What is our primary use case?
I utilize their whole stack. I use their Cisco Meraki MX firewalls, MS switches, MV cameras, and MR Wi-Fi.
I can tell you about my use cases for Cisco Meraki MX, as I use it as high availability in my use case at my clinics. I have the firewalls in an HA in the network. I do some client VPN tunneling and I have a direct fiber connect. An SFP+ connects to connections to my switches. The firewall is phenomenal. It allows the normal day-to-day IT to be able to troubleshoot issues on the fly without having to know major CLI commands. It's very intuitive, very easy on the eyes, and easy to navigate through. I deploy this at all of my clinics in an HA, and it works great. Failover is quick, and it's quick to respond. Firmware upgrades are easy to deploy remotely.
The criteria and policies that govern how my Cisco Meraki MX appliances dynamically steer traffic across multiple uplinks are by the application that I'm utilizing. My core application is a contact center, so my voice application is going to take precedence. I'm applying a QoS policy or some type of policy that puts that first. That's what governs what I hear and what I do.
What is most valuable?
Cisco Meraki takes the complexity out of network configuration. I no longer need a dedicated architect to do this anymore. Cisco Meraki and others are starting to see that. Once you start taking the complexity out, they still give you the ability to get into the CLI and run minimal things. I feel the CLI is the old way. They're making it easier and easier, and that's how it should be. It shouldn't be so complicated.
What needs improvement?
If there was anything I can say I don't about it, I wish the automation was a little bit more friendly. If someone doesn't know too much about automations, I wish it had the ability within the platform to say, 'I want to run this automation within this network. Here's the new network that's coming on board. I'm utilizing the same firewalls, the same switches, same MVs. Here's the subnet that I'm going to use. Here are the IPs for the devices.' It should be able to give me that run book and configure it. That would be my main thing within the automation.
I don't have much else to complain about. Everything is pretty straightforward. Back in the day, about five years ago, I tried to run 10 terabytes of data on an MX95 with a gig fiber coming in. The firewall was doing all the routing at the time and all the Layer 3. I did see some degraded performance trying to push that data through my MS350 10 gig switch. Once I moved the Layer 3 off the firewall and placed it on my core switch, I saw a better improvement. However, that was five years ago, and I'm not pushing that type of data out now.
If the splash page was a little bit more appealing and more configurable, I think that would be nice.
For how long have I used the solution?
I have been using Cisco Meraki MX for about 10 years now.
What do I think about the stability of the solution?
I haven't seen any lagging, crashing, downtime, or any sort of instability. I get an occasional reboot here and there, and then a firmware fix addresses that. That's usually on the secondary. I haven't had the issue of it going down or completely powering off unless it's ISP related.
They seem to function fine during ISP degradation or brownout events, as I don't have any issues with those. Especially with brownout events, I have my devices on a battery backup, but even when that goes down, I don't see too many issues with that.
What do I think about the scalability of the solution?
Scalability is great. The WAN interfaces are 2.5 gigs. Once I enable threat protection and AMP protection, that scales that down. I wish they would work on that a little bit. The WAN has 2.5 gigs, then I have four gig, and I have four SFPs or two of those. It can definitely scale. It's definitely one of the better firewalls out there.
How are customer service and support?
The quality and speed of the support is great. They have new processes where they prefer a case first compared to back in the day, but every time I got a hold of someone, I was always able to resolve my issues. I commend them because they're really good.
I give them a 10 on a scale from 1 to 10, with 10 being the highest, for the support.
Which solution did I use previously and why did I switch?
I used to use ASAs and Firepower back in the day. I did a little Sophos back in the day. I would say Sophos is a little bit more comparable to Cisco Meraki MX.
How was the initial setup?
The initial deployment for Cisco Meraki MX is really easy. It's one of the things I appreciate about Meraki. I'm able to show a regular network tech or just a regular tech how to navigate through it before the device has even arrived and is plugged in. I can already have the license imported and have the network configured. As soon as it arrives at the location and my ISP is configured, it's plug and play.
The younger generation that I'm training gives me feedback that this is really easy to navigate and they're able to understand some of the commands or some of the modules visually. Many people understand things or learn visually, while others can know more of the command lines. For people who can't remember commands, I have a hard time remembering them, but the help feature is really useful. Visually, I can see it and click it. I can't get any better than that.
Many of the firewalls are going that way and cloud managed. They're taking the complexity out of configuring it. That's key, and that's one of the things Cisco Meraki MX has a grasp on. They're taking the complexity out of the configuration. If this is your WAN IP and this is just a simple small-medium business that just needs a network with maybe one to two VLANs, I can just click here and it's so simple. It's super easy.
It does not require any maintenance on my end. I have seven clinics. They all have two MX95s in an HA. Tonight, I'm getting ready to do a firmware upgrade. At first, I would always go on site, even at previous jobs, just to see it go through the firmware upgrade. Now that I have a lot more confidence in the current firmwares, I'm now doing my upgrades remotely.
I haven't utilized their automation for managing multiple locations, any new workspaces, or any new workbooks for new locations because all of my locations are their own entity. They're their own clinic. When the clinic grows to, let's say, I have Cisco Meraki switches in a stack, and the switches are doing the Layer 3. They're never going to grow to three, four, five, six stacks. So there's really no need to have a run book or some type of flow that says, 'Here's a new stack. Here's the configuration auto-config from stack one.' I'm never going to do that. Each location is a new setup. I know I can probably automate that through Terraform and Ansible, but for me, it's easier once I place the order and I get my licensing. At that point, I have to add those licensing into the dashboard. At that point, Cisco Meraki MX is so simple that I can, within literally 5 to 10 minutes, configure the network and have it ready to go within the dashboard.
I would it. I wish they had a lot more classes on that type of automation or a lot more communication on the automation.
What's my experience with pricing, setup cost, and licensing?
I think the pricing is comparable. The licensing or some of the add-on modules, I think are outrageous, especially for the CS versions. If I'm just talking about Cisco Meraki MX, the prices are pretty reasonable. The pricing for support actually speaks for itself because their support is phenomenal.
What other advice do I have?
I have been working in my current field overall for 26 years.
I would go with the MS switches for review.
I would talk about Cisco Meraki MX as my focus.
Regarding the trade-offs I have observed between local breakout and centralized threat inspection, I haven't seen any or had any breaches or any threats alert me or come through at the firewall level. For me, it's more at the end-point level, but I know that Cisco Meraki MX has this new trust traffic exclusion through the security. I'm eager to start familiarizing myself with this type of trusted applications.
I give Cisco Meraki MX a 10 for the overall score.