Welcome to the community! 😎 ... View more

How about https://www.netspotapp.com/wifi-encryption-and-security.html as a starting point? ... View more

Hey John,   welcome to the community! Once you get the hang of not having to type the same things over and over into the CLI, you'll get to love the easy approach Meraki brings us. 😎 ... View more

As to your first question: No, the first configured RADIUS server will be used until it isn't reachable anymore from the NAD. Then it will automatically fail over to the second, third, ... one.   As to the last question: Please note that this is a community forum. Of course there are some fellow Meraki-employees helping us out here, but the best option would probably be getting in contact with your sales rep. ... View more

Looking at the API itself, it has to be a string:   def getOrganization(self, organizationId: str): """ **Return an organization** https://api.meraki.com/api_docs#return-an-organization - organizationId (string) ... View more

Could you please share some more information so we could be able to help? Is the MX67 your VPN headend? Are you trying to set up AutoVPN from your local MX67 to your office?  ... View more

Funny this topic popped up several times within the last few days 🤔 ... View more

Big fat congrats @PacerX! ANd thanks @MeredithW and @CarolineS for another great competition! ... View more

Thanks @ConnorL. Unfortunately, Geolocation (which are part of the policy part) are not available in the free plan. ... View more

Add Multi Factor Auth using Cisco DUO and get the added layer of security and have Geolocation based policies in place 😎   https://duo.com/docs/meraki ... View more

Guess the only option here is talking to the guys / shop / whatever you‘ve bought the device from. I‘ve never heard that support was able to help out in these kinds of situations. ... View more

Welcome to my most favorite city in the US! 😎 ... View more

Just to get this straight:   - There are several events that are allows - Some events (same type) are being blocked? ... View more

Woohoo, keep em coming! 😎 ... View more

Have you tried a system reset on that MX64?   https://documentation.meraki.com/zGeneral_Administration/Support/Resetting_Cisco_Meraki_Devices_to_Factory_Defaults#Compact_MX_Security_Appliance_and_Z-Series_Teleworker_Gateway ... View more

Sounds like you‘ve had a lot of fun in the past few years. 😎   Welcome to the forums Geoff, really much looking forward to collaborating. ... View more

How would you measure „reliability“ in this case? I‘d say it is.   Apart from that: wouldn‘t it make more sense to leverage the RADIUS log on your authentication server? ... View more

Great job everybody! 👍🏻 ... View more

Very simply put: if there‘s any need to implement QoS, you‘re gonna have to implement it network-wide. So yes, it isn‘t sufficient at all only configuring it on your switches.   On the other hand, I‘m completely with @PhilipDAth here: in most cases, it hurts more to implement QoS as „best practice“ than just leaving it alone. Especially if you don‘t have a special need to implement it. ... View more

I guess the answer to both questions is no. ... View more

From my point of view, „autonomous“ is misleading with Meraki:   Autonomous means that each AP is operating on its own and therefore has to be configured one by one. There‘s no central managemtn Withc Meraki, your Dashboard is acting as central management and will take care of changing channels, adjusting levels. etc. One could argue that Meraki APs themselves are really autonomous and everything regarding logic is being handled in the cloud. But at least you don‘t have to manually configure them that way, it‘s just the way they‘re supposed to be working 🙂 ... View more

Sure, the App is installed and has all the permissions it needs.   Well, „fortunately“ there‘s no real need for location tracking as everyone is working from home anyways. 🙈 ... View more

I tend to disagree here @PhilipDAth but perhaps I'm not getting your point right. Roaming client will only do DNS layer enforcement (as long as you don't add IP-Layer enforcement on top it). It will never relay user traffic through Umbrella as long as it's not dependent on the Intelligent Poxy functionality but this is for a limited set of traffic only.   My actual point is: without SIG, you'll never see all user traffic in Umbrella because of its workings. See above: Umbrella was originally meant to operate on DNS queries 90% all of the time as long as Intelligent Proxy was not involved. With SIG, you're actually relaying all traffic through Umbrella to have Cloud Firewall / -Proxy in place. ... View more

The difference is that Roaming Client (or the AnyConnect module) will do DNS inspection and perform tunneling of user data only for the „Intelligent Proxy“ part. This way, only „unknown“ traffic will be deeper inspected, which clearly is a more lightweight option.   There‘s a fair share of customers that require to have deeper insight and control about their clients traffic and this is where SIG comes into play. Don‘t get me wrong: Umbrella is a frickin‘ great and especially easy security tool and SIG adds way more complexity to it. Everything added by this functionality is not only bloat but fulfills customers requirements.  ... View more