Documentation Feedback: AnyConnect on the MX Appliance

[MerakiCommunity]

This is the community thread for feedback and questions on the documentation article AnyConnect on the MX Appliance.

[MyHomeNWLab]

I contacted support last month.
I inquired whether the following matter is a bug or a specification.

vMX and Client VPN on Microsoft Azure - The Meraki Community
https://community.meraki.com/t5/Security-SD-WAN/vMX-and-Client-VPN-on-Microsoft-Azure/m-p/103379

[Topic Summary]
The value of the Meraki vMX AZ setting determines whether the Client VPN (L2TP, AnyConnect) can work or not.

* If AZ is set to None, the Public IP SKU is deployed as Basic. Client VPN works when SKU is Basic.
* If AZ is set to 1 - 3, the Public IP SKU is deployed as Standard. Client VPN does not work when SKU is Standard.

This matter appears to be undetermined / undefined.

Therefore,...
It is not a bug, as it is not yet determined / undefined.
It is not a specification, as it is not yet determined / undefined.

I would like to see just the current information clearly stated in the document.

If not documented, more customers may be affected.

Furthermore, the quality of Meraki vMX products is suspect.

It will be the Meraki MX on Azure rather than AnyConnect-specific, but I'm including it here because there is no topic for it.

vMX Setup Guide for Microsoft Azure - Cisco Meraki
https://documentation.meraki.com/MX/MX_Installation_Guides/vMX_Setup_Guide_for_Microsoft_Azure

[MyHomeNWLab]

Related Topic

VMX with client VPN or AnyConnect - The Meraki Community
https://community.meraki.com/t5/Documentation-Feedback-Beta/VMX-with-client-VPN-or-AnyConnect/m-p/14...

[EchoApeiron]

Is the custom domains feature available currently in beta firmware? Is there a plan to have it release soon as part of the AnyConnect beta itself?

[Stan82]

Please add code token-based MFA support in SAML and Radius authentication scenarios.
"Authenticator App Push" and "Phone Call" methods (driven by IdP back-end) works fine but the Authenticator code or SMS code methods (where Cisco AnyConnect VPN client should present field to enter the code) don't work and inherited the legacy behavior from the legacy VPN.
Thank you