Cisco Meraki MX85 Firewalls - Refurbished, Used, New

Best Selling

The Cisco Meraki MX85 is a cloud-managed security appliance for mid-sized branch offices, combining a stateful firewall, SD-WAN, site-to-site AutoVPN, client VPN, content filtering and intrusion prevention in one rack-mount box managed from the Meraki dashboard. The MX85-HW carries ten 1G RJ45 ports, one of them PoE, plus four 1G SFP ports, with dual WAN uplinks for carrier failover. NetworkTigers sells the MX85-HW refurbished, used and new. Every unit is tested before it ships and arrives not associated with any other organization's Meraki dashboard, so you can claim it into yours and push your configuration from the cloud.

MX85 security appliance at a glance

Item	Key spec	Shop
MX85-HW	Branch security appliance and SD-WAN gateway, Meraki dashboard managed	MX85-HW
Copper ports	10x 1G RJ45, one of them PoE for a phone, access point or camera	MX85-HW
Fiber ports	4x 1G SFP for fiber handoffs or longer runs to a switch stack	MX85-HW
WAN	Dual uplinks with load balancing and failover across two carriers	MX85-HW
Security	Stateful firewall, intrusion prevention, malware protection, content filtering, Layer 7 shaping	MX85-HW
VPN	AutoVPN site-to-site tunnels to other MX units, client VPN for remote staff	MX85-HW
Form factor	1U rack-mount, with a rack kit when the listing states one is included	MX85-HW
Related Cisco Meraki	The step below, the two steps above, and every MX model	MX75 \| MX95 \| MX105 \| All Meraki MX

Which Meraki MX do I need?

Size the MX by the branch, not the headcount on paper. The MX85 fits a site that has outgrown the MX75 on port count or needs SFP ports for a fiber circuit, but does not yet need 10G. If the carrier handoff is 10G, or you run a large branch with heavy AutoVPN traffic back to a data center, move up to the MX95 or MX105. Count the devices you will plug directly into the MX: with ten copper ports and only one PoE port, most sites still want a Meraki MS switch behind the MX for desktops and access points. For high availability, buy two MX85 units and configure one as a warm spare; the pair must be the same model. Match SFP modules to the circuit you are connecting, and tell us the carrier handoff type so we can supply the right optic with the appliance.

Frequently asked questions

What does "unclaimed" mean on an MX85-HW listing?
The appliance is not associated with any other organization's Meraki dashboard. You add its serial number to your organization, assign it to a network, and it downloads the firewall rules, VLANs and VPN settings you define in the dashboard. Listings marked Registrable / Unclaimed can be claimed this way; a listing marked Local Management Only cannot, and the product page states which applies. A Meraki license is required and is sold separately.

Can an MX85 replace an older MX64 or MX84 without rebuilding the configuration?
Yes. Because the configuration lives in the dashboard network rather than on the box, you swap the hardware in the network, move the cables, and the MX85 pulls down the same settings. Port counts differ, so map the old port assignments to the new ports before the cutover.

Does the MX85 need a separate switch for a small office?
Not always. With ten RJ45 ports it can serve a very small site directly. Once you have more than a handful of wired devices, or more than one PoE device, add a switch and use the MX ports for the uplinks.

NetworkTigers has sold enterprise network equipment since 1996. Every MX appliance carries the NetworkTigers 365-day warranty. Need a pair for high availability, or units for several branches? Ask us for a quote.