Any way to get alerts for unknown clients connecting to a network ?

[Dave]

Is there any way to get alerts when a new or unknown device connects to a network?  I haven't found anything. 

I realize if you had public wi-fi access you wouldn't want something like this.  But in a static high-security environment knowing that new or unknown device connected to the network would be beneficial.   Even if it was just a simple email alert. 

Thanks for the help. 

[Adam]

I'm not sure of a solution but are you wanting to try to alert on this for the wired network, wireless or both?

[Dave]

Wired network only.

[Adam]

Would you want alerts when both new trusted devices and untrusted devices connect?  And I was thinking the same thing as @ww by using 802.1x you could fail any non trusted client to a "guest" vlan/network.

[PhilipDAth]

I agree, if security is such a concern use 802.1x.

Otherwise, set the default policy to block everything.  Then create a group policy called something like "Authorised", and apply it to every client that is allowed to be on your network.

Anything new that appears will be blocked.

Another option would be to deploy Systems Manager on your machines.  You could then have it auto assign the policy "Authorised". Only machines with the Systems Manager installed would be able to connect.

[ww]

if you have a secure netwerk you dont even allow unknown cliënts to connect. and if they do your radius would know this.

what is your definition of a unknown client at this moment. and how do you or meraki differentiate them from your normal cliënts?