The issue that I found was that Device guard was enabled on windows 11. Disabled device guard via GPO and the issue was resolved. PC had to be rebooted after the port was changed back to 802.1x. ... View more

Mandatory selfie with @CptnCrnch at the CiscoLive CCIE party   ... View more

I know it's 2 years late however, I've just stumbled across this trying to source the exact same information. The closest I've got to answer is - https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Content_Filtering_Powered_By_Cisco_Talos And then click on the link to BrightCloud.  ... View more

Not sure if others already have this but I got a new 'Try new version' popup today on the 'Get help & cases' page (now named 'Support Center').   It has the Recent Cases shown on that page with a link to go to the All Cases page ... View more

I have completed all the required tasks.  Good luck to all my friends here. ... View more

Hello Alemabrahao   Follow your advice, I will get below error.   update SSID Fail with error: "encryptionMode" cannot be "WPA2 only", & must be set to one of: ['open', 'wep', 'wpa', 'wpa-eap']   But I try below code can get success.   dashboard.wireless.updateNetworkWirelessSsid(networkId=networkID,number=ssid[ssidname],radiusServers=radiusServers, name=newname, encryptionMode='wpa-eap')     I will keep use this code. Thanks for your help.   The error code at begining is error for authentication mode, but finally I fix by encryptionMode? It's interesting.   ... View more

"new" known issue :    AMI not sending RADIUS traffic ... View more

Original writeup came out a few weeks ago: https://www.top10vpn.com/research/wifi-vulnerability-ssid/   I wouldn't expect a fix to be released quickly, if at all! ... View more

Hi, seem downtime is the same from our site. By the way, thank you for your information.     ... View more

@Roey1984 If you claim the order numbers you can assign the devices to a network and assign the licenses to the devices all at once, you would only claim a serial number on it's on if you are replacing hardware i.e. an RMA or you like doing things the long way 😉 ... View more

>specifically by conducting port scanning of our network IP   Port scanning won't trigger anything.  You'll need to try an actual exploit.  Metasploit is a well known popular tool for doing this kind of thing. https://www.metasploit.com/   ... View more

@RaphaelL 's statement is correct. ... View more

It is also spelled out in Meraki's documentation. Yes Meraki is meant to be "simple"(ish) but this is still business-grade networking, and I don't really buy that one extra dot of documentation is making their firmware upgrades unusable, it is just a benefit to certain people and meaningless to others. ... View more

I do not completely understand your point. Why is it another point of failure? You need a routing device without NAT. NAT excemption would achieve this, I think. You can configure a VLAN interface on the LAN side with one address out of the /29 subnet. ... View more

This infuriates me to no end. Constantly claiming that they are 'enterprise' yet no way to test upload speeds on the equipment that costs thousands.  Here is a screenshot of me (while at the office) testing my UDM-Pro ($350) at home. Why is this so hard?   ... View more

Currently, the device utilization value is calculated based upon the CPU utilization of the MX as well as its traffic load   If additional data is needed then please contact Meraki support who have access to more granular data to diagnose an over-utilized CPU.   https://documentation.meraki.com/MX/Monitoring_and_Reporting/Device_Utilization ... View more

So the Saga Continues, What we found reviewing the PCAP line for Line was the client was inserting 2 cyphers that were tls1.3 cyphers. TLS_AES_256_GCM_SHA384 Yes TLS 1.3 TLS_AES_128_GCM_SHA256 Yes TLS 1.3 Responding server does not yet support tls1.3. Disabled the TLS1.3 cyphers and now the initial Handshake connects ok.    It does introduce another issue  subsequent connection attempts get ignored and fail to connect server.  I suspect between the VM interface and Miraki    PCAP now only show the initial SYN,ECE,CWR with TCP conversation [completeness:  incomplete, NO_DATA] ... View more

Yeah that screenshot is definitely not the correct one. I will file an internal ticket on it as well.   Thanks for catching it    ... View more

Hi ,   At the moment you can only use https://developer.cisco.com/meraki/api-v1/get-device-live-tools-mac-table/ on switches. So I don't think there is any way to get the equivalent data on a MX.   Edit: My reply is only for the API. As noted by cmr , you can view some of the info via the dashboard ( Topology ) or liveTools (ARP table)   ... View more

Good point. I'm testing with 18.1 and a lot of increase in performance with 18.2. Might be worth to try ... View more

The MAC in question belongs to AXIS Communication device (a security camera or a door access unit). AXIS by default has "link-local" or "fallback" IP address setting turned on. This means, unless that feature turned off, the device periodically advertises its self-assigned backup IP address, and ready to use as a main address it in case DHCP server is not present on the network. That address is in APIPA range 169.254.x.x.  Since the DHCP or statically assigned main IP address and this fallback address are coming from the same device, Meraki catches that subnet mismatch in the logs. It is harmless, but you can turn off fallback setting on the camera, and it will stop appearing in the logs. ... View more

Hi @Ilya_Kisel    Progress tracking and updates would need to come from Meraki Support. If you haven't already please open a Support case and they can link your issue to the parent issue for tracking & updates.   Cheers ... View more

Did you ever get this resolved? I assume you are getting NAT traversal errors? I am having a heck of a time here. I was on MX 18.210, some of our equipment can't go that high. I had one site downgraded get NAT type B. I can go online with wordwide of regional, but if I try making a room I can, but I cannot join with another. This is with MK8. Very frustrating as we are trying to start e-sports leaques. ... View more

If a shared IP is used it would be expected to the use that IP, depending on which interfaces is active/primary for VPNs would determine which of the potentially 2 VIPs to use.  ... View more