Automated way to enable AMP across many networks???

[flytripper]

Looking for an automated way to enable AMP across org with 400 locations "networks".  

Simply just want to enable AMP under Advanced Malware Protection (AMP) section in Security & SD-WAN >Configure > Threat protection and set the Failure Mode to Open.

As a bonus looking for a way to automate updating whitelist URLs / Files if needed in the future.  

Trying to avoid having to click, click, click, check box, apply repeat - 400+times.  

[jdsilva]

You can do this through the API

https://dashboard.meraki.com/api_docs#set-the-supported-malware-settings-for-an-mx-network

[flytripper]

The API will turn AMP on/off but it seems that the API does not support the ability to toggle the FAILURE MODE to OPEN.

Anyone have a way of doing this using automation.  

[jdsilva]

Oh, shoot. Sorry about that. I missed that part 😞

I don't see anything in the API that does this. You might be out of luck.

[Owen]

This is what templates are made for. Change once per template.

[flytripper]

Is there a way to create a template the only applies the AMP settings I want and then push that to the networks?  From my understanding of templates, they are really useful for building/copying "net new" sites but I cant find any way to leverage them for ad-hoc mass changes.  Further, the documentation on them seems to indicate that if I apply a template to an existing site - it may wipe away many settings.  Do you have experience with these? 

[swifty]

I have the same q.
Any lurkers ?
My reqt is pretty similar - have built 100+ sites (network envy of >400 😉) individually, but want to edit URL filtering directly, either in one go or probably by using a small number of templates applied in groups, to handle a staged implementation.
Yes, we can use the API, but a GUI method is even more widely available.