Amen to what these two gentlemen said! Never ever try to concentrate on one single solution when it comes down to security. This is completely going to fail big time, hopefully the reasons already mentioned are already enough.
... View more
Sure, you can do EMail confirmation for guest accounts: https://documentation.meraki.com/MR/Encryption_and_Authentication/Sponsored_Guest You also should be able to pull all needed information via Dashboard and / or API.
... View more
I'm not shure if I got you correctl @Prithiviraj but you won't be able to have load balancing with MX. Those are always Active / Passive.
... View more
MS120 is a pure Layer 2 switch. There‘s no possibility to have SVIs on it. If it‘s purely for management purposes, please take a look at https://documentation.meraki.com/MR/Monitoring_and_Reporting/Understanding_and_Configuring_Management_VLANs_on_Cisco_Meraki_Devices
... View more
Micro segmentation is based on filtering endpoint traffic directly on the access port. This allows SGT-based filtering even for clients within the same L3 network. Based on that, MX (from my point of view) is not the place where „micro“ segmentation would take place. It‘d rather fulfill firewalling based on SGTs instead of IP addresses with inter-VLAN traffic just as ASA and Firepower devices already do. It‘d be a great choice if MX could handle that too tho 😉
... View more
Whoa @MinnesotaKid, time to upgrade quite quickly then, 2.3 is in End of Support state since last month: https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/bulletin-c25-741734.html
... View more
As described on https://documentation.meraki.com/zGeneral_Administration/Managing_Dashboard_Access/Managing_Dashboard_Administrators_and_Permissions you can have „Full“ or „Read-only“ permissions only. Apart from what‘s already mentioned (Networks), you can give specific permissions based on Tags. A wee bit more flexibility would be nice though as both of you already mentioned. But hey, we can „Make a wish“ 🙂
... View more
You‘re buying boxes based on Flash and RAM? 🤔 Seriously, the datasheet will tell you quite precisely what the MX is able to provide you with regarding throughput. Meraki devices are a „closed shop“ so you wouldn‘t be able to make any use out of that information. Perhaps your sales rep would be able to give out that information, or possibly @ConnorL could help out. Bot as already said: you really don‘t need to know to get the best out of the system.
... View more
Hi Gijs, greeting from Germany! Welcome to the forums, we‘re a bunch of friendly people so you‘ll (hopefully) find a great spot for learning and going further with Meraki tech.
... View more
What kind of interoperability? Layer 2 issues? Dynamic routing? In a nutshell, I haven‘t heard of any specific issues between both vendors.
... View more
Well, you‘re switching VPNs, so you‘re basically cutting the branch you‘re sitting on. Theoretically, you could configure your AnyConnect VPN to only tunnel specified traffic into the tunnel, but one would have to know the configuration for both setups.
... View more
Especially as you‘re referring to O365: what is your specific threat model that makes you think Geoblocking is any good nowadays (if I may ask)?
... View more
How about using Templates? https://documentation.meraki.com/zGeneral_Administration/Templates_and_Config_Sync/Managing_Multiple_Networks_with_Configuration_Templates#MS_-_Switch_Templates_and_Profiles
... View more
Well, Meraki Webhooks will send messages in a standardized way. Your „endpoint“ will simply have to interpret it the right way. I don‘t know Teams native possibilities for that but I guess that there‘s no other way to have some kind of „middleware“ in place.
... View more
