Cisco Start Catalog Secure

May - July, 2019

Security

Featured Products

Getting Started

What’s New

Feature Story Cisco Meraki MX67/68 Cloud Managed Security Appliances

Collaborate
Comprehensive Security in a Single Box
Compute Secure a Site in Minutes, Right Out of the Box

Security
ASA 5500-X
Firepower 2100
AnyConnect
AMP for Endpoints
Umbrella
Meraki MX
Meraki Z
Meraki MV

Connect
Switches
Wireless
Routers

Services MX67-HW MX68CW-HW-WW

450 Mbps 300 Mbps 200 Mbps 50 450 Mbps 300 Mbps 200 Mbps 50
FW Adv. Security VPN VPN FW Adv. Security VPN VPN
Throughput Throughput Throughput Peers Throughput Throughput Throughput Peers

Default Optional Optional Optional Default Optional Optional Optional

AVC NGIPS AMP URL Filtering AVC NGIPS AMP URL Filtering

11ac 2-port 11ac 300 Mbps

1-port 1-port 4-port USB 2-port 8-port USB
Wave 2 GE-LAN Wave 2 Internal
GE-WAN GE-WAN/LAN GE-LAN for 4G GE-WAN GE-LAN for 4G
AP PoE+ AP LTE Modem
Cisco Start Catalog Secure
May - July, 2019
Security

Featured Products

Getting Started

What’s New

Feature Story Cisco Meraki MV22/32/72 Cloud Managed Smart Cameras

Collaborate
Bring Powerful, Advanced Analytics to the Typical Security Camera World,
Compute With an Industry-Leading Processor and an Innovative Architecture

Security
ASA 5500-X
Firepower 2100
AnyConnect
AMP for Endpoints
Umbrella
Meraki MX
Meraki Z
Meraki MV

Connect
Switches
Wireless
Routers

Services

MV22-HW MV32-HW
4 MP 3 ~ 9 mm IR 8.4 MP 1.19 mm 360°
Full HD 256 GB 256 GB
Image Varifocal Illumination H.264 Image Focal 4.2MP H.264
Recording SSD SSD
Sensor Lens Up to 30 m Sensor Lens Recording

1-port PoE 11ac 1-port PoE 11ac

GE Input Wave 2 GE Input Wave 2
Cisco Start Catalog Secure
May - July, 2019
Security

Featured Products

Getting Started

What’s New

Feature Story Cisco Meraki Z Cloud Managed Teleworker Gateway

Collaborate
Comprehensive Security in a Single Box
Compute Secure a Site in Minutes, Right Out of the Box

Security
ASA 5500-X
Firepower 2100
AnyConnect
AMP for Endpoints
Umbrella
Meraki MX
Meraki Z
Meraki MV

Connect
Switches
Wireless
Routers

Services Z3C-HW-WW
100 Mbps 50 Mbps
FW VPN
Throughput Throughput

1-port 11ac 100 Mbps

1-port 3-port USB Optional
GE-LAN Wave 2 Internal
GE-WAN GE-LAN for 4G Desk Stand
PoE AP LTE Modem
Cisco Start Catalog Secure
May - July, 2019
Security

Featured Products

Getting Started

What’s New

Feature Story Cisco Firepower 2100 Series

Collaborate
Gain Business Resiliency through Superior Security with
Compute Threat-Focused Next-Generation Firewall

Security
ASA 5500-X
Firepower 2100
AnyConnect
AMP for Endpoints
Umbrella
Meraki MX
Meraki Z
Meraki MV

Connect
Switches
Wireless
Routers FPR2110-NGFW-K9
Services Dual 2 Gbps 2 Gbps 750 Mbps 1,500
Default Optional Optional Optional
Multicore FW + AVC AVC + IPS VPN VPN
AVC NGIPS AMP URL Filtering
CPU Throughput Throughput Throughput Peers

Firepower
12-port 4-port
Device
GE SFP
Manager
Cisco Start Catalog Secure
May - July, 2019
Security

Featured Products

Getting Started

What’s New

Feature Story Cisco Advanced Malware Protection for Endpoints

Collaborate Replace Your Legacy Anti-Virus with Next-Generation Endpoint Security

Compute

Security
ASA 5500-X
Firepower 2100
AnyConnect
AMP for Endpoints
Umbrella
Meraki MX
Meraki Z
Meraki MV

Connect
Switches
Wireless
Routers

Services

FP-AMP-LIC=
Powered 1.6 million 1.5 million 100 TB 13 Billion Linux
24-Hour Linux
by Global Samples Data Web Windows macOS Red Hat Android iOS
Operations CentOS
Talos Sensors per Day per Day Requests Enterprise
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco ASA 5500-X Series

Overview Positioning Map Platform Spec Licenses Bundles

Getting Started ▌Superior Multilayered Protection

What’s New The Cisco ASA 5500-X Series is not only the world’s most widely deployed, With Cisco ASA, you consolidate multiple security layers in a single platform,
enterprise-class stateful firewall, but aloso the industry’s first adaptive, eliminating the cost of buying and managing multiple solutions. This integrated
Feature Story threat-focused Next-Generation FireWall (NGFW). It provides comprehensive approach combines best-in-class security technology with multilayer protec-
protection from known and advanced threats, including protection against tar- tion integrated in a single device that’s less costly than piecemeal security
Collaborate
geted and persistent malware attacks. solutions.
Compute

Security
ASA 5500-X
Firepower 2100
AnyConnect
AMP for Endpoints
Umbrella
Meraki MX
Meraki Z
Meraki MV

Connect
Switches
Wireless
Routers ▌Highlights
⬤⬤Site-to-site and remote access VPN and advanced clustering provide ⬤⬤Cisco Advanced Malware Protection (AMP) provides industry-leading
Services
highly secure, high-performance access and high availability to help ensure breach detection effectiveness, sandboxing, a low total cost of ownership,
business continuity. and superior protection value that helps you discover, understand, and stop
⬤⬤Granular Application Visibility and Control (AVC) supports more than 3,000 malware and emerging threats missed by other security layers.
application-layer and risk-based controls that can launch tailored intrusion ⬤⬤Reputation- and category-based URL Filtering offer comprehensive alerting
prevention system (IPS) threat detection policies to optimize security effec- and control over suspicious web traffic and enforce policies on hundreds of
tiveness. millions of URLs in more than 80 categories.
⬤⬤The industry-leading Cisco Firepower Next-Generation IPS (NGIPS) pro-
vides highly effective threat prevention and full contextual awareness of
users, infrastructure, applications, and content to detect multivector threats
and automate defense response.
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco ASA 5500-X Series

Overview Positioning Map Platform Spec Licenses Bundles

Getting Started

What’s New
ASA 5585-X
Feature Story

Collaborate
ASA 5555-X
Compute

Security
ASA 5545-X
ASA 5500-X
Firepower 2100
AnyConnect ASA 5525-X
AMP for Endpoints
Umbrella
Meraki MX ASA 5516-X
Meraki Z
Meraki MV
ASA 5508-X
Connect
Switches
Wireless ASA 5506-X
Routers Throughput → High
Services
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco ASA 5500-X Series

Overview Positioning Map Platform Spec Licenses Bundles

Getting Started
Throughput AVC Sessions
11n
VPN GE Power Rack
What’s New Product SKU Service (CSE) SKU FW New Wireless Fanless
FW Concurrent Peers Ports Supply Mount
AVC VPN Connections AP
AVC Sessions
Feature Story IPS per Second

ASA5506-FTD-K9 CON-SMBS-ASAK506F 250 Mbps 125 Mbps 100 Mbps 20,000 3,000 50 8 - External ● -*1
Collaborate
ASA5506H-FTD-K9 CON-SMBS-ASAD506H 250 Mbps 125 Mbps 100 Mbps 20,000 3,000 50 4 - External ● -*2
Compute
ASA5508-FTD-K9 CON-SMBS-ASD5508F 450 Mbps 250 Mbps 175 Mbps 100,000 7,000 100 8 - External - 1 RU
Security
ASA 5500-X ASA5516-FTD-K9 CON-SMBS-ASA5K16F 850 Mbps 450 Mbps 250 Mbps 250,000 8,000 300 8 - External - 1 RU
Firepower 2100 *1 Rack Mount Kit (ASA5506-RACK-MNT=) is required. Optional Wall Mount Kit (ASA5506-WALL-MNT=) is available.
AnyConnect *2 Rack Mount Kit (ASA5506-RACK-MNT=) is required. Optional Wall Mount Kit (ASA5506-WALL-MNT=) and DIN Rail Mount Kit (ASA5506H-DIN-MNT=) are available.

AMP for Endpoints

Umbrella
Meraki MX
Meraki Z
Meraki MV

Connect
Switches
Wireless
Routers

Services
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco ASA 5500-X Series

Overview Positioning Map Platform Spec Licenses Bundles

Getting Started ▌ Cisco Firepower Threat Defense Software Image & Licenses

What’s New The Cisco ASA 5500-X Series ships with the Cisco Firepower Threat De- One-year, 3-year, and 5-year subscriptions below are available.
fense software image. It includes Application Visibility and Control (AVC),
Feature Story and optional Next-Generation IPS (NGIPS), Cisco Advanced Malware Pro- ⬤⬤ Next-Generation IPS (NGIPS)
tection (AMP) for Networks, and URL Filtering. Provides highly effective threat prevention and full contextual awareness
Collaborate of users, infrastructure, applications, and content to detect multivector
⬤⬤ Application Visibility and Control (AVC) threats and automate defense response. The NGIPS licenses can be add-
Compute
Supports more than 3,000 application-layer and risk-based controls that ed alone to the base licenses, or bundled with AMP, or with AMP and URL
Security can launch tailored intrusion prevention system (IPS) threat detection pol- licenses.
icies to optimize security effectiveness. ⬤⬤ Cisco Advanced Malware Protection (AMP) for Networks
ASA 5500-X
Firepower 2100 Delivers inline network protection against sophisticated malware and Cis-
co Threat Grid sandboxing. The AMP licenses can be added alone to the
AnyConnect
base licenses, or bundled with NGIPS, or with NGIPS and URL licenses.
AMP for Endpoints ⬤⬤ URL Filtering (URL)
Umbrella Adds the capability to filter more than 280 million top-level domains by risk
Meraki MX level and more than 82 categories. The URL licenses can be added alone
Meraki Z to the base licenses, or bundled with NGIPS, or with NGIPS and AMP li-
Meraki MV censes.

