Cisco Meraki MX Guide: Cloud Security & SD-WAN for SMBs

What is a Cisco Meraki MX?

The Cisco Meraki MX is a cloud-managed security and SD-WAN appliance built for businesses that want enterprise-grade protection without the enterprise-grade headaches. In plain terms, it sits at the edge of your network — between your internet connection and your internal devices — and acts as the gatekeeper for everything coming in and going out.

What makes the MX range so popular with Australian SMBs is the management model. Instead of logging into individual boxes via a command line, you configure and monitor everything through the Meraki dashboard from a web browser or mobile app. That means you can manage a single shopfront or dozens of branch sites from one screen, anywhere.

Let's walk through what an MX actually does, then how to pick the right model for your business.

What an MX appliance actually does

A single MX rolls several functions into one device, which is a big part of its appeal for smaller teams.

• Firewall — A stateful firewall controls traffic between your network, the internet, and between internal VLANs. You set policies once and they apply consistently across every site.
• Site-to-site and client VPN — Auto VPN is one of Meraki's standout features. Connecting branch offices securely usually takes a few clicks rather than hours of manual tunnel configuration. Remote staff can also connect with client VPN.
• SD-WAN — The MX intelligently steers traffic across multiple internet connections. Critical applications like VoIP or video conferencing get prioritised and routed over the best-performing link in real time.
• Content filtering — Block categories of websites (adult content, gambling, malware-hosting domains) and keep staff browsing in line with your acceptable-use policy.
• Threat protection — With the right licence, the MX uses Cisco's Advanced Malware Protection (AMP) and intrusion detection/prevention (IDS/IPS) powered by Cisco Talos threat intelligence to spot and stop known threats.
• Automatic failover — If your primary internet link drops, the MX fails over to a secondary connection — a second WAN port or built-in LTE — so your business keeps running.

For a lot of SMBs, replacing a separate firewall, VPN box and traffic shaper with one MX is both simpler and cheaper to run.

Why cloud management matters for SMBs

Most small businesses don't have a full-time network engineer on staff. The Meraki dashboard is designed with that reality in mind.

• Roll out configuration changes to every site at once.
• See live traffic, client devices and application usage at a glance.
• Get alerts when a link goes down or a device misbehaves.
• Push firmware and security updates without on-site visits.

It's worth noting the MX operates on a licensing model. Each appliance needs an active Enterprise or Advanced Security licence to function and stay updated. The Advanced Security tier is what unlocks AMP, IDS/IPS and content filtering, so factor that into your budget from the start.

How to choose the right MX model

Picking a model comes down to three questions: how big is the site, how much throughput do you need, and do you need built-in LTE or Wi-Fi? Let's break the catalogue down by scenario.

Small sites and branch offices

For small offices, retail stores or branch locations with a handful of users, the MX67 family is the natural starting point.

• MX67 (MX67-HW) — The go-to for a small site with a wired internet connection. Compact, capable, and easy on the budget.
• MX67W (MX67W-HW) — Same appliance with built-in 802.11ac Wi-Fi, so you don't need a separate access point in a small space.
• MX67C (MX67C-HW-WW) — Adds a built-in LTE modem. Ideal where you want a wireless failover path or where fixed-line broadband is unreliable.

Stepping up slightly, the MX68 line offers more ports and higher throughput for slightly larger small sites.

• MX68 (MX68-HW) — More LAN ports than the MX67, including dedicated PoE ports for powering phones or cameras.
• MX68W (MX68W-HW) — MX68 with integrated 802.11ac Wi-Fi.
• MX68CW (MX68CW-HW-WW) — The fully loaded small-site option, combining LTE and Wi-Fi in one box. Great for pop-up sites, regional branches or anywhere you want maximum resilience without extra hardware.

Medium sites and growing businesses

As your team grows and your internet speeds climb, you'll want more horsepower and more WAN flexibility.

• MX75 (MX75-HW) — A solid mid-range choice for medium offices that need higher throughput and dual WAN for failover.
• MX85 (MX85-HW) — Steps up the performance for busier sites with more concurrent users and heavier traffic.
• MX95 (MX95-HW) — Built for demanding medium-to-large sites where throughput and VPN performance really matter.

These models suit head offices, busier branches, or any site where dozens of users are hammering cloud apps, video calls and large file transfers throughout the day.

Larger sites and high-throughput environments

When you're protecting a large office, a data-heavy operation or a regional hub, you need appliances built for serious volume.

• MX105 (MX105-HW) — A strong upper-tier option for large sites with high bandwidth requirements.
• MX250 (MX250-HW) — Designed for large campuses and high-throughput environments with many users and heavy VPN traffic.
• MX450 (MX450-HW) — The top of the range for the most demanding deployments, delivering the highest throughput and capacity in the MX line.

Most SMBs won't need the MX250 or MX450, but they're worth knowing about if you're scaling fast or consolidating multiple sites into a single large facility.

Do you need built-in LTE or Wi-Fi?

These two features can simplify your setup considerably, so it's worth thinking them through.

• Built-in LTE (the 'C' models) — Choose LTE if reliable internet is mission-critical and you can't afford downtime, or if a site has patchy fixed-line connectivity. The MX67C and MX68CW give you an automatic cellular failover path without bolting on a separate modem.
• Built-in Wi-Fi (the 'W' models) — Choose a Wi-Fi model for small sites where you want wireless coverage from the same box, avoiding the cost of a standalone access point. For larger sites, you'll generally pair a non-Wi-Fi MX with dedicated Meraki access points instead.

A quick rule of thumb: small site that needs everything in one box? Look at the MX68CW. Larger site? Get a higher-tier MX and add access points as needed.

Matching the model to your throughput

Throughput is the spec that catches people out. If you buy an MX rated below your internet speed — especially with threat protection switched on — the appliance becomes the bottleneck. Always check the advertised throughput with security features enabled, not just the raw firewall figure, and leave headroom for growth.

As a general guide:

• A few users on standard broadband → MX67 or MX68 family.
• Growing teams on fast NBN or business fibre → MX75, MX85 or MX95.
• Large sites or very high-speed links → MX105, MX250 or MX450.

Getting it right for your business

The Meraki MX range gives Australian SMBs a clean path from a single small office right through to a multi-site operation, all managed from one dashboard. Start with your site size and internet speed, decide whether LTE and Wi-Fi belong in the box, and don't forget to budget for the right licence tier.

Not sure which model fits? The team at TYO Store can help you match the right MX to your sites, your bandwidth and your security needs — get in touch before you buy and we'll point you in the right direction.