Depends on a couple things, device connecting and what the use case, etc.   Personally with my current devices/setup MR30 all day. ... View more

Not that I am aware of. Below is some info about it.   https://documentation.meraki.com/zGeneral_Administration/Other_Topics/Make_a_Wish ... View more

Check Security Center - You will find the threat there if IDS is detecting it https://documentation.meraki.com/MX/Monitoring_and_Reporting/Security_Center   Change the Mode or Ruleset down a notch and see if that resolves the issue https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Threat_Protection   99% certain the data is actually on a different URL that googleusercontent.com. I am thinking there are multiple URLs to whitelist, although not sure of them.   Below is a doc regarding Google Drive URLs, so it gives you some ideas https://support.google.com/a/answer/2589954?hl=en ... View more

Some basic analytics are available to you without third party solutions https://documentation.meraki.com/MR/Monitoring_and_Reporting/Location_Analytics   Have you gone through this list, Retail centric? https://apps.meraki.io/apps/?industries=Retail   ... View more

You might want to turn wifi off on the router if its just doing cheap subneting. Then maybe throttle back the backups during active hours. Looks like you are making progress already! 🍻 ... View more

Is this tunnel the only 3rd party tunnel you have on the MX. If not are there any hardware similarities at the remote locations with the one you have having issues?   Do you know what the quality is of the internet connection at the remote site? Do you know the ISP is not to blame?     ... View more

I would say the MX could be undersized, but it wouldn't be my highest priority. My first priority would be to replace switches. Then ensure gigabit connections from MX to Switches to APs. I would also try to cleanup the topology behind the switches, like daisy chaining a C2300 router onto an AP. If possibly I would try to keep all APs in the same stack, then model if possible, unless use case determines a different need. Also a recommendation would be to use draw.io or something similar to document your network diagram. When it draw out and in front of you, things make a lot more sense and areas to address or common problems you have might be able to be easily diagnosed. Next I would track the 2 top highest client usages and see what kind of data they are using. Could be putting more pressure on the network. To me any one device that is using 15-25% of the total usage needs to be understood why. Maybe it is the highest use AP, but then maybe you can spread that usage across APs to help with speeds. ... View more

Somethings to clairfy:   1) You said you are using a MX64, but the screenshot shows MX65 2) Looks like your highest device usage was a TP-Link C2300 router, are you defining this as an AP? 3) You noted you have 120 clients on at a time, the highest date here shows less than 70 4) In 3 months you are under 50 clients with a couple days that peaked 70? 5) What is between the MX and the APs? (Switches?)   Personally I like to run this report daily or weekly. They analyze the trends. Then you can determine if something normal usage, trending, or an anomaly. ... View more

Check Security Center, link below. It may depend on your threat detection settings if you find stuff there   https://documentation.meraki.com/MX/Monitoring_and_Reporting/Security_Center   Here is the info about the threat detection settings.   https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Threat_Protection   I believe Mode = Prevention and Ruleset = Security and it will block RDP attempts anything less and it will warn.   My recommendation is with the countless security vulnerabilities with RDP, only do it once on the VPN.       Outside of Meraki you should be auditing the server logs for lockouts. Also there is a lockout tools available to help you sift through the logs https://support.microsoft.com/en-us/help/4469275/introduction-to-the-account-lockout-and-management-tools   Check your Group Policy settings in AD and see what the lockout policy is. Most of the time it is crazy high like 50 attempts then lockout. If it is set to 50 and his account shows locked out, you know you have a brute force issue to handle     ... View more

At your peak times I think the MX is under sized. Even at the low time with 25 users, I am assuming there are more than 50 devices behind the MX. Check the sizing guide below.   https://meraki.cisco.com/lib/pdf/meraki_whitepaper_mx_sizing_guide.pdf   @NolanHerring is spot on with the 2.4 and 5Ghz recommendations.   Also consider the AP you are using might be undersized or not getting a full gigabit link back to the MX. My thoughts would be that these needs to be MR33 or better APs. Check the link below to help you gauge usage.   https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Best_Practice_Design_-_MR_Wireless/High_Density_Wi-Fi_Deployments ... View more

