I'm looking at a managed SD-WAN package that pairs Meraki MX firewalls with Zscaler. My understanding is that the MX doesn't support GRE and the Zscaler IPsec tunnel is limited to around 150 Mbps. Is that a dealbreaker?
Does a Meraki MX and Zscaler SD-WAN setup make sense with a 150 Mbps tunnel limit?
Asked by
not quite ready
Answers
Not necessarily. A smaller site might be perfectly happy with that much capacity, especially if the price is right. The question is how much traffic actually needs to go through the tunnel, not just the speed of the internet circuit.
I'd want the provider to explain the advertised speed tier and exactly where the limit applies before signing anything.
Reply to this answer
The tunnel design needs a closer look. If GRE isn't available on the MX, you need to understand the supported IPsec configuration and its throughput limits. Don't assume a faster access circuit means traffic through the security service can use all of it.
Ask for the limits for the specific MX model and service configuration, including whether the stated figure is per tunnel and what options exist if the site needs more capacity.
Reply to this answer
Price changes the conversation. A managed package with a modest tunnel ceiling could be reasonable for some branches, but it's a tough sell if it costs as much as a higher-capacity alternative. Compare the full quote and included management, not just the hardware.
v.ornate_6:
And get the service limits in the quote. A low price isn't much comfort if the speed tier doesn't match the traffic the site needs to send through it.
Reply to this answer
Add your answer
Answers are reviewed before publication.
not quite ready:
That distinction helps. I'll ask whether the quoted speed is for the circuit or for traffic through Zscaler.