Connect
Switches
Wireless
Routers

Services
▌Cisco Firepower Threat Defense License Comparison
Characters Next-Generation IPS Advanced Malware Protection URL Filtering
Licenses
Included in Product SKU (NGIPS) (AMP) (URL)
NGIPS License T ● - -
AMP License AMP - ● -
URL License URL - - ●
NGIPS & AMP License TM ● ● -
NGIPS & URL License TC ● - ●
NGIPS & AMP & URL License TMC ● ● ●
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco ASA 5500-X Series

Overview Positioning Map Platform Spec Licenses Bundles

Getting Started ▌Cisco Firepower Threat Defense NGIPS Licenses for Cisco ASA 5500-X Series
Product SKU*1
What’s New Compatible Models
1-Year 3-Years 5-Years
Feature Story L-ASA5506T-T-1Y L-ASA5506T-T-3Y - ASA 5506
L-ASA5506HT-T-1Y L-ASA5506HT-T-3Y - ASA 5506H
Collaborate
L-ASA5508T-T-1Y L-ASA5508T-T-3Y L-ASA5508T-T-5Y ASA 5508
Compute L-ASA5516T-T-1Y L-ASA5516T-T-3Y L-ASA5516T-T-5Y ASA 5516
*1 L-ASAxxxxT-T= is required in CCW. See Ordering Guide for details.
Security (The “xxxx” corresponds to the supported models.)
ASA 5500-X
▌Cisco Firepower Threat Defense AMP Licenses for Cisco ASA 5500-X Series
Firepower 2100
Product SKU*1
AnyConnect Compatible Models
1-Year 3-Years 5-Years
AMP for Endpoints L-ASA5506T-AMP-1Y L-ASA5506T-AMP-3Y - ASA 5506
Umbrella L-ASA5506HT-AMP-1Y L-ASA5506HT-AMP-3Y - ASA 5506H
Meraki MX L-ASA5508T-AMP-1Y L-ASA5508T-AMP-3Y L-ASA5508T-AMP-5Y ASA 5508
Meraki Z L-ASA5516T-AMP-1Y L-ASA5516T-AMP-3Y L-ASA5516T-AMP-5Y ASA 5516
Meraki MV *1 L-ASAxxxxT-AMP= is required in CCW. See Ordering Guide for details.
(The “xxxx” corresponds to the supported models.)
Connect
▌Cisco Firepower Threat Defense URL Licenses for Cisco ASA 5500-X Series
Switches
Product SKU*1
Wireless Compatible Models
1-Year 3-Years 5-Years
Routers L-ASA5506T-URL-1Y L-ASA5506T-URL-3Y - ASA 5506

Services L-ASA5506HT-URL-1Y L-ASA5506HT-URL-3Y - ASA 5506H

L-ASA5508T-URL-1Y L-ASA5508T-URL-3Y L-ASA5508T-URL-5Y ASA 5508
L-ASA5516T-URL-1Y L-ASA5516T-URL-3Y L-ASA5516T-URL-5Y ASA 5516
*1 L-ASAxxxxT-URL= is required in CCW. See Ordering Guide for details.
(The “xxxx” corresponds to the supported models.)
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco ASA 5500-X Series

Overview Positioning Map Platform Spec Licenses Bundles

Getting Started ▌Cisco Firepower Threat Defense NGIPS & AMP Licenses for Cisco ASA 5500-X Series
Product SKU*1
What’s New Compatible Models
1-Year 3-Years 5-Years
Feature Story L-ASA5506T-TM-1Y L-ASA5506T-TM-3Y - ASA 5506
L-ASA5506HT-TM-1Y L-ASA5506HT-TM-3Y - ASA 5506H
Collaborate
L-ASA5508T-TM-1Y L-ASA5508T-TM-3Y L-ASA5508T-TM-5Y ASA 5508
Compute L-ASA5516T-TM-1Y L-ASA5516T-TM-3Y L-ASA5516T-TM-5Y ASA 5516
*1 L-ASAxxxxT-TM= is required in CCW. See Ordering Guide for details.
Security (The “xxxx” corresponds to the supported models.)
ASA 5500-X
▌Cisco Firepower Threat Defense NGIPS & URL Licenses for Cisco ASA 5500-X Series
Firepower 2100
Product SKU*1
AnyConnect Compatible Models
1-Year 3-Years 5-Years
AMP for Endpoints L-ASA5506T-TC-1Y L-ASA5506T-TC-3Y - ASA 5506
Umbrella L-ASA5506HT-TC-1Y L-ASA5506HT-TC-3Y - ASA 5506H
Meraki MX L-ASA5508T-TC-1Y L-ASA5508T-TC-3Y L-ASA5508T-TC-5Y ASA 5508
Meraki Z L-ASA5516T-TC-1Y L-ASA5516T-TC-3Y L-ASA5516T-TC-5Y ASA 5516
Meraki MV *1 L-ASAxxxxT-TC= is required in CCW. See Ordering Guide for details.
(The “xxxx” corresponds to the supported models.)
Connect
▌Cisco Firepower Threat Defense NGIPS & AMP & URL Licenses for Cisco ASA 5500-X Series
Switches
Product SKU*1
Wireless Compatible Models
1-Year 3-Years 5-Years
Routers L-ASA5506T-TMC-1Y L-ASA5506T-TMC-3Y - ASA 5506

Services L-ASA5506HT-TMC-1Y L-ASA5506HT-TMC-3Y - ASA 5506H

L-ASA5508T-TMC-1Y L-ASA5508T-TMC-3Y L-ASA5508T-TMC-5Y ASA 5508
L-ASA5516T-TMC-1Y L-ASA5516T-TMC-3Y L-ASA5516T-TMC-5Y ASA 5516
*1 L-ASAxxxxT-TMC= is required in CCW. See Ordering Guide for details.
(The “xxxx” corresponds to the supported models.)
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco ASA 5500-X Series

Overview Positioning Map Platform Spec Licenses Bundles

Getting Started ▌Cisco ASA 5500-X Series Bundles

What’s New 1. Select the bundle SKU for the desired appliance model.
2. Next select the matching software licensing subscription SKU.
Feature Story
ASA5506-FTD-BUN ASA5506H-FTD-BUN ASA5508-FTD-BUN ASA5516-FTD-BUN
Collaborate
ASA 5500-X Series with
Compute Firepower Threat Defense
ASA5506-FTD-K9 ASA5506W-x-FTD-K9 ASA5508-FTD-K9 ASA5516-FTD-K9

Security Firepower Threat Defense

L-ASA5506T-T= L-ASA5506WT-T= L-ASA5508T-T= L-ASA5516T-T=
NGIPS License
ASA 5500-X
Firepower Threat Defense
Firepower 2100 L-ASA5506T-AMP= L-ASA5506WT-AMP= L-ASA5508T-AMP= L-ASA5516T-AMP=
AMP License
AnyConnect
Firepower Threat Defense
AMP for Endpoints URL License
L-ASA5506T-URL= L-ASA5506WT-URL= L-ASA5508T-URL= L-ASA5516T-URL=

Umbrella
Firepower Threat Defense
L-ASA5506T-TM= L-ASA5506WT-TM= L-ASA5508T-TM= L-ASA5516T-TM=
Meraki MX NGIPS & AMP License
Meraki Z Firepower Threat Defense
L-ASA5506T-TC= L-ASA5506WT-TC= L-ASA5508T-TC= L-ASA5516T-TC=
Meraki MV NGIPS & URL License

Firepower Threat Defense

Connect NGIPS & AMP & URL License
L-ASA5506T-TMC= L-ASA5506WT-TMC= L-ASA5508T-TMC= L-ASA5516T-TMC=

Switches
Wireless
Routers

Services
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Firepower 2100 Series

Overview Positioning Map Platform Spec Licenses

Getting Started ▌Business Resiliency through Superior Threat Defense

What’s New The Cisco Firepower 2100 Series is the industry’s first fully integrated, The Firepower 2100 NGFWs sustain its throughput performance as threat
threat-focused Next-Generation FireWall (NGFW) with unified management. services are added. They do this by uniquely incorporating an innovative dual
Feature Story It delivers business resiliency through superior security with sustained per- multi-core CPU architecture that optimizes firewall, cryptographic, and threat
formance-provides sustained network performance when threat inspection inspection functions simultaneously. They won’t become a network bottleneck
Collaborate
features are activated to keep your business running securely. And It is now or lose effectiveness like competitors when threat inspection is
Compute simpler to manage for improved IT efficiency and a lower total cost of own- turned on. Now, achieving security doesn’t come at the expense of network
ership. performance.
Security
ASA 5500-X
Firepower 2100
AnyConnect
AMP for Endpoints
Umbrella
Meraki MX
Meraki Z
Meraki MV

Connect
Switches
Wireless
Routers

Services
▌Highlights
⬤⬤Stopmore threats: Contain known and unknown malware with leading Cis-
co AMP and sandboxing.
⬤⬤Reduce complexity: Get unified management and automated threat cor-
⬤⬤Gain more insight: Gain superior visibility into your environment with Cisco relation across tightly integrated security functions, including application
Firepower NGIPS. Automated risk rankings and impact flags identify priori- firewalling, NGIPS, and AMP.
ties for your team.
⬤⬤Get more from your network: Enhance security, and take advantage of your
⬤⬤Detect earlier, act faster: The Cisco Annual Security Report identifies a existing investments, with optional integration of other Cisco and third-par-
100-day median time from infection to detection, across enterprises. Cisco ty networking and security solutions.
reduces this time to less than a day.
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Firepower 2100 Series

Overview Positioning Map Platform Spec Licenses

Getting Started

What’s New
Firepower 9300
Feature Story

Collaborate

Compute Firepower 4100 Series

Security
ASA 5500-X
Firepower 2100
Firepower 2140
AnyConnect
AMP for Endpoints
Umbrella
Meraki MX Firepower 2130
Meraki Z
Meraki MV

Connect
Firepower 2120
Switches
Wireless
Routers

Services Firepower 2110

Throughput → High
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Firepower 2100 Series

Overview Positioning Map Platform Spec Licenses

Getting Started ▌Cisco Firepower 2110 Firepower Threat Defense (FTD) Software Image

What’s New Throughput AVC Sessions Ports

VPN Power Rack
Product SKU*1
Service (CSE) SKU FW New
Feature Story FW
AVC VPN
Concurrent
Connections
Peers
GE SFP
Supply Mount
AVC Sessions
IPS per Second
Collaborate
FPR2110-NGFW-K9 - 2 Gbps 2 Gbps 250 Mbps 1,000,000 12,000 1,500 12 4 Internal 1 RU
Compute
*1 FPR2110-BUN is recommended in CCW.

Security
ASA 5500-X ▌Cisco Firepower 2110 Adaptive Security Appliance (ASA) Software Image

Firepower 2100 Throughput FW Sessions Ports

VPN Power Rack
AnyConnect Product SKU*1 Service (CSE) SKU FW New
Concurrent Peers Supply Mount
AMP for Endpoints FW AVC VPN Connections GE SFP
Sessions
IPS per Second
Umbrella
FPR2110-ASA-K9 - 3 Gbps - 500 Mbps 1,000,000 18,000 1,500 12 4 Internal 1 RU
Meraki MX
*1 FPR2110-BUN is recommended in CCW.
Meraki Z
Meraki MV

Connect
Switches
Wireless
Routers

Services
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Firepower 2100 Series

Overview Positioning Map Platform Spec Licenses

Getting Started ▌Cisco Firepower Threat Defense NGIPS Licenses for Cisco Firepower 2110
Product SKU*1
What’s New Compatible Models
1-Year 3-Years 5-Years

Feature Story L-FPR2110T-T-1Y L-FPR2110T-T-3Y L-FPR2110T-T-5Y Firepower 2110 FTD

*1 L-FPR2110T-T= is required, FPR2110-BUN is recommended, in CCW. See Ordering Guide for details.
Collaborate
▌Cisco Firepower Threat Defense AMP Licenses for Cisco Firepower 2110
Compute
Product SKU*1
Compatible Models
Security 1-Year 3-Years 5-Years

ASA 5500-X L-FPR2110T-AMP-1Y L-FPR2110T-AMP-3Y L-FPR2110T-AMP-5Y Firepower 2110 FTD

*1 L-FPR2110T-T= is required, FPR2110-BUN is recommended, in CCW. See Ordering Guide for details.
Firepower 2100
AnyConnect
▌Cisco Firepower Threat Defense URL Licenses for Cisco Firepower 2110
AMP for Endpoints
Product SKU*1
Umbrella Compatible Models
1-Year 3-Years 5-Years
Meraki MX L-FPR2110T-URL-1Y L-FPR2110T-URL-3Y L-FPR2110T-URL-5Y Firepower 2110 FTD
*1 L-FPR2110T-T= is required, FPR2110-BUN is recommended, in CCW. See Ordering Guide for details.
Meraki Z
Meraki MV
▌Cisco Firepower Threat Defense NGIPS & AMP Licenses for Cisco Firepower 2110
Connect Product SKU*1
Compatible Models
Switches 1-Year 3-Years 5-Years
L-FPR2110T-TM-1Y L-FPR2110T-TM-3Y L-FPR2110T-TM-5Y Firepower 2110 FTD
Wireless
*1 L-FPR2110T-T= is required, FPR2110-BUN is recommended, in CCW. See Ordering Guide for details.
Routers

Services ▌Cisco Firepower Threat Defense NGIPS & URL Licenses for Cisco Firepower 2110
Product SKU*1
Compatible Models
1-Year 3-Years 5-Years
L-FPR2110T-TC-1Y L-FPR2110T-TC-3Y L-FPR2110T-TC-5Y Firepower 2110 FTD
*1 L-FPR2110T-T= is required, FPR2110-BUN is recommended, in CCW. See Ordering Guide for details.

