Z-Series Data Sheet

The Cisco Meraki Z-Series teleworker gateway is an enterprise class firewall, VPN gateway and router. Each model offers five gigabit ethernet ports and wireless for connectivity. Each model is designed to securely extend the power of Meraki cloud managed networking to employees, IT staff, and executives working from home.

Using Meraki’s proven and highly scalable Auto VPN technology, administrators can deploy network services including VoIP and remote endpoints with automatic, zero-touch provisioning. Additionally the Z series provides secure wired and wireless access, and increases end-user productivity through Layer 7 traffic shaping.

All models feature a high-performance stateful firewall, support for VLANs, inter-VLAN routing, and isolation to segregate corporate data from recreational traffic. The Z3 offers the latest in wireless performance with 802.11ac Wave 2 technology with MU-MIMO support to provide reliable and high speed network access for most demanding business applications and latest devices.

Z-Series and Meraki Cloud Management: A Powerful Combo All Meraki devices are managed via the Meraki cloud, with an intuitive browser-based interface. Since the Z series is selfconfiguring and managed over the web, you can repidly deploy at remote locations without any assistance from end-users.

Meraki Cloud services monitor all devices 24×7 and deliver realtime alerts if any device encounters a problem. Remote diagnostics tools enable real-time troubleshooting through any web browser. New features and enhancements are delivered seamlessly over the web, so you never have to manually download software updates or worry about missing security patches.

Z3 Desk stand (sold separately)

Z3 50W power adapter spare

Z1 30W power adapter spare

Z3 Power Cord (sold separately)

Auto VPN

Leveraging Meraki’s cloud architecture, VPN tunnels to HQ or the data center can be enabled via a single click without any commandline configurations or multi-step key permission setups. Meraki’s patent-pending Auto VPN technology automatically tunnels, hole punches, sets up route tables, and establishes the IPsec connections, completely eliminating the complexity seen in traditional site-to-site VPN solutions.  

Application-aware traffic shaping

The Z-Series includes an integrated layer 7 packet inspection, classification, and control engine, enabling you to set QoS policies based on traffic type. Prioritize your mission critical applications like VoIP or remote desktop, while setting limits on recreational traffic, e.g., peerto-peer and video streaming.

Simple, powerful security from end to end

With end-to-end VPN encryption, corporate data is always protected. Additionally the Meraki Z3 supports 802.1x wired port authentication, offering network and endpoint security no matter where the gateway may be deployed.

Self-configuring, self-optimizing, self-healing

When plugged in, the Z-Series automatically connects to the Meraki cloud, downloads its configuration, and joins your network. In case of WAN IP address changes, the Z-Series self heals by re-establishing the site-to-site VPN tunnels using the new IP address. Also, if a supported 3G/4G modem is connected and primary WAN uplink connectivity fails, the Z-Series will automatically failover to cellular.

Industry-leading cloud management

Meraki’s award-winning cloud management architecture unifies WAN, LAN, and wireless management under a web based dashboard, and scales easily from small deployments to large, multi-site deployments with tens of thousands of devices. The Meraki dashboard provides intuitive yet powerful role-based administration, firmware updates, configuration changes, email alerts, and easy to audit change logs. 

Performance

Firewall Throughput – Z1: 50 Mbps, Z3: 100 Mbps

VPN Throughput – Z1: 10 Mbps, Z3: 50 Mbps

Recommended for 5 clients or fewer

Interfaces

WAN interface: 1x GbE

LAN interfaces: 4x GbE

PoE: 1 x 802.3af enabled port (Z3 only)

1x USB 2.0 port for 3G / 4G connectivity

Network and Security Services

Stateful firewall, 1:1 NAT, DMZ

Auto (site-to-site IPsec) VPN

Client VPN (IPsec L2TP), limit 2 authorized users (with Meraki-hosted authentication only)

Automatic Layer 3 failover (including VPN connections)

Application level (Layer 7) traffic analysis and shaping

Multiple WAN IP, PPPoE, NAT

VLAN support and DHCP services

802.1x wired port authentication (Z3 only)

Static routing

User and device quarantine

Integrated Wireless

4 SSIDs

Z1: 2x 802.11a/b/g/n (2.4Ghz or 5 Ghz), 2×2 MIMO with 2 spatial streams

Z3: 2x 802.11a/b/g/n/ac (2.4Ghz or 5 Ghz), 2×2 MU-MIMO with 2 spatial streams

Max data rate – Z1: 600 Mbit/s, Z3: 1.3 Gbit/s

4x internal dipole antennas (gain: 3 dBi @ 2.4 GHz, 4 dBi @ 5 GHz)

WPA2-PSK authentication

Regulatory: FCC (US), IC (Canada), CE (Europe), C-Tick (Australia/New Zealand), RoHSe

Monitoring and Reporting

Throughput, connectivity monitoring and email alerts

Detailed historical per-port and per-client usage statistics

Application usage statistics

Org-level change logs for compliance and change management

VPN tunnel and latency monitoring

Network asset discovery and user identification

Periodic emails with key utilization metrics

Syslog integration

Remote Diagnostics

Live remote packet capture

Real-time diagnostic and troubleshooting tools

Aggregated event logs with instant search

Management

Managed via the web using the Meraki Cloud Controller

Single pane of glass management of wired and wireless networks

Zero-touch remote deployment (no staging needed)

Automatic firmware upgrades and security patches

Centralized policy management

Org-level two-factor authentication and single sign-on

Role based administration with change logging and alerts

Z1 Environmental Specifications

Power: 18W (12 V / 1.5 A), external power supply included

Operating temperature: 32°F to 104°F (0°C to 40°C)

Humidity: 5 to 95% non-condensing

Desktop or wall mount (all standard mounting hardware included)

Kensington lock hard point

Z3 Environmental Specifications

Power: 50W (54 V / 0.92 A), external power supply included

Operating temperature: 32°F to 104°F (0°C to 40°C)

Humidity: 5 to 95% non-condensing

Desktop or wall mount (all standard mounting hardware included)

Kensington lock hard point

Regulatory

FCC (US)

CB (IEC)

CISPR (Australia/New Zealand)

Warranty

Full lifetime hardware warranty with next-day advanced replacement included.