Meraki System Manager Sentry, authentication

[Kushan]

We are planning Meraki System Manager(SM) Sentry for enterprise user's certificate based machine authentication, and have few queries.

Can Simeone please guide here ?

1) When we do Azure AD based authentication, will Meraki dashboard authenticate Machines as well (along with users) from Azure AD database? or Do we need to manually enroll device in SM first ?

2) How will "SM Sentry" determine that Machine is not non-corporate when it enrolls for the first time ? By checking first with Azure AD ?

3) System Manager license is 80$/MR for 3 years, does it mean we can enroll as many Windows Device as possible ?

[alemabrahao]

Take a look at the documentation:

https://documentation.meraki.com/SM/Device_Enrollment/SM_Enrollment_Authentication

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Certificate-based_Wi-...

I recommend you ask your Meraki sales representative consultant.

[PhilipDAth]

>How will "SM Sentry" determine that Machine is not non-corporate when it enrolls for the first time ? By checking first with Azure AD ?

Depends on how you configure it.  But if you have it setup for a user to authenticate against Azure AD, then that authentication will need to be completed before the client can finish enrolling.

>System Manager license is 80$/MR for 3 years, does it mean we can enroll as many Windows Device as possible ?

The Systems Manager price is per managed device, not per MR.  So if you have 100 Windows machines, you'll need 100 licences.

You could request a trial of Systems Manager to see it working for yourself.

https://meraki.cisco.com/form/trial/