Hydrasat, a Cisco Partner based in Covington, Louisiana, offers three Secure Office packages that bring Cisco Meraki managed security for small business into one plan: a Cisco Meraki network and firewall, protected logins, DNS and web security, email security, and managed endpoint detection and response. We design it, install it and manage it for offices across the Northshore and Greater New Orleans. Every package starts with a free network assessment, and installation is quoted per site.
- Secure Office Essentials: the security basics, covered and managed.
- Secure Office Standard: stronger login and web protection, plus staff training.
- Secure Office Advanced: full monitoring, logging and resilience.
Book your free network assessment and quote
What’s included in every Secure Office package
Each tier is built on the same managed Cisco Meraki foundation, so every office gets a Meraki MX firewall with Advanced Security (the model is set by the package), protected email and protected computers from day one.
- Managed Meraki network service from Hydrasat (Managed Meraki Access)
- Cisco Meraki access points with Enterprise licensing
- Cisco Secure Email Threat Defense
- Huntress Managed EDR (managed endpoint detection and response)
- A 48-port switch option on any tier
- Backup as a quoted add-on on any tier: Microsoft 365 / Google Workspace backup and PC/server backup
Meraki licenses are part of the hardware. Each Meraki device needs its Cisco license to run, so licenses are quoted with the equipment they belong to. They are not a separate Hydrasat service.
Secure Office Essentials
Who it’s for: offices that need the security basics covered, managed by a Cisco Partner instead of left to chance.
What it protects: your internet connection and office network, your Wi-Fi, every staff login, web browsing in and out of the office, Microsoft 365 email, and your computers and servers.
- Cisco Meraki MX75 firewall with Advanced Security
- Cisco Meraki MS150 24-port PoE switch
- Cisco Meraki MR36 Wi-Fi 6 access points with Enterprise licensing
- Cisco Duo Essentials multi-factor authentication (MFA)
- Cisco Umbrella / Secure Access DNS Essentials
- Cisco Secure Email Threat Defense
- Huntress Managed EDR
- Managed Meraki network service from Hydrasat
Secure Office Standard
Who it’s for: offices that handle customer or financial data and want stronger login and web protection and a team trained to spot phishing.
What it protects: everything in Essentials, with risk-based login checks, deeper web inspection, staff trained against phishing, and a switch that is ready for stacking and a second power supply.
- Cisco Meraki MX85 firewall with Advanced Security
- Cisco Catalyst C9200L 24-port PoE switch (Meraki-managed, stack- and dual-power-ready)
- Cisco Catalyst CW9162I Wi-Fi 6E access points with Enterprise licensing
- Cisco Duo Advantage
- Cisco Umbrella / Secure Access DNS Advantage
- Cisco Secure Email Threat Defense
- Huntress Managed EDR
- Huntress Managed Security Awareness Training
- Managed Meraki network service from Hydrasat
Secure Office Advanced
Who it’s for: medical, legal, financial and other regulated businesses that need full monitoring, logging and resilience.
What it protects: everything in Standard, plus device trust at login, full secure web gateway and cloud firewall protection, around-the-clock watch on Microsoft 365 identities, centralized security logging, and a redundant switch stack.
