Summary: Compares the Meraki MX75 and MX85 security appliances — hardware differences, form factor, port configuration, throughput, and guidance on which model suits which deployment scenario. Specifications sourced from the MX Family Datasheet (October 2025).
The MX75 and MX85 are mid-range security appliances in the Meraki MX line, both targeted at small to medium branch offices. They run the same MX firmware and are sold under the same three licensing tiers (SD-WAN Plus, Advanced Security, and Enterprise). The differences are purely hardware: form factor, port configuration, VPN throughput capacity, and VPN tunnel count.
The MX75 is a desktop or wall-mount appliance. The MX85 is a 1U rack-mounted appliance. This is often the first and most significant decision point — in any wiring closet or MDF with a rack, the MX85 is the natural fit.
| Specification | MX75 | MX85 |
|---|---|---|
| Form factor | Desktop / wall mount | 1U rack |
| NGFW throughput | 1 Gbps | 1 Gbps |
| Advanced security services throughput | 1 Gbps | 1 Gbps |
| Max site-to-site VPN throughput | 1 Gbps | 2.5 Gbps |
| Max site-to-site VPN tunnels | 75 | 200 |
| Recommended max clients | 200 | 250 |
| WAN interfaces | 1× GbE SFP + 2× GbE RJ45 | 2× GbE SFP + 2× GbE RJ45 (1× PoE+) |
| LAN interfaces | 10× GbE RJ45 (2× PoE+) | 8× GbE RJ45 + 2× GbE SFP |
| USB | 1× (for 4G failover) | 1× (for 4G failover) |
⚠️ Advanced Security Throughput Footnote
The datasheet notes that Advanced Security throughput (IDS, AMP, secure malware analytics) can reach the same level as NGFW throughput when trusted traffic exclusions are in use. Without exclusions, effective throughput under full inspection may be lower. Refer to the MX Sizing Guide for guidance on sizing under real-world conditions.
The most significant performance difference is site-to-site VPN throughput. The MX85 sustains 2.5 Gbps of AutoVPN throughput versus 1 Gbps on the MX75. For a branch with a high-bandwidth WAN circuit, or a hub site aggregating traffic from multiple spokes, the MX85 provides considerably more headroom.
NGFW and Advanced Security throughput are identical on both models at 1 Gbps. The difference is specific to the VPN engine.
The MX85 also supports up to 200 concurrent site-to-site VPN tunnels, compared to 75 on the MX75. For a regional hub site aggregating spoke VPNs, the MX85's higher tunnel count is the deciding factor.
The MX75 is a desktop or wall-mount unit. It is not rack-mountable. The MX85 is a 1U appliance that mounts directly into a standard rack. In any deployment where the security appliance lives in a rack alongside switching and patch panels, the MX85 is the appropriate choice. The MX75 requires its own shelf, wall bracket, or surface.
Both models have at least one WAN SFP port, so either can terminate a fibre WAN hand-off without a media converter. The difference is in quantity and positioning:
In a standard small branch with a single copper WAN circuit and a co-located switch, neither model's SFP count is a constraint. The MX85's additional WAN SFP and LAN SFPs matter at sites with dual-fibre WAN delivery or a fibre run between the MDF and an IDF.
The PoE provision on each model serves different purposes:
Neither model is a substitute for a dedicated PoE switch where more than minimal powered device support is needed.
Both models support the full MX feature set. Features available depend on the licence tier:
Both models also support:
| Scenario | Recommendation |
|---|---|
| Appliance must mount in a rack | MX85 |
| Desktop or wall-mount installation acceptable | MX75 |
| Site-to-site VPN throughput above 1 Gbps required | MX85 |
| More than 75 AutoVPN tunnels required | MX85 |
| Dual fibre WAN circuits required | MX85 |
| Single fibre or copper WAN | Either (both have at least 1× WAN SFP) |
| Fibre LAN uplink to distribution switch required | MX85 |
| Site has more than 200 concurrent clients | MX85 |
| Limited LAN PoE needed for 1–2 devices without a separate PoE switch | MX75 |
| PoE required for a cellular WAN failover modem | MX85 |
| Cost-sensitive, copper WAN, under 75 VPN tunnels, desktop install acceptable | MX75 |
When the deployment is in a wiring closet or MDF with an existing rack, the MX85 is the natural choice — physical fit and the significantly higher VPN throughput ceiling both favour it at any site with growth potential.