Do You Actually Need Meraki Licences? An Honest Guide

The licence everyone grumbles about

If you run a small or medium business on Cisco Meraki gear, there's one line on the invoice that tends to raise eyebrows: the per-device licence. You bought the access point or firewall, so why are you paying an ongoing subscription on top?

It's a fair question, and we'd rather answer it honestly than gloss over it. Meraki is our specialty at TYO Store — but we're happy to supply products from other manufacturers too, so we've no reason to talk you into a licence you don't need. We'd much prefer you understand exactly what you're paying for, so you never get a nasty surprise at renewal time. Let's demystify it.

What a Meraki licence actually pays for

A Meraki licence isn't a tax for owning the hardware. It's what makes the hardware work the way it does in the first place. Specifically, your licence covers four things:

• The cloud dashboard itself. Meraki's whole appeal is that you manage everything from a single web dashboard — no on-site controller, no command line, no driving to site. That dashboard is a hosted Cisco service, and your licence keeps your devices entitled to use it.
• Continuous feature and security updates. While licensed, your gear keeps receiving firmware updates, new features and — crucially — security patches. Threats evolve constantly, and so does the platform that defends against them.
• Cisco TAC support. You get access to Cisco's Technical Assistance Centre for the life of the licence. For an SMB without a big internal IT team, having Cisco engineers on the hook is genuinely valuable.
• Lifetime hardware warranty. Meraki's MX appliances, MS switches and indoor MR access points all carry a lifetime hardware warranty — covered for the life of the product, to its end-of-support date. If one fails, it's replaced free via advance RMA while the device is under an active licence. Keep it licensed, keep it covered.

Think of it less like buying a router and more like a managed platform subscription where the hardware is the doorway in.

The licence tiers in plain English

Meraki licensing sounds more complicated than it is. For most SMBs it comes down to two questions: what type of device is it, and do you need advanced security.

Enterprise — the standard tier

Enterprise is the standard management licence for your access points and switches. If you're running something like a MERAKI MR36 Wi-Fi 6 indoor AP for staff and guest Wi-Fi, or a MERAKI MS130-8 cloud-managed 8-port switch in the comms cupboard, Enterprise is what they need.

It gives you full cloud management, monitoring, the dashboard, updates, support and warranty. For APs and switches, this is almost always the right and only licence you need.

Advanced Security / Secure Connect — for your firewall

When it comes to your MX security appliance — for example the MERAKI MX67 router/security appliance sitting at the edge of your network — you have a choice between Enterprise and Advanced Security (and the newer Secure Connect bundles).

Enterprise on an MX still gives you firewalling, VPN and SD-WAN basics. Advanced Security layers on the serious protection:

• IDS/IPS — intrusion detection and prevention that spots and blocks attacks
• AMP — Advanced Malware Protection that scans files crossing your network
• Content filtering — block categories of websites by policy
• Geo-based firewalling — block traffic from countries you never do business with
• Cisco Umbrella DNS — security at the DNS layer, stopping connections to malicious domains before they happen

So who needs what?

• Fine on Enterprise: a simple site with no compliance pressure, where the MX is mostly there for connectivity, basic firewalling and a site-to-site VPN.
• Should be on Advanced Security: anyone handling sensitive customer data, processing payments, subject to industry compliance, allowing remote or guest access, or who simply can't afford downtime from a malware incident. If you'd lose real money or trust from a breach, the upgrade is cheap insurance.

For most SMBs we talk to, the firewall is the one device worth the Advanced Security tier — and the APs and switches sit comfortably on Enterprise.

The honest part: if it lapses, the device stops

Here's the bit nobody likes, said plainly: if a Meraki licence lapses and isn't renewed within the grace period, the device stops passing traffic. It's not a gentle nag-screen — eventually it goes offline. That's the trade-off of a fully cloud-managed platform.

The good news is this is entirely avoidable with a bit of discipline. Here's exactly how to make sure it never happens to you:

• Buy multi-year terms. Three- and five-year licences cost less per year than annual renewals and dramatically reduce how often you have to think about it.
• Co-terminate everything to one date. Rather than a dozen devices all expiring on different days, line them up to a single expiry. One renewal, one reminder, one decision.
• Set renewal reminders well ahead. Or better, have your reseller track it for you (more on that below).
• Budget it like insurance. Don't treat the licence as a surprise cost — it's a known, recurring line item that keeps your network running and protected. Put it in the annual budget alongside your other essentials.

How licensing is sized across a mixed fleet

Most real-world SMB networks aren't one device — they're a mix of APs, switches and a firewall, often across one or more NBN-connected sites. Meraki licenses per device, so:

• Each AP (like your MR36s) needs its own Enterprise licence
• Each switch (like your MS130s) needs its own Enterprise licence
• Each MX firewall needs an Enterprise or Advanced Security licence

Co-termination is the trick that keeps this sane. When you add a device mid-term, its licence is pro-rated so it expires on the same day as everything else. So if you start with a firewall and two APs, then add a switch six months later, that switch's term is adjusted to co-term with the rest. At renewal, you're handling one combined renewal for the whole fleet — not chasing a moving target.

This is exactly the kind of thing a local reseller should manage for you, so you're never the one discovering an expiry the hard way.

When a licence is genuinely poor value

We promised honesty, so here it is: Meraki isn't right for everyone.

If you're a single, simple site — one room, basic internet sharing, no remote access, no compliance obligations, no real appetite for security features — then paying ongoing per-device licences for the privilege of cloud management may not stack up. You'd be paying for a platform whose best features you'll never use.

In that scenario, an unlicensed alternative — a capable standalone router and a basic switch with no subscription — can be the smarter, cheaper call. We'll tell you that honestly rather than sell you something you don't need.

The value flips firmly back to Meraki when you have multiple sites, growing staff, guest Wi-Fi, remote workers, or genuine security needs. That's where the cloud dashboard, central management and Advanced Security start paying for themselves in saved time and avoided risk.

Let TYO Store audit and co-term your licences

If you're unsure what you're actually paying for, whether your firewall should be on Advanced Security, or when your various licences expire — that's exactly what we're here for.

TYO Store can audit your existing Meraki fleet, recommend the right tier for each device, co-term everything to a single renewal date, and quote you a clear multi-year price so there are no surprises and no risk of a device going dark.

We won't invent scary numbers or upsell you features you don't need — we'll give you a straight quote and manage the renewals so you don't have to.

Get in touch with TYO Store for a free licence audit and co-termination quote.