- Cisco Meraki MX95 firewall with Advanced Security
- Two stacked Cisco Catalyst C9200L 24-port PoE switches with stacking kits and redundant power supplies
- Cisco Catalyst CW9164I Wi-Fi 6E access points with Enterprise licensing
- Cisco Duo Premier
- Cisco Umbrella / Secure Access SIG Essentials (secure web gateway, cloud firewall, CASB)
- Cisco Secure Email Threat Defense
- Huntress Managed EDR
- Huntress Managed ITDR (Microsoft 365 identity threat detection)
- Huntress Managed Security Awareness Training
- Huntress Managed SIEM (logs from the firewall, Meraki, Duo and Umbrella, plus Microsoft 365 audit logs)
- Managed Meraki network service from Hydrasat
Book your free network assessment and quote
Compare Secure Office packages
| Feature | Essentials | Standard | Advanced |
|---|---|---|---|
| Managed Meraki network service | ✓ | ✓ | ✓ |
| Meraki firewall with Advanced Security | MX75 | MX85 | MX95 |
| Meraki MS150 24-port PoE switch | ✓ | — | — |
| Catalyst C9200L 24-port PoE switch (Meraki-managed) | — | ✓ (stack- and dual-power-ready) | ✓ (two, stacked, redundant power) |
| 48-port switch option | Option | Option | Option |
| Wi-Fi access points with Enterprise licensing | ✓ MR36 (Wi-Fi 6) | ✓ CW9162I (Wi-Fi 6E) | ✓ CW9164I (Wi-Fi 6E) |
| Cisco Duo MFA | ✓ Essentials | ✓ Advantage | ✓ Premier |
| Cisco Umbrella / Secure Access | ✓ DNS Essentials | ✓ DNS Advantage | ✓ SIG Essentials |
| Secure web gateway, cloud firewall, CASB | — | — | ✓ |
| Cisco Secure Email Threat Defense | ✓ | ✓ | ✓ |
| Huntress Managed EDR | ✓ | ✓ | ✓ |
| Huntress Security Awareness Training | — | ✓ | ✓ |
| Huntress Managed ITDR (Microsoft 365) | — | — | ✓ |
| Huntress Managed SIEM | — | — | ✓ |
| Microsoft 365 / Google Workspace backup | Quoted add-on | Quoted add-on | Quoted add-on |
| PC / server backup | Quoted add-on | Quoted add-on | Quoted add-on |
What each component does
Plain-language descriptions of every part of the Secure Office packages: what it does and what it protects.
Managed Meraki network service
Hydrasat engineers watch your Meraki firewall, switches and Wi-Fi from the Meraki dashboard and work the alerts. We apply firmware in change windows agreed with you, make configuration changes when you need them (VLANs, Wi-Fi networks, firewall rules, VPN), run Cisco Duo and Cisco Umbrella / Secure Access day to day, and track Meraki license renewals. Protects: network uptime and keeps security settings current. Learn more about Managed Meraki Access.
Cisco Meraki MX firewalls with Advanced Security
Each Secure Office package includes a Cisco Meraki MX security and SD-WAN appliance with an Advanced Security license. The MX sits between your office and the internet. It combines a stateful firewall with application (Layer 7) rules and Meraki Auto VPN. The Advanced Security license adds intrusion detection and prevention (IDS/IPS), Cisco Talos content filtering, Advanced Malware Protection (AMP) for files crossing the firewall, and geo-IP rules, and it is required to integrate the MX with Cisco Umbrella / Secure Access. The model is set by the package: the MX75 on Essentials, the MX85 on Standard and the MX95 on Advanced. Protects: your office’s internet edge against intrusion attempts, malicious downloads and unsafe sites.
| Model | Package | Max stateful firewall throughput | Max next-generation firewall (detection) throughput | Cisco recommended device count |
|---|---|---|---|---|
| MX75 | Essentials | 1 Gbps | 1 Gbps | Small branch with up to 200 devices |
| MX85 | Standard | 1 Gbps | 1 Gbps | Small to medium branch with up to 250 devices |
| MX95 | Advanced | 3 Gbps | 2 Gbps | Medium-sized to large branch with up to 500 devices |
Cisco Meraki MS150 24-port PoE switch
A Meraki cloud-managed access switch with 24 PoE+ ports that connect and power access points, phones and cameras. It supports VLANs, 802.1X port authentication, DHCP snooping and Dynamic ARP Inspection. Protects: the wired network inside your office by separating traffic and controlling which devices can connect. View the MS150-24P-4G.
Cisco Catalyst C9200L 24-port PoE switch (stack- and dual-power-ready)
A Cisco Catalyst 9200L switch managed from the same Meraki dashboard, with 24 PoE+ ports and four 1G uplinks. It is ready to grow: adding a C9200L-STAK-KIT-M stacking kit lets two or more switches run as one stack, and a second hot-swappable PWR-C5-600WAC-M power supply gives the switch redundant power. Protects: the wired network inside your office, with a path to more resilience later. View the C9200L-24P-4G-M.