▌Cisco Firepower Threat Defense NGIPS & AMP & URL Licenses for Cisco Firepower 2110
Product SKU*1
Compatible Models
1-Year 3-Years 5-Years
L-FPR2110T-TMC-1Y L-FPR2110T-TMC-3Y L-FPR2110T-TMC-5Y Firepower 2110 FTD
*1 L-FPR2110T-T= is required, FPR2110-BUN is recommended, in CCW. See Ordering Guide for details.
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco AnyConnect Secure Mobility Client

Overview Features Licenses

Getting Started ▌Easy to Use, Highly Secure, Much More than a VPN
What’s New The industry-leading Cisco AnyConnect Secure Mobility Client is a modu- Cisco AnyConnect clients are available across a broad set of platforms, in-
lar endpoint software product. It not only provides VPN access through Se- cluding Windows, macOS, Linux, iOS, Android, Windows Phone/Mobile,
Feature Story cure Sockets Layer (SSL) and IPsec IKEv2 but also offers enhanced security BlackBerry, and ChromeOS.
through various built-in modules. These modules provide services such as
Collaborate
compliance through the VPN with Cisco ASA or through wired, wireless, and
Compute VPN with Cisco Identity Services Engine (ISE), web security along side Cisco
Cloud Web Security (CWS), network visibility into endpoint flows within Cisco
Security Stealthwatch, or off-network roaming protection with Cisco Umbrella.
ASA 5500-X
Firepower 2100
AnyConnect
AMP for Endpoints
Umbrella Basic Advanced Endpoint Inspection Enterprise Threat Network CCNS
VPN VPN Compliance Services Access Protection Visibility Plugin
Meraki MX
Meraki Z
Meraki MV AnyConnect Features
Connect
Switches
Wireless
Routers

Services
Integration with Other Cisco Solutions

ASA ISR/RV ASR/CSR ISE CWS/WSA Catalyst/WC NetFlow Collectors AMP Umbrella
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco AnyConnect Secure Mobility Client

Overview Features Licenses

Getting Started Feature Description

What’s New Unified Endpoint Compliance The Cisco AnyConnect ISE Posture Module in Cisco ISE deployments provides unified endpoint posture checks and automated remediation
across wired, wireless, and VPN environments. This module serves as the main source of endpoint posture checking for OS levels, latest an-
Feature Story tivirus/spyware/malware updates, application and hardware inventory and other endpoint checks to determine compliance state and strength-
en endpoint security. For VPN only environments, the Cisco ASA provides endpoint posture using Cisco AnyConect Hostscan Module.
Collaborate
Highly Secure Network Access The Cisco AnyConnect Network Access Manager provides superior connectivity features. Administrators can control which networks or re-
Compute sources for endpoints to connect. It provides an IEEE 802.1X supplicant that can be provisioned as part of authentication, authorization, and
accounting (AAA) capabilities along with some unique encryption technologies such as MACsec IEEE 802.1AE.
Security Web Security A built-in Cisco AnyConnect module implements web security either through the on-premise Cisco Web Security Appliance (WSA) or the
ASA 5500-X cloud-based Cisco Cloud Web Security (CWS) offering. Combining web security with VPN access, administrators can provide comprehensive,
highly secure mobility to all end users, which is vital for bring-your-own-device (BYOD) deployments. Enterprises have a choice of deployments
Firepower 2100 to defend the network against web malware and to control and safeguard web usage.
AnyConnect
Network Visibility The Cisco AnyConnect Network Visibility Module on Windows, macOS, Linux, and Samsung Knox-enabled devices gives administrators the
AMP for Endpoints ability to monitor endpoint application usage to uncover potential behavior anomalies and to make more informed network design decisions.
Usage data can be shared with NetFlow analysis tools such as Cisco Stealthwatch.
Umbrella
Meraki MX Off-Network Protection Cisco Umbrella Roaming is a cloud-delivered security service that protects devices when they are off the corporate network. Whether users
(DNS-Layer Security) turn off the VPN or forget to turn it on, Umbrella Roaming enforces security at the DNS layer to protect against malware, phishing, and com-
Meraki Z mand-and-control callbacks over any port or protocol.
Meraki MV Mobile Device Support Administrators need to support end-user productivity by providing personal mobile devices with remote access to the company network. Cis-
co AnyConnect services can be deployed on the most popular devices used by today’s diverse workforce. Highly secure remote access can
Connect either be device-based or through select per-application VPN, which eliminates unapproved applications from accessing confidential business
Switches resources further reducing malware intrusion risks and bandwidth costs for remote access.

Wireless Servers and Platforms Cisco AnyConnect services are used in conjunction with numerous Cisco head server platforms, including but not limited to the Cisco ASA
(physical and virtual), Cisco Firepower Next-Generation Firewalls (physical and virtual/ASA and FTD operating systems), Cisco Identity Services
Routers Engine (ISE), Cisco Aggregation Services Routers (ASR), Cisco Cloud Web Security (CWS), and Cisco IOS software on Cisco ISR. Headend
termination devices and cloud services, along with the associated service costs and support contracts, are purchased separately.
Services
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco AnyConnect Secure Mobility Client

Overview Features Licenses

Getting Started ▌ Cisco AnyConnect Licenses ▌Cisco AnyConnect Plus & Apex License Comparison

What’s New The Cisco AnyConnect offers simplified licensing to meet the needs of the Plus Apex
broad enterprise IT community as it adapts to growing end-user mobility Device or System VPN (Including Cisco Phone VPN) ● ●
Feature Story demands. The current AnyConnect 4.x collapses the formerly complex Any- Third-Party IPsec IKEv2 Remote Access VPN Clients
● ●
Connect licensing model into two simple tiers: the first is AnyConnect Plus (Non-AnyConnect Client)
Collaborate and the second is AnyConnect Apex. Per-Application VPN ● ●
Cloud Web Security and Web Security Appliance ● ●
Compute ⬤⬤ Cisco AnyConnect Plus License
Cisco Umbrella Roaming *1
● ●
Security Includes basic VPN services such as device and per-application VPN (in-
Network Access Manager ● ●
cluding third-party IKEv2 remote access VPN headend support), trusted
ASA 5500-X AMP for Endpoints Enabler *2
● ●
network detection, basic device context collection, and Federal Informa-
Firepower 2100 tion Processing Standards (FIPS) compliance. AnyConnect Plus also in- Network Visibility Module - ●
AnyConnect cludes other non-VPN services such as the AnyConnect Network Access Unified Endpoint Compliance and Remediation (Posture) *3
- ●

AMP for Endpoints Manager 802.1X supplicant, the Cisco Cloud Web Security (CWS) mod- Suite B or Next-Generation Encryption
- ●
ule, and the Cisco Umbrella Roaming module. Existing AnyConnect cus- (Including Third-Party IPsec IKEv2 Remote VPN Clients)
Umbrella
tomers should think of AnyConnect Plus as similar to the previous Any- Clientless (Browser-based) VPN Connectivity - ●
Meraki MX Connect Essentials. ASA Multicontext-mode Remote Access - ●
Meraki Z SAML authentication*4 - ●
Meraki MV ⬤⬤ Cisco AnyConnect Apex License *1 Cisco Umbrella Roaming License is required.
Includes more advanced services such as endpoint posture checks (Host- *2 Cisco AMP for Endpoints License is required.
Connect scan through ASA VPN, or ISE Posture through the Cisco Identity Services *3 Cisco ISE Apex License is required.
*4 Cisco ASA 9.7.1 or later is required.
Switches Engine), network visibility, next-generation VPN encryption (including
Wireless Suite B), and clientless remote access VPN as well as all the capabilities
of AnyConnect Plus. Existing AnyConnect customers should think of Any-
Routers
Connect Apex as similar to previous AnyConnect Premium and Premium
Services Shared Licenses.

AnyConnect Plus and Apex licenses offer a set of features and deployment
flexibility to meet a wide range of your enterprise’s requirements. For enter-
prises that want only AnyConnect for remote access use cases, there is also
the Cisco AnyConnect VPN Only License.
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco AnyConnect Secure Mobility Client

Overview Features Licenses

Getting Started ▌Cisco AnyConnect Plus Licenses

Product SKU*1 *2 Product SKU*1 *2
What’s New User Range Users
1-Year 3-Years 5-Years Perpetual
Feature Story L-AC-PLS-1Y-S1 L-AC-PLS-3Y-S1 L-AC-PLS-5Y-S1 25 to 99 AC-PLS-P-25-S 25
L-AC-PLS-1Y-S2 L-AC-PLS-3Y-S2 L-AC-PLS-5Y-S2 100 to 249 AC-PLS-P-50-S 50
Collaborate
L-AC-PLS-1Y-S3 L-AC-PLS-3Y-S3 L-AC-PLS-5Y-S3 250 to 499 AC-PLS-P-100-S 100
Compute *1 See Ordering Guide for a full list of SKUs supporting over 500 users. AC-PLS-P-250-S 250
*2 L-AC-PLS-LIC= is required in CCW. See Ordering Guide for details.
AC-PLS-P-500-S 500
Security
**1 See Ordering Guide for a full list of SKUs supporting over 500 users.
ASA 5500-X *2 L-AC-PLS-P-G is required in CCW. See Ordering Guide for details.
Firepower 2100
▌Cisco AnyConnect Apex Licenses
AnyConnect
Product SKU*1 *2
AMP for Endpoints 1-Year 3-Years 5-Years
User Range

Umbrella L-AC-APX-1Y-S1 L-AC-APX-3Y-S1 L-AC-APX-5Y-S1 25 to 99

Meraki MX L-AC-APX-1Y-S2 L-AC-APX-3Y-S2 L-AC-APX -5Y-S2 100 to 249
Meraki Z L-AC-APX-1Y-S3 L-AC-APX-3Y-S3 L-AC-APX -5Y-S3 250 to 499
Meraki MV *1 See Ordering Guide for a full list of SKUs supporting over 500 users.
*2 L-AC-APX-LIC= is required in CCW. See Ordering Guide for details.
Connect
▌Cisco AnyConnect VPN Only Licenses
Switches
Product SKU*1 *2 Simultaneous
Wireless Connections
Perpetual
Routers L-AC-VPNO-25= 25

Services L-AC-VPNO-50= 50
L-AC-VPNO-100= 100
L-AC-VPNO-250= 250
L-AC-VPNO-500= 500
*1 See Ordering Guide for a full list of SKUs supporting over 500 users.
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Advanced Malware Protection for Endpoints

