What do you see when you go into Security Centre and look at the Mx events? Click into the packet captures and you’ll see which endpoint is possibly affected.
Darren OConnor | doconnor@resalire.co.uk
https://www.linkedin.com/in/darrenoconnor/
I'm not an employee of Cisco/Meraki. My posts are based on Meraki best practice and what has worked for me in the field.
