I'm not aware of such a tool. Depending on what is configured on your ASA, some things might even not be able to be migrated. ... View more

What are you going to use AAA Accounting for?   Perhaps Netflow could be an alternative (depending on what you're planning) ... View more

Same here. Didn't have a chance to play around with Azure and (Auto)VPN ... View more

Can you ping api.meraki.com from within the container? Are you able to connect to some other http service from it? ... View more

Network object documentation? Is it finally happening? 😳 ... View more

Please note that „Beta“ within Meraki is something different than vendor XYZ. Please take a look at https://documentation.meraki.com/zGeneral_Administration/Firmware_Upgrades/Meraki_Firmware_Release_Process   „The latest beta firmware is fully supported by our Support and Engineering teams. Older betas are supported with best effort; an upgrade to the latest beta will ensure full support.“   I‘m running 15.x also on customer sites and never experienced any „typical beta issues“. Even when there was something popping up, it was never a problem regarding TAC (see above). ... View more

From a logical standpoint: RADIUS is simply another protocol running over the VPN tunnel. In case it‘s not being blocked by something in between, there‘s nothing that should stop it because of the VPN tunnel.   I fear that‘s the only thing that we can tell you without further information. Sorry!   P.S.: Looking at the forums, there a several others that are successfully running such kind of setup. ... View more

As with other posts currently going on: could you please elaborate further on your setup? I guess it should be good as TAC already was involved but on the other hand, how do you expect us to help you based on the basic information you‘re giving us here? 🙂 Are you really expecting us to be smarter than Cisco AND Meraki TAC without even knowing some backgrounds? Of course, this would be a great honor. 😉 ... View more

Exactly what @BrandonS said. I‘m seeing a lot of posts in the last few days where one would need a deeper insight into the environment in use. You‘d like us to help you out, right? So please provide us with the information needed. 🙂 ... View more

IIRC, Cisco legacy switches also automatically allow the native VLAN over the trunk. Don‘t know how many folks would have shot themselves in the foot otherwise (me included). 😉 ... View more

Well, really simplifies it‘s another protocol running over AutoVPN. Which VDI solution are you referring to? What does the setup look like?   Simplified further: if you can pin down the protocol and port(s) talked, you can prioritize that kind of traffic. But again: what does your setup look like? There are a lot of factors that need to be taken into account that makes it hard to give definite answers here. Or perhaps I‘m missing some obvious stuff...   What‘s „WVD“ you’re referring to with authentication? ... View more

Anything else between clientband SSH server? Your trace clearly shows that connection resets are being returned, so there has to be some device that does this. Normally some kind of firewall.   Without further knowledge about the setup, we can only guess... ... View more

Strictly speaking, you connections are getting back a Reset / RST. Sounds like there is no service listening...   Is this a trace on the client or where did you capture? ... View more

I'd take a closer look at my logs and possibly start a Trace for these kind of connections. ... View more

Simple solution: use a real password manager. The built-in ones into browsers are flawed by design. There are enough examples for that, e.g. https://www.anti-malware.name/news/vulnerability-in-firefox-password-manager/ ... View more

Well, there's nothing that would prevent it from working. On the other ha,d to fully answer that question, a little background about the infrastructure would be nice.  ... View more

If RADIUS traffic is not blocked, there's no reason why this shouldn't work. What does the configuration look like on both sides? ... View more

Great question though!   Some kind of ideas (possibly even „best practices“ regarding ISE) and some background how „random“ MAC addresses are formed can be found in this document, highly recommended: https://community.cisco.com/t5/security-documents/random-mac-address-how-to-deal-with-it-using-ise/ta-p/4049321 ... View more

Whoops, sorry. Didn’t look that one up specifically... 😕   Thanks for clarifying! ... View more

In case you‘re wondering why @Uberseehandel strongly advises against using Vlan1: historically, there has been something called „VLAN hopping“ that leveraged the default VLAN to „hop“ into others that should notbe accessible by the attacker.   Please find more information here: https://portunreachable.com/vlan-hopping-vulnerability-527ee506dae3 ... View more

Not directly. You could leverage the API to run a cronjob that triggers the WoL command, but that‘d rely on an external script. ... View more

So what exactly is the question here?   On the other hand, to really answer your question(s), one would have to know more about your infrastructure, e.g. what is that server mentioned running (OS and services). I would assume that you‘re seeing an IDS alert for something that wouldn‘t have hit because of different OS or service. ... View more

Wow, so you're officially old (too)! 😉 BBS time was really great, and they had me started my IT career because of the reason mentioned... 😁   Welcome to the forums! ... View more

You can restrict to the Dashboard to your Login IP ranges („Organization“ -> „Settings“ -> „Login Ip ranges“). I don‘t know if that also works for API access. ... View more

Just the force....erm API: https://dashboard.meraki.com/api_docs/v0#list-the-static-routes-for-an-mx-or-teleworker-network   It‘s a simply call, afterwards you can stuff these into whatever you‘d like (and whatever your programming language allows you to). ... View more