Documentation Digest: October 18th - October 24th

[Hannah-C]

New articles:

Thousand Eyes Integration with Secure Connect

Change: New article.

TLS Protocol and Compliance Standards

Change: New article.

Secure Connect:

Cisco Secure Connect - Cloud Firewall Policy

Change: Added "Meraki Cloud Firewall page is optimized for Secure Connect and should be used for all configurations and maintenance of firewall rules.  It is not recommended to use Umbrella Firewall Policy dashboard."

Cisco Secure Connect Foundation Meraki SD-WAN Integration

Change: Added sections "Connect Meraki SD-WAN Branches to Secure Connect Regions", "Select Local Networks Announced to Secure Connect", "Sites Monitoring" and "Using MX Firewall Forwarding Rules with SD-WAN Tunnel".

Remote Access - Secure Client configuration

Change: Added "When the remote users reach the maximum time of the VPN session, the VPN connection will be disconnected with below error message pop up and they will need to re-connect to the VPN for accessing company's resource."

MX:

SD-WAN and Traffic Shaping

Change: Added "For routed mode devices, it is currently advised to configure any rules which remap priority such as 'high', 'medium', or 'low', via a rule within the Group Policy section under Network Wide -> Group Policies. Rules configured within the SD-WAN & Traffic shaping page which remaps the priority of traffic is currently deprecated."; added queuing method behavior for firmware MX 18.2 and above to section "Rule Actions".

Content Filtering Powered By Cisco Talos

Change: Updated upstream firewall prerequisite to include TCP port 443.

MX Warm Spare - High-Availability Pair

Change: Added "Adding an online/offline spare MX in the dashboard network will cause a brief connectivity loss on the primary MX due to the initialization of the HA configuration."

Managing and Troubleshooting AnyConnect Certificates

Change: Added note to ensure that Anyconnect clients are connecting using the custom DNS name and not the MX DDNS hostname when using custom certs.

MR:

CW9166 Datasheet

Change: Added "The CW9166 RJ45 console port is only available when in Cisco DNA management mode."

Configuring RADIUS Authentication with a Sign-On Splash Page

Change: Added "RADSec is not supported for splash authentication."

Automatically Integrating Cisco Umbrella with Meraki Networks

Change: Updated wording regarding licensing "Before May 2022, adding an MR Advanced or MR Upgrade license to a co-term organization would initiate a PDL conversion process; however, this is no longer the case. Conversions from co-term to PDL are no longer supported, as referenced in the Per-Device Licensing article."

Location Analytics

Change: Added "This 20 minute period begins when the AP receives the first probe with RSSI of 15 or greater."

SM:

Tags Management Page for Systems Manager

Change: Added "Please note Device Tags are Auto-Tags with device enrollment and have a magic wand icon that cannot be deleted from the dashboard."; added "Deleting Owner Tags" to section "Deleting Tags".

MV:

Gen3 Meraki MV Mounting Options and Guidelines

Change: Added "Dimensional Diagrams" for MV mounts.

Vision Portal Integrations: Access Control

Change: Added descriptions to section "Tour of the Interface".

Meraki Vision Portal Changelog

Change: Added release notes for up to v1.23.2.

Video Walls

Change: Added note "Camera-only admins (view live, view historical, view and export footage) may still be able to see the "Edit Layouts" button on the Video Wall, however, they cannot make changes to the Video Wall."

MT:

MT15 Installation Guide - Indoor Air Quality w/CO2

Change: Added "Dimensions of the mounting plate is 105mm x 105mm."

General Administration:

Using the Organization Inventory

Change: Added "If the device is claimed to the inventory through Device Serial instead of Meraki Order number, the Meraki Order number will not be listed against the device in the Organization > Inventory page."

Cisco Meraki Support Call Recording

Change: Updated call recording duration to 180 days.

Meraki Status Page

Change: Added section "Subscribing to Slack Updates".

Managing Dashboard Administrators and Permissions

Change: Updated click path for combined and non-combined networks "Navigate to Network-wide > Configure > Administration if the network is combined, or Network-wide > Configure > General if the network is not combined."

Device Uptime

Change: Added Cloud monitored Access Points to the list of supported devices.

SP-Initiated SAML SSO Configuration Guide

Change: Added "If using the Meraki for Government dashboard, the URL would be https://account.gov-meraki.com/login...login?sso=true."

[RaphaelL]

SD-WAN and Traffic Shaping

Change: Added "For routed mode devices, it is currently advised to configure any rules which remap priority such as 'high', 'medium', or 'low', via a rule within the Group Policy section under Network Wide -> Group Policies. Rules configured within the SD-WAN & Traffic shaping page which remaps the priority of traffic is currently deprecated."; added queuing method behavior for firmware MX 18.2 and above to section "Rule Actions".

Not sure I like / agree with that change , but this deprecation went ultra low profile since no one seems to be aware of that. 

[Brash]

I'm a bit confused on this one... I don't see a way to set priority (low, medium and high) via group policy.

I can only see the options to set DSCP or CoS values.

[RWelch]

@Brash I tend to see it on my older MX65W and MX68W but not on MX75, MX95 or MX105s.  Until it was referenced in the Documentation Digest and commented by @RaphaelL I almost forgot about it.

[Brash]

Oh, how weird/annoying.
I don't see the option at all on any of my networks (MX68, MX68CW, MX75, MX95).

I would love the option to set it from group policy as it would suit my design better.

[RaphaelL]

This is what I'm seeing on my 2 MX68CW running 19.1.4 and 18.211.3 : 

Both in combined networks

[Brash]

This is what I see too - the ability to change PCP (CoS) and DSCP but not Priority.

[ww]

I dont see it in the documentation (anymore?)