VAPT for Mearki Devices

[npnitin]

Hello Experts,

My company conducted VAPT for network devices including Cisco, HP and Meraki devices. For Cisco and HP, VAPT tool generate the report successfully but for Meraki switches it not able to generate the report. And Meraki switches able ping that VAPT server.

And VAPT is not using any credentials for this testing. 

[ww]

There is no logging in your tool? Why it fails to generate a report?

[npnitin]

As per the VAPT team, they are using two methods 1st is using credentials and accessing the devices via SSH

and 2nd method is without credentials. they need the mgmt IP of that device only.

It works on other OEM switches but not on Meraki.

[Brash]

My guess would be that the tool doesn't know how to test/interface with Meraki equipment.

Meraki gear isn't accessible via SSH

[PhilipDAth]

It sounds like the tool you are using is not able to find any security issues with your Meraki equipment?

[npnitin]

After enabling Local page status, the VAPT software is able to scan the devices.