Overview Licenses AMP Everwhere

Getting Started ▌Cloud-Managed Next-Generation Endpoint Security

What’s New The Cisco Advanced Malware Protection (AMP) for Endpoints is a cloud-man-
aged endpoint security solution that provides the visibility, context, and control
Feature Story to prevent breaches, but also rapidly detect, contain, and remediate threats if
they evade front-line defenses and get inside, all cost-effectively and without
Collaborate
affecting operational efficiency.
Compute
⬤⬤Prevent:Strengthen defenses using the best global threat intelligence and
Security block malware in real time
ASA 5500-X ⬤⬤Detect: Continuously monitor and record all file activity to quickly detect
stealthy malware
Firepower 2100
⬤⬤Respond: Accelerate investigations and automatically remediate malware
AnyConnect
across PCs, Macs, Linux, servers and mobile devices (Android and iOS)
AMP for Endpoints
Managed through an easy-to-use, web-based console
Umbrella ▌Threat Intelligence and Dynamic Malware Analysis
Meraki MX
The Cisco AMP is built on an extensive collection of real-time threat intelli-
Meraki Z gence and dynamic malware analytics supplied by the Cisco Talos Security
Meraki MV Intelligence Group, and Cisco Threat Grid intelligence feeds.
Analysis is Done
Organizations benefit from:
in the Cloud
Connect
Switches ⬤⬤1.5 million incoming malware samples per day
Powered by
Wireless ⬤⬤1.6 million global sensors
⬤⬤100 terabytes of data per day
Routers
⬤⬤13 billion web requests
Services ⬤⬤Team of engineers, technicians, and researchers
⬤⬤24-hour
Visibility
operations PC Mac

Cisco AMP for Endpoints is managed through an easy-to-use, web-based Context

console. It is deployed through AMP’s lightweight endpoint connector, with no
performance impact on users. Analysis is done in the cloud, not on the end- Control
point. The solution is offered as a subscription on endpoints, including cover- Linux Mobile

age for Windows, Macs, Linux, servers and mobile devices (Android and iOS). Broad Endpoint Coverage:
Lightweight
AMP for Endpoints Connectors
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Advanced Malware Protection for Endpoints

Overview Licenses AMP Everwhere

Getting Started ▌Cisco AMP for Endpoints Connector Licenses ▌Cisco AMP Virtual Private Cloud Appliance
Product SKU *1 *2
Connector Product SKU*1 Max Connectors
What’s New
1-Year 3-Years 5-Years Range FP-AMP-CLOUD-SW 10,000
Feature Story FP-AMP-1Y-S1 FP-AMP-3Y-S1 FP-AMP-5Y-S1 50 ~ 99 *1 FP-AMP-CLOUD-BUN is recommended in CCW. See Ordering Guide for details.

FP-AMP-1Y-S2 FP-AMP-3Y-S2 FP-AMP-5Y-S2 100 ~ 499

Collaborate
*1 See Ordering Guide for a full list of SKUs supporting over 500 users. ▌Cisco AMP Virtual Private Cloud Appliance Licenses
Compute *2 FP-AMP-LIC= is required in CCW. See Ordering Guide for details.
Product SKU*1 *2
1-Year 3-Years 5-Years
Security
FP-AMPCLOUD-1Y FP-AMPCLOUD-3Y FP-AMPCLOUD-5Y
ASA 5500-X
*1 FP-AMP-CLOUD= is required, FP-AMP-CLOUD-BUN is recommended, in CCW.
Firepower 2100 See Ordering Guide for details.
AnyConnect
AMP for Endpoints
Umbrella
Software Requirements
Meraki MX
Meraki Z
Connector Supported OS
Meraki MV
⬤⬤Windows 7
Connect ⬤⬤Windows 8 and 8.1
Switches ⬤⬤Windows 10
Cisco AMP Windows Connector
Wireless ⬤⬤Windows Server 2008 R2
⬤⬤Windows Server 2012 and 2012 R2
Routers
⬤⬤Windows Server 2016
Services
⬤⬤OSX 10.11
Cisco AMP Mac Connector
⬤⬤MacOS 10.12 and 10.13

⬤⬤Linux Red Hat Enterprise

6.x and 7.x
Cisco AMP Linux Connector
⬤⬤Linux CentOS
6.x and 7.x

⬤⬤Android 2.1 (Éclair) ~ 6.0 (Marshmallow)

Cisco AMP Mobile
⬤⬤iOS 11 ~
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Advanced Malware Protection for Endpoints

Overview Licenses AMP Everwhere

Getting Started ▌Find the Best AMP Deployment for You

What’s New The Cisco Advanced Malware Protection (AMP) is subscription-based,

managed through a web-based management console, and deployed on a
Feature Story variety of platforms.

Collaborate

Compute

Security Remote Endpoints

AMP
ASA 5500-X Threat Intelligence AMP for Endpoints
Cloud
Firepower 2100
AnyConnect
AMP for Endpoints
Umbrella
Threat Grid
Meraki MX Malware Analysis
Meraki Z AMP on + AMP on Private Cloud
Firepower NGIPS Threat Intelligence Engine
Meraki MV (AMP for Networks)
AMP on AMP on
Connect Cisco NGFW En d WSA and ESA
ints p oin
(AMP for Networks) E n dp o ts
Switches AMP for Endpoints
Wireless CWS/CTA
Routers AMP on Meraki AMP on CWS
and Hosted Email
Services
Windows macOS CentOS, Virtual Android iOS
Linux, etc.
AMP on ISR
AMP for Endpoints can be
launched from AnyConnect

Dat a
dge
or k E

C ent
N et w

er
Cisco Start Catalog Secure - Security
Cisco Meraki and Umbrella
May - July, 2019
Cisco Umbrella Together At Last Promotion

Overview Features Licenses Why Umbrella? 14-Day Trial

Getting Started ▌The Fastest and Easiest Way to Protect All of Your Users in Minutes
What’s New The Cisco Umbrella is the industry’s first Secure Internet Gateway (SIG) that By analyzing and learning from internet activity patterns, Umbrella automatical-
provides the first line of defense against threats on the internet wherever us- ly uncovers attacker infrastructure staged for attacks, and proactively blocks
Feature Story ers go. Umbrella delivers complete visibility into internet activity across all requests to malicious destinations before a connection is even established
locations, devices, and users, and blocks threats before they ever reach your — without adding any latency for users.
Collaborate
network or endpoints. As a cloud-delivered, open platform, Umbrella inte- With Umbrella, you can stop phishing and malware infections earlier, identify
Compute grates easily with your existing security stack and delivers live threat intelli- already infected devices faster, and prevent data exfiltration.
gence about current and emerging threats.
Security
ASA 5500-X
Firepower 2100
AnyConnect
AMP for Endpoints Malware
C2 Callbacks
Umbrella
Umbrella
Phishing
Meraki MX
Meraki Z
Meraki MV

Connect
Switches
Wireless First Line of Defense
Routers

Services It all starts with DNS

208.67.222.222 + 208.67.220.220
2620:119:35::35 + 2620:119:53::53

⬤⬤Precedes file execution and IP connection

HQ BRANCH ROAMING ⬤⬤Used by all devices
⬤⬤Port agnostic
Cisco Start Catalog Secure - Security
Cisco Meraki and Umbrella
May - July, 2019
Cisco Umbrella Together At Last Promotion

Overview Features Licenses Why Umbrella? 14-Day Trial

Getting Started
Package Roaming Branch WLAN Professional Insights Platform
What’s New
AnyConnect RV 340 Wireless Small Mid-sized Advanced
Best for
Feature Story NGFW ISR 1K/4K AP/Controllers Companies Companies Security Teams
100 % Cloud: No Hardware to Install or Software to
Collaborate ● ● ● ● ● ●
Maintain
100 % Uptime: Resolves 80 B+ Requests Daily with No
Compute Performance
Added Latency
● ● ● ● ● ●

7 M+ Unique Malicious Destinations Enforced Concur-

Security rently across 25 Data Centers
● ● ● ● ● ●

ASA 5500-X Add a New Layer of Predictive Security for Any Device,
●*1 ●*3 ●*3 ● ● ●
Anywhere
Firepower 2100
Prevent Malware, Phishing, and C2 Callbacks over Any
AnyConnect Protection ● ● ● ● ● ●
Port
AMP for Endpoints Enforce Acceptable Use Policies Using 80+ Content
- ● ● ● ● ●
Categories
Umbrella
Block Malicious Domain Requests & IP Responses at
● ● ● ● ● ●
Meraki MX the DNS-Layer
Enforcement
Meraki Z Block Malicious URL Paths & Direct IP Connections at
- - - - ● ●
the IP-Layer
Meraki MV Real-Time, Enterprise-Wide Activity Search & Sched-
● ● ● ● ● ●
uled Reports
Connect Identify Targeted Attacks by Comparing Local vs. Glob-
Visibility - - - - ● ●
Switches al Activity
Identify Cloud & IoT Usage Risks by Reporting on 1800+
Wireless - - - ●*6 ● ●
Services (App Discovery)
Routers Custom Block/Allow Lists, Built-in Block Pages, and By-
●*2 ● ● ● ● ●
pass Options
Services Enforcement & Visibility per Internal Network or AD
Management - ●*4 ●*5 - ● ●
User/Group
Retain Logs Forever by Integrating with Your Amazon
- - - - ● ●
S3 Bucket
API-based Integrations to Enforce & Manage 3rd-party
Platform - - - - - ●
Block Lists
Package
Investigate Console: Threat Intelligence on All Domains,
Exclusive - - - - - ●
IPs, & File Hashes
*1 Off-network only. *2 Only has allow list and 1 built-in block page. *3 On-network only.
*4 Only per internal network (no Active Directory). *5 Per SSID, access point, AP group, and user group (no Active Directory).
*6 Umbrella App Discovery for Professional License is required.
Cisco Start Catalog Secure - Security
Cisco Meraki and Umbrella
May - July, 2019
Cisco Umbrella Together At Last Promotion

Overview Features Licenses Why Umbrella? 14-Day Trial

Getting Started ▌Cisco Umbrella Roaming License ▌Cisco Umbrella Professional Licenses
Product SKU*1
Description Product SKU*1 Description
What’s New
UMB-ROAM Umbrella Roaming per User License UMB-PROFESSIONAL Umbrella Professional per User License (10 ~ Users)
Feature Story *1 UMBRELLA-SUB is required in CCW. See Ordering Guide for details. UMB-APP-DISC Umbrella App Discovery for Professional License
*1 UMBRELLA-SUB is required in CCW. See Ordering Guide for details.
Collaborate
▌Cisco Umbrella Branch Licenses
Compute Product SKU Description ▌Cisco Umbrella Insights License
UMB-BRAN-RV Umbrella Branch License for Cisco RV 340 Series Product SKU*1 Description
Security
UMB-BRAN-1100 Umbrella Branch License for Cisco ISR 1100 Series UMB-INSIGHTS-K9 Umbrella Insights per User License (10 ~ Users)
ASA 5500-X
UMB-BRAN-4221 Umbrella Branch License for Cisco ISR 4321 *1 UMBRELLA-SUB is required in CCW. See Ordering Guide for details.
Firepower 2100
UMB-BRAN-4321 Umbrella Branch License for Cisco ISR 4321
AnyConnect
UMB-BRAN-4331 Umbrella Branch License for Cisco ISR 4331 ▌Cisco Umbrella Platform License
AMP for Endpoints UMB-BRAN-4351 Umbrella Branch License for Cisco ISR 4351 Product SKU*1 Description
Umbrella UMB-BRAN-4431 Umbrella Branch License for Cisco ISR 4431 UMB-PLATFORM-K9 Umbrella Platform per User License (100 ~ Users)
Meraki MX UMB-BRAN-4451 Umbrella Branch License for Cisco ISR 4451 *1 UMBRELLA-SUB is required in CCW. See Ordering Guide for details.
Meraki Z *1 UMBRELLA-SUB is required in CCW. See Ordering Guide for details.
Meraki MV
▌Cisco Umbrella WLAN License
Connect
Product SKU*1 Description
Switches
UMB-WLAN Umbrella WLAN per Access Point License (5 ~ APs)
Wireless *1 UMBRELLA-SUB is required in CCW. See Ordering Guide for details.
Routers