Two stacked C9200L switches with redundant power supplies (Advanced)
Two C9200L switches are joined with stacking kits so they are managed as a single switch, and each switch carries a second power supply. If one power supply fails, the other keeps that switch running, and critical connections can be split across both switches. Protects: against a single power supply or switch taking the whole office offline.
48-port switch option
Any tier can use a 48-port switch instead of a 24-port model. Essentials offices can use the Meraki MS150-48LP-4G or MS150-48FP-4G; Standard and Advanced offices can use the Catalyst C9200L-48P-4G-M or C9200L-48P-4X-M. Protects: the same wired network, for offices with more ports to connect.
Cisco Meraki MR36 Wi-Fi 6 access points (Essentials)
A cloud-managed 2×2 Wi-Fi 6 (802.11ax) access point with a dedicated scanning radio for real-time wireless intrusion detection and prevention (WIDS/WIPS) and a Bluetooth radio. Protects: your Wi-Fi from rogue access points and wireless attacks while keeping staff and guest networks separate. View the MR36.
Cisco Catalyst CW9162I Wi-Fi 6E access points (Standard)
A Meraki-managed, tri-band Wi-Fi 6E access point that adds the 6 GHz band for more capacity and less interference. It has three 2×2 client radios, a dedicated scanning radio for WIDS/WIPS, and a 2.5 Gbps multigigabit Ethernet port. Protects: your Wi-Fi, with more room for devices. View the CW9162I-MR.
Cisco Catalyst CW9164I Wi-Fi 6E access points (Advanced)
A higher-capacity, tri-band Wi-Fi 6E access point with two 4×4 radios and one 2×2 radio, plus a dedicated scanning radio for WIDS/WIPS. It is managed from the Meraki dashboard. Protects: your Wi-Fi in busier offices with more devices. View the CW9164I-MR.
Meraki Enterprise licensing (part of the hardware)
Every Meraki or Catalyst-for-Meraki access point needs a Cisco Meraki license. The Enterprise license covers cloud management, security features and Cisco support for that device. Switches and the MX firewall carry their own Meraki licenses the same way. Licenses are sold with the hardware, not as a separate Hydrasat service. View Meraki AP licenses · Meraki license renewal guide.
Cisco Duo Essentials
Multi-factor authentication (MFA) that asks staff to confirm each sign-in, with phishing-resistant and passwordless options, single sign-on and Trusted Endpoints. Protects: email, cloud apps and VPN from stolen passwords. View Duo Essentials.
Cisco Duo Advantage
Everything in Duo Essentials, plus risk-based authentication, session-theft protection and Cisco Identity Intelligence for identity threat detection. Protects: logins against attackers who already have a password or a stolen session. View Duo Advantage.
Cisco Duo Premier
Everything in Duo Advantage, plus complete device trust (checking that a device is healthy and protected before it can sign in) and VPN-less remote access to private resources. Protects: your apps and data from unmanaged or unhealthy devices. View Duo Premier.
Cisco Umbrella / Secure Access DNS Essentials
DNS-layer security that blocks requests to domains tied to malware, phishing and other threats before a connection is made, with filtering by category and discovery of the cloud apps in use. With Cisco Secure Client it also protects DNS for staff working away from the office. Protects: users from reaching dangerous sites, in and out of the office. View DNS Essentials.
Cisco Umbrella / Secure Access DNS Advantage
Everything in DNS Essentials, plus partial proxy inspection of risky web traffic, custom URL block lists and deeper threat-investigation data. Protects: users from threats hidden on otherwise legitimate domains. View DNS Advantage.
Cisco Umbrella / Secure Access SIG Essentials
Full cloud security for web traffic: DNS-layer security plus a secure web gateway that proxies and inspects web traffic, a cloud-delivered firewall (Layer 3/4), a cloud access security broker (CASB) for visibility and control of cloud app use, and sandbox analysis of suspicious files. Protects: web and cloud app use for staff wherever they work. View SIG Essentials.
Cisco Secure Email Threat Defense
Supplemental email security for Microsoft 365 that uses Cisco Talos threat intelligence to detect phishing, business email compromise, malware and malicious links in inbound and internal mail. It connects to Microsoft 365 through the cloud, so your mail flow does not change. Protects: your inbox, the most common way attacks start. View Email Threat Defense.
