vMX Comparison Datasheet
You can also find this information in the MX sizing guide.
|
vMX-S |
vMX-M |
vMX-L |
|
|
VPN Throughput |
250 Mbps |
500 Mbps |
1 Gbps |
| NAT Throughput | 250 Mbps | 500 Mbps | 1 Gbps |
| NGFW Throughput | 200 Mbps | 400 Mbps | 1 Gbps |
|
Number of Tunnels (site-to-site VPN) |
50 |
250 |
1,000 |
| Supported Features |
Auto-VPN (SD-WAN termination from branch) IPsec VPN AnyConnect/L2TP VPN VPN firewall BGP and OSPF One-Armed concentrator NAT mode vMX One WAN and One LAN port (MX 18.2+) L3/L7 Firewall (MX 19.1+) Content Filtering (MX 19.1+) Advanced Malware Protection (MX 19.1+) Intrusion Detection/Prevention (MX 19.1+) Security Center (MX 19.1+) |
||
| Unsupported Features |
High Availability (HA) - the recommended design for headend resiliency is DC-DC failover Umbrella DNS Security (MR/Z1/Z3 Only) Active Directory Content Filtering HTTP Content Caching 802.1x Port Auth MX Splash Pages Dual WAN |
||
All vMX instances require licensing for use. Licensing can be purchased in two tiers for the vMX: Enterprise and Advanced Security. For more information about the features available for each type of licensing, please refer to this article.
| AWS | Azure | Alibaba Cloud Global (including CN regions) | GCP | |
| vMX-S instance | M4.large C5.large |
Standard_F4s_V2 Standard_D2_v2 Standard_D2_v3 |
C5.large C6.large |
c2-standard-4 |
| vMX-M instance | M4.large C5.large |
Standard_F4s_V2 Standard_D2_v2 Standard_D2_v3 |
C5.large C6.large |
c2-standard-4 |
| vMX-L instance | C5.xlarge | Standard_F4s_v2 | C5.xlarge C6.xlarge |
c2-standard-4 |
| Recommended firmware | vMX-S/M/L: MX15.37+ |
vMX-S/M: MX15.37+ vMX-L: MX18.2+ |
MX15.37+ | MX16.8+ |
| Can stop/restart the instance (we do not recommend pause/hibernate) | Yes | Yes | Yes | Yes |
| Can re-configure after deployment (the vMX must be powered down) | Yes | Yes | Yes | Yes |
| Static IP support via dashboard | Yes | Yes | Yes | Yes |
| Static IP support via user-data | No | No | No | No |
| Licenses | 1,3,5-year Enterprise and Advanced Security License | 1,3,5-year Enterprise and Advanced Security License | 1,3,5-year Enterprise and Advanced Security License | 1,3,5-year Enterprise and Advanced Security License |
| BGP support | MX15.37+ | MX15.37+ | MX15.37+ | MX16.8+ |
| NAT Mode Support | Yes | Yes | Yes | Yes |
| Concentrator Mode | MX18.2+ | MX15.37+ | MX15.37+ | MX16.8+ |
The following items should be noted in the above table:
- Static IP configuration from the dashboard, should match the IP address configuration on the cloud platform