MX67W
All-in-one Wireless, Security and SD-WAN

Highlights
-
Hardware
-
- Stateful firewall throughput: 450 Mbps
- Recommended maximum clients: 50
- Small form factor
-
Wireless
-
- Dual-band, dual-concurrent: 2.4 & 5 GHz
- 2-stream 802.11ac Wave 2 and 802.11n, up to 1.3 Gbps
- Supports up to 4 SSIDs
-
Cloud-based centralised management
-
- Managed centrally over the web
- Classifies applications, users and devices
- Zero-touch, self-provisioning deployments
-
Networking and security
-
- Stateful firewall
- Auto VPN™ self-configuring site-to-site VPN
- Active Directory integration
- Identity-based policies
- Client VPN (IPsec)
- 3G/4G failover via USB modem
-
Traffic shaping and application management
-
- Layer 7 application visibility and traffic shaping
- Application prioritisation
-
Advanced security services1
-
-
- Content filtering
- Google SafeSearch and YouTube for Schools
- Intrusion detection and prevention (IDS/IPS)
- Advanced Malware Protection (AMP)
- Cisco Threat Grid2
1 Requires an Advanced Security Licence
2 Requires Threat Grid cloud subscription (learn more) -
Recommended max clients | Interfaces | Stateful firewall throughput | Maximum VPN throughput | VPN tunnels | Web caching | Redundant power | |
![]() |
50 | 5 × GbE USB 3G/4G | 250 Mbps | 100 Mbps | 50 | — | — |
---|---|---|---|---|---|---|---|
![]() |
50 | 5 × GbE 802.11ac WiFi USB 3G/4G | 250 Mbps | 100 Mbps | 50 | — | — |
![]() |
50 | 12 × GbE (2 PoE+) USB 3G/4G | 250 Mbps | 100 Mbps | 50 | — | — |
![]() |
50 | 5 × GbE USB 3G/4G | 450 Mbps | 200 Mbps | 50 | — | — |
![]() |
50 | 5 × GbE 802.11ac/n Wave 2 Wi-Fi USB 3G/4G | 450 Mbps | 200 Mbps | 50 | — | — |
![]() |
50 | 5 × GbE CAT 6 LTE Modem USB 3G/4G | 450 Mbps | 200 Mbps | 50 | — | — |
![]() |
50 | 12 × GbE (2 PoE+) USB 3G/4G | 450 Mbps | 200 Mbps | 50 | — | — |
![]() |
50 | 12 × GbE (2 PoE+) 802.11ac/n Wave 2 Wi-Fi USB 3G/4G | 450 Mbps | 200 Mbps | 50 | — | — |
![]() |
50 | 12 × GbE (2 PoE+) 802.11ac/n Wave 2 Wi-Fi CAT 6 LTE Modem USB 3G/4G | 450 Mbps | 200 Mbps | 50 | — | — |
![]() |
200 | 10 × GbE 2 × SFP USB 3G/4G | 500 Mbps | 250 Mbps | 100 | ✓ | — |
![]() |
500 | 9 × GbE 2 × SFP USB 3G/4G | 750 Mbps | 500 Mbps | 250 | ✓ | — |
![]() |
2,000 | 2 × 10G SFP+ (WAN) 8 × GbE (RJ45) 8 × GbE (SFP) 8 × 10 GbE (SFP+) USB 3G/4G | 4 Gbps | 1 Gbps | 1,000 | ✓ | ✓ |
![]() |
10,000 | 2 × 10G SFP+ (WAN) 8 × GbE (RJ45) 8 × GbE (SFP) 8 × 10 GbE (SFP+) USB 3G/4G | 6 Gbps | 2 Gbps | 1,500 | ✓ | ✓ |
- Network and Security Services
- Stateful firewall, 1:1 NAT, DHCP, DMZ, static routing
- Identity-based policies
- Auto VPN™ self-configuring site-to-site VPN
- Client VPN (IPsec)
- User and device quarantine
- VLAN support and DHCP services
- Advanced Security Services
- Content filtering (Webroot BrightCloud CIPA-compliant URL database)
- Web search filtering (including Google and Bing SafeSearch)
- YouTube for Schools
- Intrusion prevention (SourceFire Snort based)
- Cisco Advanced Malware Protection (AMP)
- Requires Advanced Security Licence
- WAN Performance Management
- WAN link aggregation
- Application level (Layer 7) traffic analysis and shaping
- Automatic Layer 3 failover (including VPN connections)
- WAN uplink selection based on traffic type
- Monitoring and Management
- Web-based management and configuration
- Throughput, connectivity monitoring and alerts
- Network asset discovery and user identification
- Built-in network-wide reporting, monitoring and alerts
- Centralised policy management
- Real-time diagnostic and troubleshooting over the web
- Automatic firmware upgrades and security patches
- Searchable network-wide event logs
- Interfaces
- WAN: 1 × 1 GbE
- LAN: 4 × 1 GbE (1 optionally available for WAN connectivity)
- Wireless: 802.11ac Wave 2 Wi-Fi
- USB: 1 × USB 2.0 for 3G/4G failover (supported devices)
- Performance
- Stateful firewall throughput: 450 Mbps
- VPN throughput: 200 Mbps
- Recommended for small branches (up to 50 users)
- Power
- Single 18 W power supply
- Environment
- Operating temperature: 0 °C to 45 °C (32 °F to 113 °F)
- Humidity: 5 to 95% non-condensing
- Warranty
- Lifetime hardware warranty with advanced replacement included