There are a couple ways to do it. My suggestion is to setup a vlan and apply the restricted policy to that. ... View more

Not exactly sure what you need but my recommendation would be reset the device. Then allow it re-provision/config from the dashboard. If that doesn't happen contact support (will require a valid MR license)   Factory Reset Button If the button is pressed and held for at least five seconds and then released, the MR16 will reboot and be restored to its original factory settings by deleting all configuration information stored on the unit. ... View more

MX67 Pixel 3 XL T-Mobile Build: PQ3A.190705.003       Client VPN is working for me with Meraki authentication.   Follow these instructions, use the IP address in the server address https://documentation.meraki.com/MX/Client_VPN/Client_VPN_OS_Configuration ... View more

This exact call with this exact kind of solution, no.   I have used the API to parsr through text files in python and feed that into API calls on the dashboard. Not sure how I would rate my python skills but it's doable. ... View more

On the videos I checked they are all using the same CDN. So I would block that. Not sure if that will also change every day, but it is worth a shot. Also it seems like the service won't work without authenticating, when doing that it is doing it via the same primary domain (4kmovies.online) I would assume changing domains daily with DNS propagation and changing the location of the authentication service everyday has to be time consuming. Also IP range they are currently using is 104.31.77.0-104.31.77.255 and located in Chicago behind Cloudflare. I thought maybe you could try a block from a country outside if yours, but looks like that won't work.   cdn.4kmovies.online ... View more

Everything tells me it a server/certificate problem.   All of the current docs like this say 2048bit so I would just double check all the info about the certificate otherwise use the RADIUS authentication https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Configuring_Active_Directory_with_MX_Security_Appliances#Install_a_Digital_Certificate_on_Each_Domain_Controller ... View more

My guess it has to do with the server and TLS versions being too far out of date, but I don't have all the info.   What OS is the server (Server 2008, 2012, R2, etc.)? What OS is the client (Windows 10, 7, etc.)?   In the mean time some places to check are below.   Verify all the requirements of the Certificate https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Configuring_Active_Directory_with_MX_Security_Appliances#Certificate_Requirements_for_TLS   Assuming this is a Windows device, what error codes do you get on the client? https://documentation.meraki.com/MX/Client_VPN/Troubleshooting_Client_VPN ... View more

If you need to apply a group policy in mass you can do it from the clients details page. Just check mark all the clients wanting to apply to. Click the policy button on the top left of the list and then select the Group Policy Radio button. Then choose the policy to apply to all the clients. Another option is to do it by VLAN if you want it to apply to all devices behind the MX. ... View more

Assuming you are trying to block a 3rd party I would go with Group Policy or Content Filter   Find the client from the Client Details Page - You can cick the plus icon on the right had side of the column headings and add MAC as a caterfory. If you know the MAC you can do a search of all the clients on that page. https://documentation.meraki.com/MS/Monitoring_and_Reporting/Client_Details_Page_Overview   Group Policy - Create a policy and apply to the client. In the Policy define how you want to block the VPN (IP, category, URL, etc.) https://documentation.meraki.com/MR/Group_Policies_and_Blacklisting/Creating_and_Applying_Group_Policies    Content Filter Option Blocking VPN outbound/ IPVanish  ... View more

Not supported on the MS120 model.   Supported Models are listed in this document and more info regarding the feature.   https://documentation.meraki.com/MS/Other_Topics/Dynamic_ARP_Inspection ... View more

If nothing has changed on your end, it sounds like your ISP might be blocking the new IPs or ports. Sometimes these things are fixed by the provider relatively soon on their own. Sometimes they are not so quick and need a call to help get it resolved. I would start with your MX or Z device and work on getting that to show connected to the Meraki cloud first. ... View more

We should have a Tier 4 ... View more