Auto VPN Whitepaper

[MattSc]

Hi,

I'm trying to find some clarification around a particular entry in the white paper around Auto VPN

1. MXs advertise their WAN IP addresses and any active NAT traversal UDP ports to the
Cisco Meraki cloud. Device-to-cloud communication is encrypted twice: once via Meraki-proprietary
encryption and again using SSL.

It mentions SSL is in use, is this correct? and if so which version would it happen to be using? we have been asked to clarify this in a project we are currently working on.

[PhilipDAth · Accepted solution]

The term SSL is used generically.  It is TLS.  It is talked about briefly here.

https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/... 

The AutoVPN whitepaper only mentions TLS.

https://meraki.cisco.com/lib/pdf/meraki_whitepaper_autovpn.pdf 

I'm not aware of anything stating the TLS version in use.

I would think that as part of PCI compliance it would be mandatory to use TLSv1.2.

https://meraki.cisco.com/trust#pci 

[MattSc]

Hi Phillip,

Thanks for the link to that version of the whitepaper, it seems as though i had obtained a rather old copy of the paper which is what sparked the question, appreciate the updated copy.