Cisco Meraki MX95 Firewalls - Refurbished, Used, New

Best Selling

The Cisco Meraki MX95 is a cloud-managed security appliance for large branches and small campus edges, built around 10G connectivity. It runs the full MX feature set from the Meraki dashboard: stateful firewall, SD-WAN with dual WAN uplinks, AutoVPN, client VPN, intrusion prevention, malware protection and content filtering. The MX95-HW carries four 10G SFP+ ports and six 1G RJ45 ports, so it sits comfortably between a 10G carrier handoff and a 10G core switch. NetworkTigers sells the MX95-HW refurbished, used and new. Every unit is tested before it ships and arrives not associated with any other organization's Meraki dashboard, ready to claim into yours.

MX95 security appliance at a glance

Item	Key spec	Shop
MX95-HW	Large-branch security appliance and SD-WAN gateway, Meraki dashboard managed	MX95-HW
10G ports	4x 10G SFP+ for carrier handoffs and core switch uplinks	MX95-HW
Copper ports	6x RJ45 for WAN circuits, management and local devices	MX95-HW
WAN	Dual uplinks with SD-WAN policy routing, load balancing and failover	MX95-HW
Security	Stateful firewall, intrusion detection and prevention, malware protection, content filtering, Layer 7 visibility	MX95-HW
VPN	AutoVPN hub or spoke for a site-to-site mesh, client VPN for remote users	MX95-HW
Form factor	1U rack-mount, with a rack kit when the listing states one is included	MX95-HW
Related Cisco Meraki	The step below, the steps above, and every MX model	MX85 \| MX105 \| MX250 \| All Meraki MX

Which Meraki MX do I need?

The MX95 is the first MX in the line where 10G is the main event, so choose it when your carrier delivers a 10G handoff, when the core switch behind the firewall uplinks at 10G, or when a branch terminates enough AutoVPN tunnels that a 1G appliance becomes the bottleneck. If the site is on 1G circuits with modest VPN load, the MX85 does the same job at lower cost. If you need more headroom for a regional hub or a site that concentrates many spokes, move to the MX105, and for a data center or campus edge the MX250. Plan your optics with the box: the SFP+ ports take 10G SR, LR or direct attach modules, and they also accept 1G SFP modules where a circuit is still 1G. For high availability, pair two MX95 units as primary and warm spare.

Frequently asked questions

What does "unclaimed" mean on an MX95-HW listing?
The appliance is not associated with any other organization's Meraki dashboard. You add its serial number to your organization, place it in a network, and it downloads the firewall, VLAN, SD-WAN and VPN configuration you define there. Listings marked Registrable / Unclaimed can be claimed this way; a listing marked Local Management Only cannot, and the product page states which applies. A Meraki license is required and is sold separately.

Can the MX95 act as the AutoVPN hub for smaller MX units at other sites?
Yes. Any MX can be set as a hub in the dashboard, and the MX95 is a common choice for a regional hub with MX67, MX75 and MX85 spokes. Hub capacity scales with the model, so a hub for many spokes or heavy traffic may call for the MX105 or MX250.

Does the MX95 include SFP+ modules?
Only when the listing says so. Most units ship without optics so you can choose SR, LR or direct attach cables to match the far end. Tell us the switch and circuit you are connecting and we will quote the modules with the appliance.

NetworkTigers has sold enterprise network equipment since 1996. Every MX appliance carries the NetworkTigers 365-day warranty. Need a high-availability pair or units for a hub-and-spoke rollout? Ask us for a quote.