Huntress Managed EDR
A lightweight Huntress agent on Windows, macOS and Linux computers and servers. Huntress’s 24/7 SOC investigates suspicious activity, contains threats, and provides remediation guidance. On Windows, Huntress can also manage the built-in Microsoft Defender Antivirus. Protects: laptops, desktops and servers, including when they are off the office network. View Huntress Managed EDR.
Huntress Managed Security Awareness Training
Short, story-driven training episodes and phishing simulations, scheduled and managed for you, with reporting on completion and phishing results. Protects: your people, by teaching them to recognize phishing and social engineering.
Huntress Managed ITDR
Identity threat detection and response for Microsoft 365. Huntress watches for unusual logins, session hijacking, credential theft, rogue OAuth apps and malicious inbox or forwarding rules used in business email compromise, and Huntress’s SOC responds. Protects: Microsoft 365 accounts after someone signs in. View Huntress Managed ITDR.
Huntress Managed SIEM
Collects security logs in one place, from the Meraki firewall, the Meraki dashboard, Duo and Umbrella, plus Microsoft 365 audit logs, so Huntress’s SOC can correlate and investigate them. Protects: your ability to spot, investigate and document security events across every layer. View Huntress Managed SIEM.
Backup add-ons (quoted, any tier)
Microsoft 365 / Google Workspace backup keeps separate copies of cloud email and files so deleted, overwritten or encrypted data can be restored. PC/server backup does the same for computers and servers. Both are quoted to your needs. Protects: your data if it is lost, deleted or held for ransom.
Installation, assessment and quotes
Every Secure Office package starts with a free network assessment. We review your current firewall, switching, Wi-Fi, logins, email and computers, recommend the package that fits, and give you a quote. Installation is quoted per site. Hydrasat also handles secure network design and implementation and structured cabling when an office needs them.
Prefer to talk first? Contact Hydrasat or call 1-800-768-7875.
Book your free network assessment and quote
Serving Covington, New Orleans and the Northshore
Hydrasat is a Cisco Partner based in Covington, Louisiana. We provide Cisco Meraki managed security for small businesses across the Northshore and Greater New Orleans, including Covington, Mandeville, Slidell and New Orleans. See our Northshore IT and network services and our approach to comprehensive layered security.
Frequently asked questions
What is Cisco Meraki managed security for small business?
It is a Cisco Meraki network and firewall, plus login, DNS and web, email and endpoint security, set up and managed for you. Hydrasat’s Secure Office packages combine these layers in three tiers so a small business gets layered protection without managing each product itself.
Which Secure Office package is right for my office?
Essentials covers the security basics. Standard suits offices that handle customer or financial data and want stronger login and web protection and trained staff. Advanced suits medical, legal, financial and regulated businesses that need full monitoring, logging and resilience. A free network assessment confirms the right fit.
How is a Secure Office package priced?
Each package is quoted after a free network assessment, based on your office. Installation is quoted per site, and backup is a quoted add-on.
Are Meraki licenses a separate Hydrasat service?
No. Each Meraki device needs its Cisco license to run, so licenses are part of the hardware and are quoted with the equipment. Hydrasat’s managed Meraki network service is separate from the licenses.
Can I get a 48-port switch or add backup?
Yes. A 48-port switch is an option on any tier, and Microsoft 365 / Google Workspace backup and PC/server backup are quoted add-ons on any tier.
Do you serve Covington, New Orleans and the Northshore?
Yes. Hydrasat is a Cisco Partner based in Covington, Louisiana, and works with businesses across the Northshore and Greater New Orleans, including Covington, Mandeville, Slidell and New Orleans.
Cisco Umbrella is transitioning to Cisco Secure Access; packages move to Secure Access as it becomes available. Final configuration is confirmed by assessment.
Cisco, Cisco Meraki, Catalyst, Cisco Umbrella, Cisco Secure Access and Duo are trademarks or registered trademarks of Cisco Systems, Inc. Huntress is a trademark of Huntress Labs Inc.