Subscription - MX Licensing

Last updated
Save as PDF

Overview

Subscription licensing follows a hardware-agnostic approach, utilizing SKUs that encompass multiple hardware components within a single SKU. The purpose of this document is to outline the specific SKUs associated with the hardware covered under the MX product class. Additionally, this document will emphasize the key features offered by the MX product class, providing valuable insights to our customers.

MX Product Class and Hardware

The table below serves as a reference to easily identify the mapping of the MX product classes to their respective hardware.

Product Class	Hardware
MX Small LIC-MX-S	MX50-HW MX60-HW MX60W-HW MX64-HW MX64W-HW MX65-HW MX65W-HW MX67-HW MX67C-HW-NA MX67C-HW-WW MX67W-HW MX68-HW MX68W-HW MX68CW-HW-NA MX68CW-HW-WW vMX-S
MX Medium LIC-MX-M	MX70-HW MX75-HW MX80-HW MX84-HW MX85-HW vMX-M
MX Large LIC-MX-L	MX90-HW MX95-HW MX100-HW MX105-HW MX400-HW VMX100 vMX-L
MX X-Large LIC-MX-XL	MX250-HW MX450-HW MX600-HW vMX-XL

Features Highlights

The following table outlines some of the key features available across the MX product classes, enabling customers to identify the distinctive capabilities for the different use cases.

To compare feature tiers for Z product class, refer to the following documentation.

Feature	Essential	Advantage
Centralized Management	✔	✔
Zero-touch firmware updates (including security patches)	✔	✔
True zero-touch provisioning	✔	✔
24x7 enterprise support	✔	✔
Open APIs	✔	✔
Automatic WAN failover	✔	✔
Uplink Load Balancing/Failover conditions	✔	✔
Sub-second dynamic path selection	✔	✔
3G/4G cellular failover	✔	✔
High Availability	✔	✔
Essential SD-WAN	✔	✔
Sub-second Site-to-Site VPN failover	✔	✔
Site-to-site VPN (Auto VPN and 3rd party peering)	✔	✔
IPv6 Support	✔	✔
MPLS to VPN Failover	✔	✔
SD-WAN Steering and Policies	✔	✔
Traffic shaping/prioritization	✔	✔
Client VPN	✔	✔
Policy-Based Routing	✔	✔
VLAN to VLAN Routing	✔	✔
Source-Based Routing	✔	✔
Local Breakout (IP and Port based)	✔	✔
Advanced Routing	✔	✔
Client Connectivity Alerts	✔	✔
Security Appliance Alerts	✔	✔
Splash Pages	✔	✔
Multi-WAN (2 Active + 1 Backup)	✔	✔
Wireless and/or Cellular functionality	✔	✔
Cloud Integrations	✔	✔
Group Policies	✔	✔
Configuration Templates	✔	✔***
Stateful firewall	✔	✔
Next-gen Traffic Analytics - Network-Based Application Recognition (NBAR) Integration	✔	✔
Layer 7 (Application) Enforcement powered by NBAR	✔	✔
Enhanced Live Firewall Logging and Troubleshooting	✔	✔
Traffic Shaping Enforcement powered by NBAR	✔	✔
Catalyst + Meraki SD-WAN Interconnect (eBGP over IPsec)	✔	✔
IPsec SSE tunnel monitoring, redundancy, and DIA	✔	✔
Cisco XDR Integration*	✔	✔
SD-AVC Integration - Smart Application Updates Delivered via the Cloud	✔	✔
DH15 and DH21 support in IPsec	✔	✔
Geography-based firewall rules	✔	✔
Trusted Traffic Exclusions powered by NBAR	✔	✔
Intrusion Detection and Prevention System (IDS/IPS)	✔	✔
Content Filtering powered by Talos Intelligence	✔	✔
YouTube Content Restrictions	✔	✔
Web Search Filtering	✔	✔
Advanced Malware Protection (AMP)	✔	✔
Umbrella DNS Integration*	✔	✔
Cisco Secure Malware Analytics Integration (formerly know as Threat Grid)*	✔	✔
Adaptive Policy (SGT Transport)	✔	✔
Adaptive Policy (SGT Assignment)		✔
ThousandEyes Agent Integration**		✔
Internet Outages		✔
ThousandEyes Support with Meraki Dashboard**		✔
SD-Internet Steering and Policies		✔
Web App Health		✔
WAN Health		✔
VoIP Health		✔
Smart Breakout		✔

*A separate license is required.

**A separate license is required, and free ThousandEyes tests are not yet part of the offering.

***Template support is included with the Advantage Tier; however, their use is restricted to configuring only Essential features.

Please note,

The vMX type does not support the Advantage tier. If a network includes a claimed vMX, the Advantage tier cannot be set for that product class. Only MX types can support the Advantage tier.

For related information please refer to the following link - MS Subscription Documentation