Services
Cisco Start Catalog Secure - Security
Cisco Meraki and Umbrella
May - July, 2019
Cisco Umbrella Together At Last Promotion

Overview Features Licenses Why Umbrella? 14-Day Trial

Getting Started ▌Enterprise-wide Deployment in Minutes

What’s New Cisco Umbrella is the fastest and easiest way to protect all of your users
in minutes. Because it is delivered from the cloud, there is no hardware to
Feature Story install or software to manually update.
You can provision all on-network devices — including BYOD and IoT — in
Collaborate minutes and use your existing Cisco footprint — RV 340, ISR 1100/4000,
Mobility Express, Wireless Controller 3540, and Meraki MR — to quickly Umbrella DNS
Compute provision thousands of network egresses and roaming laptops.
Additionally, with the Cisco Security Connector app, you can use the Um- 208.67.222.222 + 208.67.220.220
Security 2620:119:35::35 + 2620:119:53::53
brella extension to protect supervised iOS 11.3 or higher devices.
ASA 5500-X
Firepower 2100
AnyConnect
AMP for Endpoints How Easy Is It to Deploy Umbrella?
Umbrella
Meraki MX
Meraki Z
Meraki MV
1 2 3
Sign Up Point DNS Done
Connect
Switches
Wireless
Routers
Any Any Any
Services Routers DHCP Servers Firewalls
Cisco Start Catalog Secure - Security
Cisco Meraki and Umbrella
May - July, 2019
Cisco Umbrella Together At Last Promotion

Overview Features Licenses Why Umbrella? 14-Day Trial

Getting Started ▌Off-Network Security without VPN

What’s New Cisco Umbrella protects employees when they are off the VPN by blocking
malicious domain requests and IP responses as DNS queries are resolved.
Feature Story By enforcing security at the DNS-layer, connections are never established
and files are never downloaded. Malware will not infect laptops and com-
Collaborate mand & control (C2) callbacks or phishing will not exfiltrate data over any Internet
port. Plus, you gain real-time visibility of infected laptops with C2 activity.
Compute

Security
ASA 5500-X
Firepower 2100
Umbrella
AnyConnect
AMP for Endpoints
Umbrella
Meraki MX
VPN ON VPN OFF
Meraki Z
Umbrella Acticve
Meraki MV

Connect
Switches
Wireless The Way Your Employees Work Has Changed
Routers Roaming Devices
82 % of your workers admit to not always using the VPN*1 Windows/macOS (Umbrella Roaming Client)
Services Employees are using more cloud apps for work and leveraging their Chromebook (Umbrella Chromebook Client)
work laptops for personal use—the reality is that not every connection iOS (Security Connector)
goes through the VPN. Your network extends beyond the perimeter,
and your security must too.

49 % of your workforce is mobile and under defended*2

Zero-day malware spikes at night and on weekends when we’re
roaming and attackers know we’re vulnerable. In fact, 22 % of ma-
licious email links are clicked when roaming.*3 While security may
never stop 100 % of the threats, it must work 100 % of the time.

*1 cs.co/IDG-survey *2 cs.co/sans-survey *3 cs.co/proofpoint-report

Cisco Start Catalog Secure - Security
Cisco Meraki and Umbrella
May - July, 2019
Cisco Umbrella Together At Last Promotion

Overview Features Licenses Why Umbrella? 14-Day Trial

Getting Started ▌Manage Fexible, Location-aware Policies

What’s New Cisco Umbrella’s 80+ content categories cover millions of domains (and bil-
lions of web pages) to give you control over which sites can be accessed by
Feature Story users on your network and by roaming users. The easy-to-use, cloud-de-
livered administration console enables you to quickly set up, manage, and
Collaborate test different acceptable use policies per network, group, user, device, or IP
address, giving you greater control of your organization’s internet usage. You
Compute even have the flexibility to set up different policies depending on whether
users are on or off the
Security
corporate network.
ASA 5500-X Umbrella enables you to customize our category-based filtering to meet
Firepower 2100 each network’s specific needs, particularly to help you meet compliance
AnyConnect requirements. Quickly create exceptions to allow or block specific domains,
regardless of whether it is in a category that is allowed or blocked. Our 80+
AMP for Endpoints
content categories empower you to enforce acceptable
Umbrella web use to comply with internal policies or external regulations such as
Meraki MX CIPA. We are also a member of the Internet Watch Foundation (IWF), en-
Meraki Z abling you to block their list of child sexual abuse sites.

Meraki MV

Connect
Switches
Wireless
Routers

Services
Cisco Start Catalog Secure - Security
Cisco Meraki and Umbrella
May - July, 2019
Cisco Umbrella Together At Last Promotion

Overview Features Licenses Why Umbrella? 14-Day Trial

Getting Started ▌Expose Shadow IT and Manage Cloud Adoption

What’s New Cloud usage is continuing to expand as end users and departments become The App Discovery report of Cisco Umbrella provides full visibility and risk
more comfortable acquiring cloud services. The typical organization is only information to manage cloud adoption in a secure and organized fashion.
Feature Story aware of a small fraction of its overall cloud activity. The lack of a coordinat- Once decisions are made about specific apps, you can block access to
ed cloud enablement strategy leads to a broad set of productivity, expense, applications that are not approved to reduce the risk of sensitive data loss,
Collaborate security, and support issues. account compromise and malware infection.

Compute

Security
ASA 5500-X
Firepower 2100
AnyConnect
AMP for Endpoints
Umbrella
Meraki MX
Meraki Z
Meraki MV

Connect
Switches
Wireless
Routers The App Discovery dashboard provides an overview of the number of app requests by date The Apps Grid report provides key details on all applications that have been discovered
and risk level to show patterns and changes over time. The most recent set of discovered including the app and vendor name, category, weighted risk level, number of users, number
Services and unreviewed apps are highlighted for easy access and a chart showing the number of of requests and current status. This report can be segmented and filtered into groups for
apps in each major category is provided with a breakdown by risk level. These summary deeper analysis by category, risk level or number of users to provide views that assist with
charts allow point and click access to more detailed information on the category or individ- the organization and management of cloud adoption.
ual application to simplify common administrator tasks.
Cisco Start Catalog Secure - Security
Cisco Meraki and Umbrella
May - July, 2019
Cisco Umbrella Together At Last Promotion

Overview Features Licenses Why Umbrella? 14-Day Trial

Getting Started ▌Simple and Effective Protection for Corporate and Guest Wi-Fi

What’s New The Cisco Umbrella Wireless LAN (WLAN) package provides the first line of Umbrella WLAN is the simplest way to protect any device accessing your
defense against threats for Wi-Fi connections. It offers the simplest, fastest wireless network — there’s no action required from end users for protec-
Feature Story way to protect every user on your Wi-Fi network. tion. Whether it’s a corporate device, employee-owned, or customer-owned
Umbrella WLAN protects employees and guests who are accessing the in- device, Umbrella WLAN adds an easy, but very effective layer of protection.
Collaborate ternet from wireless access points. By enforcing security at the DNSlayer, Umbrella WLAN works across a broad portfolio of wireless controllers and
connections to unsafe sites are never established and malicious files access points. Built-in integrations with the Cisco WAP125/WAP581, Cisco
Compute are never downloaded. This prevents malware from infecting devices and Aironet Access Points with Mobility Express, Cisco Wireless Controllers,
stops attacks from exfiltrating data over any port and protocol. Umbrella and Cisco Meraki MR Cloud Managed Access Points provides additional
Security
WLAN also brings a simple-to-use content filtering solution to your Wi-Fi ease of use and granularity.
ASA 5500-X network. It stops guests and corporate users from accessing inappropriate
Firepower 2100 content, based on company policy. This keeps users happy with safe inter-
AnyConnect net access, while also protecting your business.

AMP for Endpoints

Umbrella
Umbrella
Meraki MX
Meraki Z
Meraki MV
Mobility Express
Connect
Switches
Wireless
Routers

Services
Wireless Controller
Meraki MR
or
Aironet with Mobility Express

You can deploy Umbrella in minutes across your access points.

Simply input the API key and secret from Umbrella into the AP’s GUI.

Meraki MR Aironet WAP

Cisco Start Catalog Secure - Security
Cisco Meraki and Umbrella
May - July, 2019
Cisco Umbrella Together At Last Promotion

Overview Features Licenses Why Umbrella? 14-Day Trial

Getting Started ▌The Simplest and Fastest Way to Secure DIA from Branch

What’s New The traditional WAN was built to give branch offices and roaming users ac-
cess to IT resources within private data centers. But today, as networks be-
Feature Story come more decentralized and users connect directly to SaaS applications,
backhauling traffic to apply security policies just isn’t efficient. And that’s Data Center
Collaborate not the only problem. Backhauling internet-bound traffic is expensive, and Private Cloud
it adds latency. So users get frustrated — and thwarted — in their attempt to SaaS IaaS
Compute get work done. That’s why so many branch offices are migrating to direct
internet access (DIA). Office 365, Google Could,
Security
The Cisco Umbrella Branch package is a cloud-delivered security service Salesforce, etc. AWS, etc.
ASA 5500-X for the Cisco RV 340 Series and Cisco ISR 1100/4000 Series routers. It Umbrella
Firepower 2100 provides the first layer of defense against threats at branch offices. And it
AnyConnect offers the simplest, fastest way to protect every device on your branch net-
work. You gain visibility and enforcement at the DNS-layer, so you can block
AMP for Endpoints
requests to malicious domains and IPs before a connection is ever made.
Umbrella Umbrella Branch protects employees and guests in distributed branch of-
Meraki MX fices – like those in retail, finance, hospitality, and education. By enforcing
Meraki Z security at the DNS-layer, connections are never established and files are
never downloaded. This prevents malware from infecting devices and stops
Meraki MV attacks from exfiltrating data over any port. VPN
Direct
Internet
OFF
Connect Access

Switches
Wireless
Routers

Services

RV 340
Teleworkers Branch HQ

You can deploy Umbrella in minutes on your RV 340 series router.

