New articles:
Change: New articles.
SASE:
Change: Added "Any new MX models released after January 2026 are currently not supported (example: C8455)."; added "Currently enrolling large number of sites at the same time is supported using templates only."
Change: Added "Currently enrolling large number of sites at the same time is supported using templates only."
Change: Added "Currently enrolling large number of sites at the same time is supported using templates only."; added "It is highly recommended to test connectivity with test users prior to migration maintenance window. This will ensure that all policies are configured correctly."
Security & SD-WAN:
Change: Added "Use cases for static routes should not exceed a recommended maximum limit of 1000 static routes."
Change: Added section "A note on IKEv2".
Change: Added section "Assignment via Group Policy".
Change: Added "The above behavior also applies to Active Directory authentication traffic."
Change: Added "Only WAN 1 and WAN 2 can be configured from the Local Status Page."
Change: Added FAQs "I wish to use the C8455-G2-MX in warm-spare High Availability (HA) Mode. How do I order my licenses and (or) use them?", "I wish to use the C8455-G2-MX in the Unified Branch solution. Is the platform supported and should I use any specific license?", "I am currently using the capabilities provided by Meraki Insights (Web App Health, WAN Health and VoIP Health) ? Does the C8455-G2-MX support these capabilities?" and "I wish to use Secure Connect/ Secure Access with the C8455-G2-MX. What features or protocols may I use to connect on the fabric side?".
Change: Added sections "Key Considerations" and "IKEv2"; added "When the IP address of the RADIUS authentication server is reachable over site-to-site VPN, the source IP used for the RADIUS traffic will be that of the highest-numbered VLAN that is VPN-enabled. If there is no VPN-enabled VLAN or the MX is in passthrough/concentrator mode, the IP address will be within 6.0.0.0/8 (6.x.y.z)."; added "When the IP address of the Active Directory authentication server is reachable over site-to-site VPN, the source IP used for the LDAP traffic will be that of the highest-numbered VLAN that is VPN-enabled. If there is no VPN-enabled VLAN or the MX is in passthrough/concentrator mode, the IP address will be within 6.0.0.0/8 (6.x.y.z)."
Switching:
Change: Added "When adding Catalyst switch stacks to a network, please include all stack members."
Change: Added configurations for Netflow and Device Tracking.
Wireless:
Change: Added "At launch, APs and Campus Gateway should be part of the same geographical location with a RTT of less than 20ms."
Change: Added "After a C9800-CL is claimed into the Organization inventory, it will be unable to be unclaimed as it will be retained for future use. If a C9800-CL does need to be unclaimed, please contact Meraki Support."
Systems Manager:
Change: Added "Please note, the agent will require making PPPC adjustments on macOS 10.14+".
Platform Management:
Change: Added "Session modules conflict in HTTP Server".
Change: Added Vision Portal URL "https://example.sso.meraki.com/vision" to section "Defining a unique subdomain for your organization".
Change: General article updates to incorporate new firmware stages: Beta, Generally Available (GA) and Recommended Release.
