one official Beta, Stable Release Candidate, and Stable firmware release. If you see more than one, this means you have patch versions available for nodes running the major versions.

Let's take the following example:

Screen Shot 2022-07-06 at 1.52.57 PM.png 

  • MX 16.16 is the current stable release as of this writing.
  • MX 16.16.3 is the stable patch release for nodes running MX 16.16.
  • MX 15.42.3 is the stable patch release for nodes running MX 15.42.
  • MX 15.44.3 is the stable patch release for nodes running MX 15.44.

Therefore, if your organization does not contain nodes running MX 15.x, then you will not see MX 15.x.y as a firmware upgrade option. Similarly, if your organization does not contain nodes running MX 16.x, then you will not see MX 16.x.y as a firmware upgrade option. 

 

What if I want to upgrade directly to the latest stable patch release?

You can do so by upgrading one node to the major version (ex. upgrading to MX 16.16). Once upgraded, you will now see the option to upgrade other nodes directly to the patch version (ex. upgrading to MX 16.16.3). 

Upcoming Beta - MX 18.1 Firmware Features

Coming this summer!

Stable Release Candidate - MX 17.X Firmware Features

Feature

Description

Type

Platforms Supported

Minimum Required License Type

IPv6

IPv6 is an ongoing cross-product initiative for Meraki as IPv4 addresses are being exhausted and with more hosts such as IoT devices requiring addressing, IPv6 provides a new structure to accommodate a larger number of hosts. 

New feature

MX, Z, vMX

Enterprise, Advanced Security, Secure SD-WAN Plus

NBAR2

Network-Based Application Recognition (NBAR) is an advanced application recognition engine developed by Cisco that utilizes several classification techniques.

Enhancement

MX, Z

Enterprise, Advanced Security, Secure SD-WAN Plus

Content Filtering Powered by Cisco Talos

This allows the MX’s Content Filtering feature to classify URLs based on web content and threat categories curated by Cisco Talos.

New Feature

MX

Advanced Security, Secure SD-WAN Plus

SD-Internet Steering (Top 10 Apps)

Internet traffic policy configuration remains consistent with VPN traffic policy configuration, albeit with different options. There are 2 different SD-Internet policies that can be configured:

  • Custom expression polices
  • Major application polices

New Feature

MX

Secure SD-WAN Plus

Mandatory DHCP

Mandatory DHCP enabled VLANs must request for a DHCP address before gaining access to the network.

New Feature

MX

Enterprise, Advanced Security, Secure SD-WAN Plus

Enhanced WAN Failover and Failback

Flow failover and failback the instant the primary uplink is deemed reliable.

New Feature

MX

Enterprise, Advanced Security, Secure SD-WAN Plus

 

Stable - MX 16.X Firmware Features

Feature

Description

Type

Platforms Supported

Minimum Required License Type

Traffic Analytics Classified by NBAR2

Network-Based Application Recognition (NBAR) is an advanced application recognition engine developed by Cisco that utilizes several classification techniques.

New feature

MX, Z

Enterprise, Advanced Security, Secure SD-WAN Plus

Cisco AnyConnect 

Introduces native Cisco AnyConnect support from the Meraki dashboard.

New feature

MX, Z, vMX

Enterprise, Advanced Security, Secure SD-WAN Plus

SD-WAN over Cellular

With this feature in place the cellular connection that was previously only enabled as backup can be configured as an active uplink in the SD-WAN & traffic shaping page.

New Feature

MX

Enterprise, Advanced Security, Secure SD-WAN Plus

vMX in GCP

vMX deployment in Google Cloud Platform.

New Feature

vMX

Enterprise

PPPoE support

You may need PPPoE if your ISP requires a username and password to access your DSL connection.

New Feature

MX, Z

Enterprise, Advanced Security, Secure SD-WAN Plus

Enhanced SNORT

Snort version upgrades.

Enhancement

MX

Advanced Security, Secure SD-WAN Plus

SD-Internet Steering (L3)

The function of this feature is to steer customer traffic to SaaS or public cloud-based applications over the best-performing WAN connection at the time the traffic is forwarded.

New Feature

MX

Secure SD-WAN Plus

 

ARCHIVE

Firmware: MX 15

     

    • Was this article helpful?