thanks. but this also affects my site to site vpn connection as well right? like i.e. they'll have to peer with WAN2 now? thanks ... View more

Alan,   I like pictures, so lets look at two possibilities:   1) Security & SD-WAN > SD-WAN & Traffic shaping. Make sure that the uplink config for your WAN 1 reflects your new capabilities:     2) On the Local Status page (http://mx.meraki.com/#ethernet) Make sure the Link Negotiation is thusly: see more about this at: https://documentation.meraki.com/zGeneral_Administration/Tools_and_Troubleshooting/Using_the_Cisco_Meraki_Device_Local_Status_Page   ... View more

I just tried this myself with the auction category and got the correct result on eBay.com and auction.com "This site can not be reached." I was just using the quicker "Top sites only" option. From setting the filter to observing the response was pretty quick (under 5 minutes.)   And below here are the Event log results:     So are your clients whitelisted? ... View more

So advantages of Meshing: are there any?   I think it is on by default. Any input from the wise, and Meraki Employees? ... View more

@Richard_W wrote: That would be because you do not have the Advance License, you must have the Enterprise License. Indeed, and just in case... if it's not there it won't block anything :). ... View more

I had this issue too. the short answer as laid out below is that VPP does not support in-app purchases nor subscriptions.   That said, the work around I did was:   Assign the app to an VPP Apple ID (We had already established a corporate catch-all Apple ID prior to VPP) Assign a particular user to receive the invites for licenses (in this case me, note invite email does not have to equal Apple ID used for these assignments) Deploy App On device go to App Store, sign in with assigned Apple ID and download app onto device (limitation 10 devices) Purchase subscription/in-app purchase via app This process is outlined via: https://documentation.meraki.com/SM/Apps_and_Software/Apple_Volume_Purchase_Program_(VPP)   Thus far I have tested this process with an in-app purchase on an Apple TV and a Subscription on an iPad app.   Ideally Apple should enable this via Business Manager, but being it's 2020, I'm not holding my breath.   ... View more

I have not had any success removing/unistalling a VPP deployed app but would be interested in your outcome. ... View more

had to manually install the agent to trigger Meraki Management profile to begat others… ... View more

I had an open case (over a year) on this and support (thanks) upgraded the SM Agent. ... View more

I'm assuming the LTE is plugged into WAN1?   If so, your config is correct.   Sometimes people calculate traffic shapping slightly differently (for example, some systems only count the payload others count the header+payload). Perhaps try loweing your numbers slightly on WAN1 and see if that makes any difference.   Is there any chance you are simply generating a lot more load for short periods of time and the traffic is being correctly dumped?  Traffic shapping can only buffer the traffic for so long before dumping it.   Also note that IPSec does not always respond that well to traffic shapping.  It has something called a "replay window".  If packets get reordered by something (such as some smaller packets get sent before some larger packets) and the re-ordering is greater than the replay window the whole VPN will oftten tear down and then rebuild.   Also if your cellular provider is using carrier grade NAT and the UDP sessions are torn down after a fixed period of time you'll see constant VPN rebuilds happening, each time causing traffic loss.  If your cellualr provider gives you public IP addresses with no firewalling you tend to have less issue (this is often done by selecting a specific APN). ... View more

I too am running JIVE, but have some random call quality issues. I would love to see what you final set up is, if at all possible. ... View more

Thank you for your answer. I think this is NAT problem not private IP. Although wan interface of MX has private IP, It can use AutoVPN in case of the front device of MX can support NAT.   Thank you. I understand.   ... View more

Happy Birthday! ... View more

Good, I was wondering if that might be the issue. Glad it worked out. ... View more

The easiest way would be to completely bypass Systems Manager and use a Software Management software that actually works like Munki. ... View more

Well at least we know it's broken then I guess and not our setup. ... View more

this:   sudo softwareupdate --ignore "macOS Catalina" as a command, I deployed via ARD - not that that helps but may get you further along  ... View more

Another top tip for locations:   You can set up locations based on network requirements, say for example you can have an Ethernet only network location by removing all other network interfaces by judicious use of the minus button.   Another good use of the locations is to check to see if networking issues can be troubleshot down to an interface. Say a client can't connect wirelessly: Make a test location, do the Apply and see if this resolves. If it does all you have to do, in the original location, is remove and re-add the errant interface (in this case the Wi-Fi, with - followed by an +) and don't forget the Apply.   ... View more

and it dropped… ball in your court. ... View more

Right, I shall give that a try! ... View more

@JanNovak @Richard_W @MeredithW @vassallon    Hi Guys,   Going off what Richard_W said, it seems he was correct. The Success message in the activity log is to start the download. If you open up General > iPad Storage, you can see the update downloading after the Success message appears in the activity log.   I suppose, if an update starts installing right after Success appears in the activity log, this is probably because the update had downloaded and needed a trigger to start installing.   The only slight problem to solve, is that if you watch the download in iPad Storage, it quite often appears to get stuck. Sometimes it needs the the install update command re-sent to re-start the download. At least I've got a live update of this now and can see how it's going.   Regards   Simon      ... View more

Any clarification from a Meraki Employee here would be nice ... View more

As an update, AT&T sees an issue with 8.8.8.8 but has offered no solution other than it is a google issue, although 8.8.4.4 is fine and 8.8.8.8 via WAN 2 is fine. ... View more

Ah very nice!    Agree regarding the pasting option @BrechtSchamp  ... View more

@PeterJames I appreciate that suggestion.  I will see if I can take a look at the keychain...  My experience with Apple programming is limited, unfortunately, because I write apps using HTML/CSS/JavaScript, then compile them into native apps using Cordova.  I use XCode only at the end for on-device debugging, final building, and distributing -- so I know very little about what goes on behind the scenes in XCode, but I'm sure Google will have something regarding keychains in XCode-built apps. ... View more