I don't think there is any detailed documentation about it.  It may be considered proprietary/secret to some degree.  I have noticed odd descriptions there too, but one explanation can be things like VMWare or a Mac user running Parallels or VMWare Fusion so the same machine can actually connect to the network as two different hosts either at different times or even at the same time.  There is little flag you can use to submit suggested corrections next to the names.     ... View more

I see.  I think you can just ignore the port numbers and try adding those domains to your whitelist, but unless you already had them explicitly denied I am not sure that is going to solve it.   You might also try whitelisting a couple of clients completely to test. If whitelisting the client fixes the issue you know you can somehow adjust content filters and firewall rules appropriately.  If whitelisted clients still have the trouble then there must be another reason.   I have a hunch this could be related to a session timeout and you can't modify those on Meraki. Maybe support can for you though.     ... View more

There are some free and low cost options here: https://www.opendns.com/home-internet-security/   You enroll for free or paid and then tell it your public IP or IP block to filter against.    To ensure users can’t bypass this DNS that you would serve via DHCP presumably, you could create firewall rules denying all DNS port 53/UDP except OpenDNS/Umbrella and that should do a good job complying with blocking adult content for a library.  My generally understanding for the laws around this in the US is that you make a reasonable attempt such as this and are not liable for reporting or instances where people find a way around it.    ... View more

If I understand correctly I have just done this exact thing for a customer on a small campus with fiber connecting two buildings and full stack Meraki.  Building A had been primary and building B was just switches and wireless sharing building A internet via the fiber link.  Then they added dedicated internet for building B so I added a MX and put that new internet in WAN 1.  Then I created a dry VLAN on the switch and connected WAN 2 of building B MX into an access port with that VLAN (say VLAN 999). I made sure VLAN 999 was tagged and trunked back to building A.  Back at building A an access port with VLAN 999 was plugged into another "regular" switch port that would provide DHCP and internet access).   They did not care to do the opposite for building A to ever fail to building B, but I see no reason I could not have done that too.   Does that track with what you are trying to do and make sense? ... View more

Just a guess, but try whitelisting the client or toggling AMP and/or IPS/IDS and content filtering off to see if it changes. ... View more

My finger would be pointing at the ASA.. Maybe a simple way to confirm that is to take one phone home or to another network to prove it works fine. Or, maybe you can find a way to bypass the ASA. Then ask the team that manages the ASA to fix it..   Here is everything you should need to know about Ringcentral: https://support.ringcentral.com/article/9233.html   Good luck.  ... View more

Cisco says, no: https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-sudo-privesc-jan2021-qnYQfcM.html     ... View more