Meraki SD-WAN

Software-defined WAN features for all MX Security Appliances

What is SD-WAN?

Software-defined WAN is a new approach to network connectivity that lowers operational costs and improves resource usage for multi-site deployments, allowing network administrators to use bandwidth more efficiently and ensure the highest possible level of performance for critical applications without sacrificing security or data privacy.

For more information on deploying and configuring SD-WAN on the Meraki MX Security Appliance, see the Meraki SD-WAN Deployment Guide

Transport Independence

  • Easy-to-configure IPsec overlay using Meraki Auto VPN
  • Traffic distribution over multiple pathways (Internet, cellular, MPLS) with built-in load balancing and automatic failover capabilities

Application Optimization

  • Centralized network visibility and control
  • QoS and bandwidth management with Meraki traffic shaping

Intelligent Path Control

  • Policy-based routing: Traffic path assigned based on source, destination, or application
  • Dynamic path selection: Traffic path chosen per-application based on loss, latency, and jitter

Secure Connectivity

  • Intuitive, scalable VPN solution to connect remote sites with ease (Auto VPN)
  • AES encryption to ensure data privacy

Why Choose SD-WAN?

Today, IT departments are under pressure to do more with less: manage more sites and more clients with limited budgets and a relatively small team, all without any reduction in reliability and security. The high cost of enterprise WAN connectivity, support, and personnel combined with the growth of bandwidth-hungry streaming applications and cloud-based services, is forcing many network admins to search for alternative solutions.

With SD-WAN, remote sites are connected over low-cost Internet links secured by VPN. MPLS-like reliability is provided through multiple uplinks with load balancing capabilities, intelligent path control, and automatic failover.

Apps Internet Branch Edge

SD-WAN Features

Dual-Active VPN uplinks

In addition to supporting dual WAN uplinks and automatic VPN failover, the MX also has the ability to build multiple VPN tunnels that are active simultaneously on both uplinks, whether they are Internet or MPLS connections. Traffic can then be load-balanced across these tunnels to make optimal use of available bandwidth.

Policy-Based Routing (PbR)

PbR functionality allows administrators to assign traffic to a particular VPN path based on criteria such as traffic protocol, source, destination, or application.

Dynamic path selection

Dynamic path selection allows administrators to set performance thresholds for different types of traffic, in order to ensure that critical applications and data transfers always use the best path based on the loss, latency, and jitter over the available VPN tunnels.

Case Study

Deep dive: Penn Mutual saves $858K


  • Implement a BYOD platform at 50 remote sites
  • Reduce management and connectivity costs


  • Complete Meraki hardware stack: MX, MS, MR
  • Broadband connectivity at branch locations

Business Outcomes

  • Reduced Telco spend by 40%
  • Improved IT efficiency with unified management platform

Projected 3 year cost with legacy WAN deployment

  T1 × 45 at branches (1.544Mbps each)
  Broadband × 2 at HQ & DR (45Mbps each)
Content Management
  Content filtering software
  Hardware Security Appliance
3 year Total Cost of Ownership (TCO) $2,193,750

Projected 3 year cost with Meraki (including rip & replace)

  Broadband × 38 at HQ & branches (50Mbps each)   WAN Management vendor (one time installation costs)
  $212,040/yr   $37,375
Meraki Hardware & Licensing
  MX, MS, and MR × 41 at branches
  MX, MS, and MR licensing
Content Management Included
Wireless Installation
  26 branch offices wired for MR
$62,257   $62,257
3 year Total Cost of Ownership (TCO) $1,334,893

Learn more about the Cisco Meraki MX

Start Trial Webinars See Models