Simply input the API key and secret from Umbrella into the router’s GUI.
Cisco Start Catalog Secure - Security
Cisco Meraki and Umbrella
May - July, 2019
Cisco Umbrella Together At Last Promotion

Overview Features Licenses Why Umbrella? 14-Day Trial

Getting Started ▌Promotion Prices & Trial

What’s New

Feature Story OpenDNS OpenDNS Umbrella Umbrella

Home Home VIP 14 Day Trial Professional
Collaborate
FREE US$ 19.95/year FREE US$ 38/year
Compute
Our classic, free service OpenDNS Home package Get start in 30 seconds Per user (10 to 90 users)
Security with customizable filtering plus one year of usage stats No credit card or
and identity theft protection and optional white-list mode phone call required Cisco Promotion Price
ASA 5500-X
Firepower 2100
AnyConnect ▌Free Umbrella 14-Day Trial
AMP for Endpoints
If you want to add an additional layer of DNS security to your router or firewall, try our free trial—you can set it up yourself in
Umbrella less than five minutes, no credit card or phone call required.
Meraki MX signup.umbrella.com
Meraki Z
Meraki MV ▌Umbrella Professional: Best for Small Companies
This is Cisco’s direct sale promotion price via on-line credit card settlement. Cisco authorized distributors are also offering
Connect
even more attractive promotion pricing for various umbrella packages. Actual purchase price will be determined between
Switches purchaser & reseller of your choice.
Wireless umbrella.cisco.com/products/small-teams
Routers

Services
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Meraki MX Cloud Managed Security & SD-WAN Appliances

Overview Positioning Map Platform Spec Licenses & Accessories Why Meraki MX?

Getting Started ▌100 % Centralized Cloud Management for Security, Networking, and Application Control
What’s New The Cisco Meraki MX Security & SD-WAN Appliances are ideal for organi- These services include SD-WAN capabilities, application-based firewalling,
zations considering a Unified Threat Managment (UTM) solution for distributed content filtering, web search filtering, Cisco Snort-based intrusion detection
Feature Story sites, campuses or datacenter VPN concentration. Since the Cisco Meraki MX and prevention (IPS/IPS), Cisco Advanced Malware Protection (AMP), web
is 100 % cloud managed, installation and remote management are simple. caching, 4G cellular failover and more. Auto VPN and SD-WAN features are
Collaborate
Cisco Meraki MX has a comprehensive suite of network services, eliminating available on our hardware and virtual appliances, configurable in Amazon Web
Compute the need for multiple appliances. Services or Microsoft Azure.

Security
ASA 5500-X
Firepower 2100
AnyConnect
AMP for Endpoints
Umbrella
Meraki MX
Meraki Z
Meraki MV

Connect
Switches
Wireless
Routers
▌Highlights
Services ⬤⬤Identity-Based Firewall: Automatically assigns firewall and traffic shaping ⬤⬤Advanced Malware Protection: Protect your network against malware using
rules, VLAN tags, and bandwidth limits to enforce the right policies for each the latest threat intelligence, and identify previously unknown malicious files
class of users with retrospective detection
⬤⬤Intrusion Prevention: Protects critical network resources from the latest se- ⬤⬤High Availability & Failover: Provides device and connection integrity through
curity threats and vulnerabilities multiple uplinks, warm spare failover, and self-healing VPN
⬤⬤Auto VPN: Securely connects branch locations using mesh or hub-and- ⬤⬤Application Visibility & Control: Identify which applications are being used,
spoke topologies. Provides simple VPN access into Amazon Web Services and then prioritize critical apps while limiting recreational apps
and Microsoft Azure. ⬤⬤CentralizedManagement: Seamlessly manage campus-wide Wi-Fi de-
⬤⬤Content Filtering: Block undesirable web content across 80+ categories, ployments and distributed multi-site networks from a single pane-of-glass
and leverage cloud lookups to filter billions of URLs
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Meraki MX Cloud Managed Security & SD-WAN Appliances

Overview Positioning Map Platform Spec Licenses & Accessories Why Meraki MX?

Getting Started

What’s New

Feature Story Large Branch, MX450

Campus,
Collaborate Concentrator

Compute

Security MX250

ASA 5500-X
Firepower 2100
Virtual Appliances
AnyConnect
AMP for Endpoints vMX100

Umbrella
Meraki MX
Medium Branch
Meraki Z
MX84 MX100
Meraki MV

Connect
Switches
Wireless MX67C MX68CW
Routers

Services
Small Branch

MX64W MX67W MX68W

MX64 MX67 MX68

Throughput → High
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Meraki MX Cloud Managed Security & SD-WAN Appliances

Overview Positioning Map Platform Spec Licenses & Accessories Why Meraki MX?

Getting Started WAN/

WAN
Recom- Throughput Concurrent LAN LAN Ports WLAN
Web Ports Power Rack
What’s New Product SKU mended VPN Ports
Caching Supply Mount
Clients Stateful Advanced Tunnels 4G GE 11ac
VPN GE GE GE SFP
Feature Story Firewall Security LTE PoE+ AP

MX64-HW 50 250 Mbps 200 Mbps 100 Mbps 50 - 1 -*1 1 4 - - - External -*2
Collaborate
MX64W-HW 50 250 Mbps 200 Mbps 100 Mbps 50 - 1 -*1 1 4 - - ● External -*2
Compute

Security MX67-HW 50 450 Mbps 300 Mbps 200 Mbps 50 - 1 -*1 1 4 - - - External -*2

ASA 5500-X MX67W-HW 50 450 Mbps 300 Mbps 200 Mbps 50 - 1 -*1 1 4 - - ● External -*2
Firepower 2100
MX67C-HW-WW 50 450 Mbps 300 Mbps 200 Mbps 50 - 1 ● 1 4 - - - External -*2
AnyConnect
AMP for Endpoints MX68-HW 50 450 Mbps 300 Mbps 200 Mbps 50 - 2 -*1 - 8 2 - - External -*2

Umbrella MX68W-HW 50 450 Mbps 300 Mbps 200 Mbps 50 - 2 -*1 - 8 2 - ● External -*2
Meraki MX
MX68CW-HW-WW 50 450 Mbps 300 Mbps 200 Mbps 50 - 2 ● - 8 2 - ● External -*2
Meraki Z
Meraki MV MX84-HW 200 500 Mbps 320 Mbps 250 Mbps 100 1 TB 2 -*1 - 8 - 2 - Internal 1 RU

Connect vMX100 - - - 500 Mbps - - - - - - - - - - -

Switches *1 Cellular Modem is required.
Wireless *2 Desktop or Wall mountable with included mount hardware.

Routers

Services
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Meraki MX Cloud Managed Security & SD-WAN Appliances

Overview Positioning Map Platform Spec Licenses & Accessories Why Meraki MX?

Getting Started ▌Cisco Meraki Licensing for Cisco Meraki MX Series ▌Cisco Meraki License Comparison
Advanced
What’s New The Cisco Meraki MX Cloud Managed Security Appliances have licenses on Enterprise
Security
a per-model basis, so every Meraki MX model has a corresponding license.
Next-Generation Firewalls (NGFW) ● ●
Feature Story Please note that these licenses are non-transferrable between appliance
VLAN to VLAN Routing ● ●
models. For example, an MX64 will not be covered by an MX84 license; it
Collaborate will require an MX64 license. Link Bonding and Failover ● ●
The Cisco Meraki MX has multiple license editions: Enterprise and Ad- 3G/4G Failover via USB Modem ● ●
Compute vanced Security. Please note that the Meraki MX licensing edition is uniform Traffic Shaping and Prioritization ● ●
across the Organization. For example, you can have all 25 appliances using
Security Auto VPN Self-Configuring Site-to-Site VPN ● ●
Enterprise edition or Advanced Security edition, but you cannot have 20
ASA 5500-X appliances using one edition and 5 using the other edition. If you wish to
Client VPN ● ●

Firepower 2100 use Enterprise edition for some appliances and Advanced Security edition MPLS to VPN Failover ● ●

AnyConnect for other appliances, you need to create two Organizations, one for your Splash Pages ● ●
appliances with the Enterprise edition, and another for the appliances with Configuration Templates ● ●
AMP for Endpoints
the Advanced Security edition. HTTP Content Caching (Web Caching) ● ●
Umbrella
Group Policies ● ●
Meraki MX
Client Connectivity Alerts ● ●
Meraki Z
Active/Passive High Availability *1
● ●
Meraki MV SD-WAN ● ●

Connect Geography-based Firewall Rules - ●

Switches Cisco Snort IDS/IPS - ●

Content Filtering (with Google SafeSearch) - ●
Wireless
Anti-Virus and Anti-Phishing - ●
Routers
Youtube for Schools - ●
Services Web Search Filtering - ●
Cisco Advanced Malware Protection (AMP) - ●
Cisco Threat Grid *2
- ●
*1 No license required for Meraki MX deployed as Warm Spares.
*2 Cisco Threat Grid License is required.
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Meraki MX Cloud Managed Security & SD-WAN Appliances

Overview Positioning Map Platform Spec Licenses & Accessories Why Meraki MX?

Getting Started ▌Cisco Meraki Enterprise Licenses for Cisco Meraki MX Series
Product SKU
What’s New Compatible Models
1-Year 3-Years 5-Years 7-Years 10-Years

Feature Story LIC-MX64-ENT-1YR LIC-MX64-ENT-3YR LIC-MX64-ENT-5YR LIC-MX64-ENT-7YR LIC-MX64-ENT-10YR MX64

LIC-MX64W-ENT-1YR LIC-MX64W-ENT-3YR LIC-MX64W-ENT-5YR LIC-MX64W-ENT-7YR LIC-MX64W-ENT-10YR MX64W
Collaborate LIC-MX67-ENT-1YR LIC-MX67-ENT-3YR LIC-MX67-ENT-5YR LIC-MX67-ENT-7YR LIC-MX67-ENT-10YR MX67
LIC-MX67W-ENT-1YR LIC-MX67W-ENT-3YR LIC-MX67W-ENT-5YR LIC-MX67W-ENT-7YR LIC-MX67W-ENT-10YR MX67W
Compute LIC-MX67C-ENT-1YR LIC-MX67C-ENT-3YR LIC-MX67C-ENT-5YR LIC-MX67C-ENT-7YR LIC-MX67C-ENT-10YR MX67C
LIC-MX68-ENT-1YR LIC-MX68-ENT-3YR LIC-MX68-ENT-5YR LIC-MX68-ENT-7YR LIC-MX68-ENT-10YR MX68
Security
LIC-MX68W-ENT-1YR LIC-MX68W-ENT-3YR LIC-MX68W-ENT-5YR LIC-MX68W-ENT-7YR LIC-MX68W-ENT-10YR MX68W
ASA 5500-X LIC-MX68CW-ENT-1YR LIC-MX68CW-ENT-3YR LIC-MX68CW-ENT-5YR LIC-MX68CW-ENT-7YR LIC-MX68CW-ENT-10YR MX68CW
Firepower 2100 LIC-MX84-ENT-1YR LIC-MX84-ENT-3YR LIC-MX84-ENT-5YR LIC-MX84-ENT-7YR LIC-MX84-ENT-10YR MX84

AnyConnect LIC-VMX100-1YR LIC-VMX100-3YR LIC-VMX100-5YR - - vMX100

AMP for Endpoints

Umbrella
Meraki MX ▌Cisco Meraki Advanced Security Licenses for Cisco Meraki MX Series
Meraki Z Product SKU
Compatible Models
Meraki MV 1-Year 3-Years 5-Years 7-Years 10-Years
LIC-MX64-SEC-1YR LIC-MX64-SEC-3YR LIC-MX64-SEC-5YR LIC-MX64-SEC-7YR LIC-MX64-SEC-10YR MX64
Connect LIC-MX64W-SEC-1YR LIC-MX64W-SEC-3YR LIC-MX64W-SEC-5YR LIC-MX64W-SEC-7YR LIC-MX64W-SEC-10YR MX64W
Switches LIC-MX67-SEC-1YR LIC-MX67-SEC-3YR LIC-MX67-SEC-5YR LIC-MX67-SEC-7YR LIC-MX67-SEC-10YR MX67
LIC-MX67W-SEC-1YR LIC-MX67W-SEC-3YR LIC-MX67W-SEC-5YR LIC-MX67W-SEC-7YR LIC-MX67W-SEC-10YR MX67W
Wireless
LIC-MX67C-SEC-1YR LIC-MX67C-SEC-3YR LIC-MX67C-SEC-5YR LIC-MX67C-SEC-7YR LIC-MX67C-SEC-10YR MX67C
Routers LIC-MX68-SEC-1YR LIC-MX68-SEC-3YR LIC-MX68-SEC-5YR LIC-MX68-SEC-7YR LIC-MX68-SEC-10YR MX68
LIC-MX68W-SEC-1YR LIC-MX68W-SEC-3YR LIC-MX68W-SEC-5YR LIC-MX68W-SEC-7YR LIC-MX68W-SEC-10YR MX68W
Services
LIC-MX68CW-SEC-1YR LIC-MX68CW-SEC-3YR LIC-MX68CW-SEC-5YR LIC-MX68CW-SEC-7YR LIC-MX68CW-SEC-10YR MX68CW
LIC-MX84-SEC-1YR LIC-MX84-SEC-3YR LIC-MX84-SEC-5YR LIC-MX84-SEC-7YR LIC-MX84-SEC-10YR MX84
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Meraki MX Cloud Managed Security & SD-WAN Appliances

Overview Positioning Map Platform Spec Licenses & Accessories Why Meraki MX?

