@DKrigner If you have a Cisco/Meraki partner servicing your account properly then you should be getting swag and incentives. ... View more

SEND IT! (Swag that is) ... View more

@CameronMoody  @Raj66 @MeredithW    Any update on this? ... View more

Haven't seen this, and definitely doesn't sound normal. I would recommend contacting support though to report the issue. ... View more

If using Meraki authentication then it is your login info for the dashboard. username = your email ... View more

Looks like you have been working on this for almost 2 weeks. I know you mentioned support wouldnt help with radius, but they should be able to help with device pings not working. Have you contacted them about that? ... View more

@jdsilva Nice Win! Especially with your time off this month.   Thanks @PhilipDAth @BrechtSchamp for the great contributions and competition!   @MeredithW Thanks for helping maintain this awesome community! ... View more

Best practice is use an LTE device that can do ethernet handoff (opengear/cradlepoint). The next best option is internal sim (Z3C) and then your last option UBS modem.   One thought would be to use an unlocked usb modem that supports Verizon, possibly it will work. I am not sure this one will work, but it might be worth a try.   https://www.amazon.com/gp/product/B01M0JY15V/ref=ppx_yo_dt_b_asin_title_o03_s00?ie=UTF8&psc=1   I do know this works on MX devices with T-Mobile Sim cards.     ... View more

Before you start working with the USB issues, I would make sure this device has been connected with a WAN connection and has firmware updates. ... View more

Make sure the DHCP is turned off on the unifi switch. Also best practice would be to change your 192.168.1.0 to 192.168.10.0. reason being is that alot of home wifi or public wifi is in that subnet. We have seen the issue with Macbooks more on the VPN, but they will resolve 192.168.1.0 to a local IP rather than the VPN subnet, if the MX default is 192.168.1.0. ... View more

If you don't want to go with the provided name, you can use the public IP. Another option is set a A record on your domain for something like vpn.mydomain.com and have that point to the public IP. ... View more

@Raj66    Since that traffic from the trusted IPs can be sniffed easily, then the attacker can spoof the IP easily and get around it. Again another reason I see AMP detecting this as a threat even with trusted IPs. I also would not recommend disabling AMP or turning the settings down to detection only as you have added then more vulnerabilities to your device/network. ... View more

From a security standpoint this is a terrible idea. 3389 is a widely known and scanned port. Then using Meraki DDNS is known and makes you more vulnerable. Even with a port forward like 33899 and changing the local RDP port on the machine to 33899 so it is true forwarding and not translating the traffic on that port can easily be sniffed and determined to be RDP traffic. I am guessing this is why AMP is now detecting any RDP traffic not from the VPN as a threat.   Recommendation: 1) Make them use the VPN to use RDP 2) Use a different more secure platform for long term remote use 3) If this is a once in a while kind of thing, setup the session for them with a different platform (TeamViewer or similar) ... View more

Also to think about, it stops issues where power users might be switching their own DNS settings. All in all it is added protection, I would say the best use case is remote workers and or unmanaged devices where you are trying to push your security. Helps enforce company browsing polices on wifi where BYOD are. ... View more

https://documentation.meraki.com/zGeneral_Administration/Licensing/Error%3A_%22This_network_has_been_disabled_for_non-payment%22   Contact your rep or Sales ... View more

Yes very true, but hardware additions to an existing model kind of hard. Bands especially, the only time it happens and is a very limited amount in wireless and the hardware is there to support it out of the box, but then the carrier enables it on their infrastructure and devices get software/firmware updates to handle it. All in all that is a very long process. Then take into account the FCC has to reapprove a separate device under and different ID, not that it won't or couldnt happen, but it will take a while if it does. ... View more

USB dongle!   Good luck with the wish to add bands. ... View more

I can tell you this, I have dozens of Windows 7 Pro (Ready to replace) machines using the Client VPN. Might want to double check if this is Pro or Home version. The other option you might want to see is if a fresh Windows 7 install with a client VPN is that working in your environment.   ... View more

I also I couldn't find where it is pulling the prices from easily. I did find no combo of multiplier on the MSRP plus or minus the license between the models is consistent. I thought maybe it was just putting 56 switches on the quote 🙂 ... View more

@CameronMoody  Thanks!   Not all devices are affected. I have tested on 2 browsers on 3 machines on 3 different internet connections and never once did I get the correct price on the affected models.   MS120-24 MS120-24P MS120-48 MS120-48LP MS120-48FP   ... View more

Also to note:   MS120-48FP MSRP Listed is $4370 without a license. Cisco CCW shows the list as $5330 without a license. Did the price decrease? ... View more

IE11 and Chrome 75 ... View more

What version of macOS are you running on these agents? ... View more

+1 on Thwack   Also I couldn't find a specific guide on it. One question though, what is the purpose of the webhook vs email alerts? Solarwinds I believe has an email you can hit with alerting devices. ... View more