vMX Comparison Datasheet
You can also find this information in the MX sizing guide.
|
vMX-S |
vMX-M |
vMX-L |
vMX-XL |
|
|
Throughput |
250 Mbps |
500 Mbps |
1 Gbps |
10 Gbps |
|
Number of Tunnels (site-to-site VPN) |
50 |
250 |
1,000 |
10,000 |
| Supported Features |
Auto-VPN (SD-WAN termination from branch) IPsec VPN AnyConnect/L2TP VPN VPN firewall BGP and OSPF One-Armed concentrator NAT mode vMX Geo IP Layer 7 Firewall Rules One WAN and One LAN port (MX18.2+) Security filtering (MX19.1+) Advanced Malware Protection (MX19.1+) Intrusion Detection/Prevention (MX19.1+) Security Center (MX19.1+) |
One-Armed Concentrator mode Auto-VPN (SD-WAN termination from branch) VPN firewall |
||
| Unsupported Features |
High Availability (HA) - the recommended design for headend resiliency is DC-DC failover Umbrella DNS Security (MR/Z1/Z3 Only) Active Directory Content Filtering HTTP Content Caching 802.1x Port Auth MX Splash Pages Dual WAN or LAN ports |
High Availability (HA) - the recommended design for headend resiliency is DC-DC failover Security filtering Advanced Malware Protection Intrusion Detection/Prevention Umbrella DNS Security (MR/Z1/Z3 Only) Active Directory Content Filtering HTTP Content Caching Geo IP Layer 7 Firewall Rules 802.1x Port Auth Security Center Threatgrid MX Splash Pages Dual WAN or LAN ports IPsec VPN AnyConnect/L2TP VPN BGP and OSPF NAT Mode |
||
All vMX instances require licensing for use. Licensing can be purchased in three tiers: Enterprise, Advanced Security or SD-WAN+. For more information about the features available for each type of licensing, please refer to this article.
| AWS | Azure | Alibaba Cloud Global (including CN regions) | GCP | |
| vMX-S instance | M4.large C5.large |
Standard_F4s_V2 Standard_D2_v2 Standard_D2_v3 |
C5.large C6.large |
c2-standard-4 |
| vMX-M instance | M4.large C5.large |
Standard_F4s_V2 Standard_D2_v2 Standard_D2_v3 |
C5.large C6.large |
c2-standard-4 |
| vMX-L instance | C5.xlarge | Standard_F4s_v2 | C5.xlarge C6.xlarge |
c2-standard-4 |
| vMX-XL instance | c6in.2xlarge | TBD | TBD | TBD |
| Recommended firmware | vMX-S/M/L: MX15.37+ vMX-XL: MX18.2-XL+ |
vMX-S/M: MX15.37+ vMX-L: MX18.2+ |
MX15.37+ | MX16.8+ |
| Can stop/restart the instance (we do not recommend pause/hibernate) | Yes | Yes | Yes | Yes |
| Can re-configure after deployment (the vMX must be powered down) | Yes | Yes | Yes | Yes |
| Static IP support via dashboard | Yes | Yes | Yes | Yes |
| Static IP support via user-data | No | No | No | No |
| Licenses | 1,3,5-year Enterprise and Advanced Security License | 1,3,5-year Enterprise and Advanced Security License | 1,3,5-year Enterprise and Advanced Security License | 1,3,5-year Enterprise and Advanced Security License |
| BGP support | MX15.37+ | MX15.37+ | MX15.37+ | MX16.8+ |
| NAT Mode Support | Yes | Yes | Yes | Yes |
| Concentrator Mode | MX18.2+ | MX15.37+ | MX15.37+ | MX16.8+ |
The following items should be noted in the above table:
- vMX-XL is only supported in AWS.
- vMX-XL is supported in Passthrough or VPN Concentrator mode only. NAT mode is currently not supported on the vMX-XL
- Static IP configuration from the dashboard, should match the IP address configuration on the cloud platform