Getting Started ▌Cisco Meraki Insight Licenses for Cisco Meraki MX Series
Product SKU
What’s New Supported Throughput Compatible Models
1-Year 3-Years 5-Years

Feature Story LIC-MI-S-1YR LIC-MI-S-3YR LIC-MI-S-5YR 450 Mbps MX6x

LIC-MI-M-1YR LIC-MI-M-3YR LIC-MI-M-5YR 750 Mbps MX84
Collaborate

Compute
▌Cisco Meraki 1000BASE Small Form-Factor Pluggable (SFP) Modules
Security SKU Description
Max
Compatible Models
Distance
ASA 5500-X MA-SFP-1GB-TX 1000BASE-T SFP Module 100 m MX84
Firepower 2100 MA-SFP-1GB-SX 1000BASE-SX SFP Module 550 m MX84
MA-SFP-1GB-LX10 1000BASE-LX10 Module 10 km MX84
AnyConnect
AMP for Endpoints
Umbrella
Meraki MX
Meraki Z
Meraki MV

Connect
Switches
Wireless
Routers

Services
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Meraki MX Cloud Managed Security & SD-WAN Appliances

Overview Positioning Map Platform Spec Licenses & Accessories Why Meraki MX?

Getting Started ▌Cloud Management Architecture

What’s New Cisco Meraki’s architecture provides feature rich network management
without on-site management appliances or Wi-Fi controllers.
Feature Story Every Meraki device -including access points, switches, security appli-
ances, and cameras- connects over the Internet to Meraki’s datacenters,
Collaborate which run Meraki’s cloud management platform.
These connections, secured via SSL, utilize a patented protocol that pro-
Compute vides real time visibility and control, yet uses minimal bandwidth overhead
(typically 1 kbps or less.)
Security
In place of traditional command-line based network configuration, Meraki
ASA 5500-X provides a rich web based dashboard, providing visibility and control over
Firepower 2100 up to tens of thousands of Meraki devices, anywhere in the world. Tools,
AnyConnect designed to scale to large and distributed networks, make policy chang-
es, firmware updates, deploying new branches, etc. simple and expedient,
AMP for Endpoints
regardless of size or location. Meraki’s real time protocols combine the im-
Umbrella mediacy of on-premise management applications with the simplicity and
Meraki MX centralized control of a cloud application.
Meraki Z
Meraki MV

Connect
Switches
Wireless
Routers

Services
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Meraki MX Cloud Managed Security & SD-WAN Appliances

Overview Positioning Map Platform Spec Licenses & Accessories Why Meraki MX?

Getting Started ▌Ironclad Security

What’s New The Cisco Meraki MX platform has an extensive suite of security features
including IDS/IPS, content filtering, web search filtering, antimalware, geo-
Feature Story IP based firewalling, IPsec VPN connectivity, and Cisco Advanced Malware
Protection (AMP), while providing the performance required for modern,
Collaborate bandwidth-intensive networks.
Layer 7 fingerprinting technology lets administrators identify unwanted
Compute content and applications and prevent recreational apps like BitTorrent from
wasting precious bandwidth.
Security
The integrated Cisco Snort engine delivers superior intrusion
ASA 5500-X prevention coverage, a key requirement for PCI 3.2 compliance. Cisco Mer-
Firepower 2100 aki MX also uses the Webroot BrightCloud URL categorization database for
AnyConnect CIPA/IWF compliant content-filtering, Cisco AMP engine for anti-malware,
AMP Threat Grid Cloud, and MaxMind for geo-IP based security rules.
AMP for Endpoints
Best of all, these industry-leading Layer 7 security engines and signatures
Umbrella are always kept up-to-date via the cloud, simplifying network security man-
Meraki MX agement and providing peace of mind to IT administrators.
Meraki Z
Meraki MV
All-in-One Security
Connect
Switches
Wireless
Routers

Services

Firewall IPS Filtering AMP

Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Meraki MX Cloud Managed Security & SD-WAN Appliances

Overview Positioning Map Platform Spec Licenses & Accessories Why Meraki MX?

Getting Started ▌Software-Defined WAN (SD-WAN)

What’s New Cisco SD-WAN (powered by Meraki) is ideal for lean IT environments in which Meraki Dashboard:
full stack management of WAN, LAN, and security is valued, along with simple Intuitive Centralized Management

Feature Story management, orchestration, and automation, or where Meraki is the predom-
inant architecture.
Collaborate Cisco Meraki MX is equipped with SD-WAN capabilities that enable admin-
istrators to use available bandwidth more efficiently and ensure the highest
Compute possible level of performance for critical applications without sacrificing secu-
rity or data privacy.
Security
The following features can lower your operational costs and improve resource
ASA 5500-X usage: Meraki Cloud
Firepower 2100
⬤⬤Dual-Active VPN Uplinks
AnyConnect
AMP for Endpoints In addition to supporting dual WAN uplinks and automatic VPN failover, the
Meraki MX also has the ability to build multiple VPN tunnels that are active
Umbrella
simultaneously on both uplinks, whether they are Internet or MPLS connec-
Meraki MX tions. Traffic can then be load-balanced across these tunnels to make opti- Zero-Touch Cloud Provisioning:
Meraki Z mal use of available bandwidth. Can be remotely deployed in minutes

Meraki MV ⬤⬤Policy-based Routing (PbR)

PbR functionality allows administrators to assign traffic to a particular VPN
Connect path based on criteria such as traffic protocol, source, destination, or appli-
Branch Store
Switches cation.
Meraki MX Meraki MX
Wireless ⬤⬤Dynamic Path Selection
Routers Dynamic path selection allows administrators to set performance thresholds
for different types of traffic, in order to ensure that critical applications and Built-in SD-WAN
Services data transfers always use the best path based on the loss, latency, and jitter
over the available VPN tunnels.
HQ Store
⬤⬤Meraki Insight WAN Health Meraki MX Meraki MX
The WAN Health feature is specifically designed to monitor ISP connections,
and it will help with troubleshooting and reporting for these connections. In Comprehensive Security
addition to active/primary ISP uplinks, WAN Health will also monitor second- in a Single Box
ary/failover connections (such as WAN2 and LTE connections).

Branch Store
Meraki MX Meraki MX
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Meraki Z Cloud Managed Teleworker Gateway

Overview Platform Spec Licenses & Accessories

Getting Started ▌Offering Fast, Reliable Connectivity for the Modern Teleworker
What’s New The Cisco Meraki Z Cloud Managed Teleworker Gateway is an enterprise Using Meraki’s proven and highly scalable Auto VPN technology, administra-
class firewall, VPN gateway and router. Each model offers five gigabit ethernet tors can deploy network services including VoIP and remote endpoints with
Feature Story ports and wireless for connectivity. Each model is designed to securely extend automatic, zero-touch provisioning. All models feature a high-performance
the power of Meraki cloud managed networking to employees, IT staff, and stateful firewall, support for VLANs, inter-VLAN routing, and isolation to seg-
Collaborate
executives working from home. regate corporate data from recreational traffic.
Compute

Security
ASA 5500-X
Firepower 2100
AnyConnect
AMP for Endpoints
Umbrella
Meraki MX
Meraki Z
Meraki MV

Connect
Switches
Wireless
Routers

Services ▌Highlights
⬤⬤Self-configuring, plug-and-play deployment ⬤⬤PoE output for VoIP phones and other powered devices
⬤⬤Auto VPN for intelligent site-to-site VPN connectivity ⬤⬤Built-in 802.11ac Wave 2 wireless access point
⬤⬤Layer 7 application traffic shaping and prioritization ⬤⬤Up to 4 SSIDs with integrated enterprise security and personal/guest ac-
⬤⬤Layer 3 firewall to separate corporate data from personal traffic cess
⬤⬤IEEE ⬤⬤Sleek, low profile design
802.1x port authentication for wired devices
⬤⬤Built-in ⬤⬤Optional desk stand
4G LTE (Category 3) wireless WAN (Meraki Z3C)
⬤⬤USB port for 3G/4G connectivity
⬤⬤GE downlinks for printers, phones and other wired devices
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Meraki Z Cloud Managed Teleworker Gateway

Overview Platform Spec Licenses & Accessories

Getting Started
Throughput WAN Ports LAN Ports WLAN
Recommended Power Rack
Product SKU
What’s New Clients 4G GE 11ac Supply Mount
Stateful Firewall VPN GE GE
LTE PoE AP
Feature Story
Z3-HW 5 100 Mbps 50 Mbps 1 -*1 3 1 ● External -*2
Collaborate
Z3C-HW-WW 5 100 Mbps 50 Mbps 1 ● 3 1 ● External -*2
Compute *1 Cellular Modem is required.
*2 Desktop or Wall mountable with included mount hardware. Vertical Desk Stand (MA-STND-1) is available.
Security
ASA 5500-X
Firepower 2100
AnyConnect
AMP for Endpoints
Umbrella
Meraki MX
Meraki Z
Auto Configuring Site-to-Site VPN
Meraki MV

Connect
Switches
Wireless
Routers

Services

Multi-Site Management via the Meraki Cloud

Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Meraki Z Cloud Managed Teleworker Gateway

Overview Platform Spec Licenses & Accessories

Getting Started ▌Cisco Meraki Enterprise Licenses for Cisco Meraki Z Series
Product SKU
What’s New Compatible Models
1-Year 3-Years 5-Years 7-Years 10-Years
Feature Story LIC-Z3-ENT-1YR LIC-Z3-ENT-3YR LIC-Z3-ENT-5YR LIC-Z3-ENT-7YR LIC-Z3-ENT-10YR Z3
LIC-Z3C-ENT-1YR LIC-Z3C-ENT-3YR LIC-Z3C-ENT-5YR LIC-Z3C-ENT-7YR LIC-Z3C-ENT-10YR Z3C
Collaborate

Compute
▌Cisco Meraki Insight Licenses for Cisco Meraki MX Series
Security
Product SKU
ASA 5500-X Supported Throughput Compatible Models
1-Year 3-Years 5-Years
Firepower 2100
LIC-MI-XS-1YR LIC-MI-XS-3YR LIC-MI-XS-5YR 100 Mbps Z3, Z3C
AnyConnect
AMP for Endpoints
Umbrella ▌Cisco Meraki Vertical Desk Stand for Cisco Meraki Z3
Meraki MX Product SKU Description
Meraki Z MA-STND-1 Vertical Desk Stand
Meraki MV

Connect
Switches
Wireless
Routers

Services
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Meraki MV Cloud Managed Smart Cameras

Overview Platform Spec Licenses & Accessories Why Meraki MV?

