Meraki MX for firewall / filtering

[toffee]

Hi, has anyone had any experience with Meraki MX for firewall / filtering? Currently considering MX84 for primary, MX250 for secondary with advanced security license.

 

Thanks

[atcoates]

I've got one on trial and don't think it's up to the job, if you can use it with Umbrella you can deploy a certificiate and do https inspection. Using the MX for https adds a massive overhead and criples performance.

 

"Thanks for getting back to me.

 

The MX can operate in warm spare (using VRRP) and you only need to have 1x license for the devices. You can request an additional MX to trial this feature from your Meraki Sales Representative.

 

Currently, HTTPSi is under development within Meraki, this can be enabled for you if you wish to try it out in its current state (you must be running the MX in 15.15 firmware or higher as well). Also, please note that the additional overhead of decrypting and inspecting client traffic significantly reduces the security appliance’s throughput capabilities. A reduction of 85-90% vs stateful firewall throughput spec may be seen.

[Wave9_Lee]

Hi, has anyone had any experience with Meraki MX for firewall / filtering? Currently considering MX84 for primary, MX250 for secondary with advanced security license.

 

Thanks

 

We're big fans of Meraki, for performance, visibility and management - but mainly for switches and APs. When it comes to the MX, we felt the filtering wasn't appropriate for the schools environment, and as already mentioned, performance dipped when under load. Hence we opted for Sophos for Firewall/filtering

[ibpalle]

I'd have to agree - the filtering options are a bit basic for an educational environment. For switch/APs it's very good but I'd opt for a separate firewall and/or filtering solution.