Getting Started ▌Bringing Meraki Magic to the Video Security World

What’s New The Cisco Meraki MV Cloud Managed Smart Cameras bring powerful, ad- requirements, these smart cameras from Cisco Meraki represent a shift from
vanced analytics to the typical security camera world. With a powerful proces- cameras simply ensuring physical safety and security, to providing powerful
Feature Story sor —the same kind found on many of today’s smartphones— and an inno- business intelligence as well.
vative architecture which minimizes physical infrastructure as well as software
Collaborate

Compute

Security
ASA 5500-X
Firepower 2100
AnyConnect
AMP for Endpoints
Umbrella
Meraki MX
Meraki Z
Meraki MV

Connect
Switches
Wireless
Routers
▌Highlights
Services ⬤⬤Centralized Cloud Management: The Meraki dashboard provides secure ⬤⬤Motion Search: Dynamically and retroactively select areas of interest in a
monitoring and management of all your cameras from anywhere in the world video stream to find that missing laptop, then export clips directly from the
⬤⬤Edge Storage: Up to 256 GB of high write endurance solid state storage on dashboard
each camera eliminates the need for an NVR ⬤⬤Encrypted by Default: Video is encrypted at rest and during transport by
⬤⬤Optimized Retention: Use motion-based retention and scheduled recording default, with automated TLS certificate provisioning
to customize video storage plans for every deployment ⬤⬤Granular Access Controls: Easily define who can see which video streams,
⬤⬤Advanced Analytics: Industry-leading analytics and machine learning capa- view historical footage, and export video, all from the dashboard
bilities onboard each Cisco Meraki MV ⬤⬤Firmware Always Up-to-Date: Feature releases, firmware updates, and bug
fixes are always pushed automatically and at no additional cost with active
license
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Meraki MV Cloud Managed Smart Cameras

Overview Platform Spec Licenses & Accessories Why Meraki MV?

Getting Started Model Indoor Outdoor

What’s New Product SKU MV12WE-HW MV12W-HW MV12N-HW MV22-HW MV32-HW MV72-HW
1/3” 1/3” 1/3” 1/3” 1/3” 1/3”
Feature Story 4 MP (2,688 × 1,520) 4 MP (2,688 × 1,520) 4 MP (2,688 × 1,520) 4 MP (2,688 × 1,520) 8.4 MP (2,058 × 2,058) 4 MP (2,688 × 1,520)
progressive CMOS progressive CMOS progressive CMOS progressive CMOS progressive CMOS progressive CMOS
Collaborate image sensor image sensor image sensor image sensor image sensor image sensor
2.8 mm 2.8 mm 3.8 mm 3 ~ 9 mm 1.19 mm 3 ~ 9 mm
Compute focal length focal length focal length vari-focal lens focal length vari-focal lens
Horizontal 36 ~ 112° Horizontal 36 ~ 112°
Security Vertical 20 ~ 57° Vertical 20 ~ 57°
Horizontal 114° Horizontal 114° Horizontal 73°
ASA 5500-X Camera
Vertical 61° Vertical 61° Vertical 44°
Diagonal 42 ~ 138° Horizontal 180° Diagonal 42 ~ 138°
Tilt: 65° Vertical 180° Tilt: 65°
Firepower 2100 Diagonal 132° Diagonal 132° Diagonal 86°
Rotation: +/- 90° Rotation: +/- 90°
AnyConnect Pan: 354° Pan: 354°
Minimum illumination Minimum illumination Minimum illumination Minimum illumination Minimum illumination
AMP for Endpoints 0.18 Lux (standard) 0.18 Lux (standard) 0.18 Lux (standard) 0.18 Lux (standard)
Minimum illumination
0.18 Lux (standard)
0.18 Lux
Umbrella 0.01 Lux (night mode) 0.01 Lux (night mode) 0.01 Lux (night mode) 0.01 Lux (night mode) 0.01 Lux (night mode)
Built-in IR illuminators Built-in IR illuminators Built-in IR illuminators Built-in IR illuminators Built-in IR illuminators
Meraki MX -
effective up to 15 m effective up to 15 m effective up to 15 m effective up to 30 m effective up to 30 m
Meraki Z Full HD (1,920 × 1,080) Full HD (1,920 × 1,080) Full HD (1,920 × 1,080) Full HD (1,920 × 1,080) 4.2 MP (2,058 x 2,058) Full HD (1,920 × 1,080)
Meraki MV Video H.264 encoding H.264 encoding H.264 encoding H.264 encoding H.264 encoding H.264 encoding
up to 20 fps up to 20 fps up to 20 fps up to 20 fps up to 15 fps up to 20 fps
Connect Microphone ● ● ● ● ● ●
Switches
Storage 128 GB SSD 256 GB SSD 256 GB SSD 256 GB SSD 256 GB SSD 256 GB SSD
Wireless
1 x GE 1 x GE 1 x GE 1 x GE 1 x GE 1 x GE
Routers Interface 1 x 11b/g/n (2.4 GHz) 1 x 11b/g/n (2.4 GHz) 1 x 11b/g/n (2.4 GHz) 1 x 11b/g/n (2.4 GHz) 1 x 11b/g/n (2.4 GHz) 1 x 11b/g/n (2.4 GHz)
1 x 11a/n/ac (5 GHz) 1 x 11a/n/ac (5 GHz) 1 x 11a/n/ac (5 GHz) 1 x 11a/n/ac (5 GHz) 1 x 11a/n/ac (5 GHz) 1 x 11a/n/ac (5 GHz)
Services
Power 802.3af/at 802.3af/at 802.3af/at 802.3af/at 802.3af/at 802.3af/at

106 mm x 74 mm 106 mm x 74 mm 106 mm x 74 mm 149 mm x 97 mm 106 mm x 45.86 mm 165 mm x 103 mm

Dimensions
(diameter × height) (diameter × height) (diameter × height) (diameter × height) (diameter x height) (diameter × height)

Weight 286 g 286 g 286 g 706 g 215 g 1,247 g

Weather-Proof IP66 - - - - - ●

Vandal-Proof IK10 - - - - - ●
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Meraki MV Cloud Managed Smart Cameras

Overview Platform Spec Licenses & Accessories Why Meraki MV?

Getting Started ▌Cisco Meraki Enterprise Licenses for Cisco Meraki MV Series
Product SKU
What’s New Compatible Models
1-Year 3-Years 5-Years 7-Years 10-Years
Feature Story LIC-MV-1YR LIC-MV-3YR LIC-MV-5YR LIC-MV-7YR LIC-MV-10YR All Meraki MV

Collaborate

Compute ▌Cisco Meraki Power Injector & Power Supply for Cisco Meraki MV Series
Product SKU Description Compatible Models
Security
MA-INJ-4-xx PoE Injector (802.3at) All Meraki MV
ASA 5500-X
MA-PWR-MV-LV Low Voltage (12 VDC/24 VAC) Power Adapter All Meraki MV
Firepower 2100
AnyConnect
AMP for Endpoints ▌Cisco Meraki Mount Kits for Cisco Meraki MV Series
Umbrella Compatible Models
Product SKU Description
Meraki MX MV12WE MV12W MV12N MV22 MV72
Meraki Z MA-MNT-MV-10 Wall Mount Arm - - - - ●
Meraki MV MA-MNT-MV-20 Pole Mount - - - - ●
MA-MNT-MV-30 Wall Mount Arm ● ● ● - -
Connect
MA-MNT-MV-31 Wall Mount Bracket - - - ● -
Switches
Wireless
Routers

Services
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Meraki MV Cloud Managed Smart Cameras

Overview Platform Spec Licenses & Accessories Why Meraki MV?

Getting Started ▌Cloud Management Architecture

What’s New Cisco Meraki’s architecture provides feature rich network management
without on-site management appliances or Wi-Fi controllers.
Feature Story Every Meraki device -including access points, switches, security appli-
ances, and cameras- connects over the Internet to Meraki’s datacenters,
Collaborate which run Meraki’s cloud management platform.
These connections, secured via SSL, utilize a patented protocol that pro-
Compute vides real time visibility and control, yet uses minimal bandwidth overhead
(typically 1 kbps or less.)
Security
In place of traditional command-line based network configuration, Meraki
ASA 5500-X provides a rich web based dashboard, providing visibility and control over
Firepower 2100 up to tens of thousands of Meraki devices, anywhere in the world. Tools,
AnyConnect designed to scale to large and distributed networks, make policy chang-
es, firmware updates, deploying new branches, etc. simple and expedient,
AMP for Endpoints
regardless of size or location. Meraki’s real time protocols combine the im-
Umbrella mediacy of on-premise management applications with the simplicity and
Meraki MX centralized control of a cloud application.
Meraki Z
Meraki MV

Connect
Switches
Wireless
Routers

Services
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Meraki MV Cloud Managed Smart Cameras

Overview Platform Spec Licenses & Accessories Why Meraki MV?

Getting Started ▌Cutting Edge Architecture

What’s New Cisco Meraki’s expertise in distributed computing has come to the security
camera world. With cloud-augmented edge storage, the Cisco Meraki MV
Feature Story provides ground breaking ease of deployment, configuration, and operation.
Completely eliminating the Network Video Recorder (NVR) not only reduces
Collaborate equipment CAPEX, but the simplified architecture also minimizes lifetime
OPEX costs.
Compute Each Cisco Meraki MV comes with integrated, ultra reliable, industrial-grade
storage. This cutting edge technology allows the system to efficiently scale
Security
to any size because the storage expands with the addition of each camera.
ASA 5500-X Plus, administrators can rest easy knowing that even if the network connec-
Firepower 2100 tion cuts out, the cameras will continue to record footage.
AnyConnect
AMP for Endpoints
Umbrella
Meraki MX
Meraki Z
Meraki MV

Connect
Switches
Wireless
Routers

Services Cloud
Meraki Access
Cloud

NVR Local
Access

Local
Video Frame Typical Video Frame Meraki MV Access
Network Camera
Cisco Start Catalog Secure - Security
May - July, 2019
Cisco Meraki MV Cloud Managed Smart Cameras

Overview Platform Spec Licenses & Accessories Why Meraki MV?

Getting Started ▌Beyond Just Security

What’s New The Cisco Meraki MV utilizes a powerful onboard processor to analyze video
and provide valuable insights without the need to send those video files to
Feature Story the cloud or a local server.

Collaborate ⬤⬤Motion Heat Maps

Quickly assess foot traffic in a retail store or monitor where hotel guests
Compute
are congregating in the lobby. Motion heat maps only require a small
Security amount of metadata, rather than bulky video files, to provide results with
big impact.
ASA 5500-X
⬤⬤Object Detection
Firepower 2100
Learn which displays are attracting the most customers or how many peo-
AnyConnect
ple came to the office last Thursday. The ability to detect people using
AMP for Endpoints computer vision and increase accuracy over time through machine learn-
Umbrella ing will provide deep business insights that were previously only possible
Meraki MX with bulky servers.
⬤⬤Privacy Matters
Meraki Z
All Cisco Meraki MV analytics functionalities are anonymized to ensure
Meraki MV
privacy while still providing intelligence. You’ll know that a customer en-
Connect tered your store at 3:38, but not that her name is Sarah.
Switches
Wireless
Routers

Services