Meraki

Melissa · ‎Mar 20 2018

@Jacko When you create a new profile in your new network, select "Copy another profile" and toggle through the dropdown menu. This should show all profiles in all networks in a dashboard organization (below): Hope this helps!

Melissa · ‎Mar 20 2018

@PhilipDAthThank you for sharing this!!! The team is currently looking into it - it's not expected behavior. I'll let you know when I have more info! Again - thanks for letting me/us know 🙂

Melissa · ‎Mar 19 2018

That's a good point - I'll talk to the team about updating this! This is the current page - https://documentation.meraki.com/SM/Tags_and_Policies/Security_Policies_in_Systems_Manager I agree it's missing some common uses and basic explanations on how to use this feature. Thanks for flagging this!!

Melissa · ‎Mar 16 2018

@PhilipDAth - also, if you set a Policy that scans for "Antivirus" and call it "Antivirus", you will see the option for "Antivirus Compliant" in your main clients page! (like below) This will also be a dynamic tag you can search by/reference in your Tags management page (if you have this turned on). (like this below)

Melissa · ‎Mar 16 2018

@PhilipDAth - thanks for posting this!! The "Compromised" check currently available in SM Policies scans for rooted or jailbroken mobile devices. That's what we mean by "Compromised" - it's specific to those device types. What were you thinking "Compromised" would entail/mean for Windows devices? I wonder if there is another way to do this.

Melissa · ‎Mar 16 2018

@Larry managed app settings for ios can be pasted in the key value fields. They aren't made automatically searchable like they are for some Android apps (where the database of settings can be pulled by dashboard).

Melissa · ‎Mar 13 2018

Hi everyone! Please hang tight on this beta program...I should have more to share soon.

Melissa · ‎Mar 6 2018

Hi @jared_f! I think the bottom of this article should help (below). Let me know if it doesn't!! https://documentation.meraki.com/SM/Apps_and_Software/Deploying_Scripts_in_Systems_Manager_using_Software_Installer

Melissa · ‎Mar 6 2018

Hi @Bombarie! This might have something to do with support for ActiveSync with Gmail. Google used to support ActiveSync for iOS and I believed grandfathered in previous customers using this...but it's not supported for new customers moving forward. If you're looking to sync more than just email, I would suggest trying to set up a Managed App Settings for the Gmail app on iOS. This should enable the Gmail account on the device AND allow the user to go in and turn on sync for contacts, calendars, etc. Here's more on that - https://documentation.meraki.com/SM/Profiles_and_Settings/Using_the_Managed_App_Settings_Payload

Melissa · ‎Mar 6 2018

Hi everyone! We just released the ability to add icons to custom apps in dashboard. Once you've uploaded the custom app/script and saved it, click back in and select the Details, Edit button, like this below: From there, you'll see the option to upload an icon, like this: @AsimSyed - I think this is what you were asking for recently!

Melissa · ‎Feb 27 2018

@MRCUR Thanks for flagging this/me 🙂 I'm looking into it with the team...will have an update soon. I'm out of the office but will try to post asap!

Melissa · ‎Feb 21 2018

@KevinMenzel Good news! Support for location based tokens is here 🙂 Check out this post

Melissa · ‎Feb 21 2018

Hi everyone! Support for VPP Location Based Tokens is live! What's different? VPP accounts are managed in Organization>MDM. Now, in addition to collecting and storing this information in our database, users can also view their location information in an updated UI. Here's what the new UI looks like - complete with a flex table for sorting, bulk operations (delete, for now), and row coloration. Clicking on a row allows you to edit the account as seen below. Location informations shows up in both the list and details views for each account: Also - when creating a new account, the modal above will warn users about malformed or erroneous data as they enter it. If a token is uploaded that is already in use or is currently expired, the user will be notified before saving the page. This streamlines the process for adding multiple accounts at once! For more information on VPP and location based tokens, visit Apple's reference site - https://developer.apple.com/library/content/documentation/Miscellaneous/Reference/MobileDeviceManagementProtocolRef/5-Web_Service_Protocol_VPP/webservice.html

Melissa · ‎Feb 16 2018

Got it - this makes sense. You'd like to be able to search devices by tag within an individual app. I can look into this! That's definitely a feature request 🙂 I'll double down on it for you with the team. I can see how it would help your workflow!

Melissa · ‎Feb 16 2018

Thank you @Diane!! That makes sense. I think the Tags Management page will definitely help you -can you email support@meraki.com and ask for them to enable it on your dashboard? (They should be able to enable this for any paid SM account) The Tags Management page will let you see all devices, apps, and profiles in scope for any given tag - including auto tags (like device tags or security profile tags) and user/owner tags (like AD groups or ASM groups!) Here are some screenshots of that below:

Melissa · ‎Feb 16 2018

Hi @Diane! Can you help me understand what you're looking to do here? It sounds like you want to scope apps to your existing AD groups. AD groups would appear in the "User Tags" when scoping apps like this screen shot of an app page below - I'm not sure why you would need owners or names fields when scoping apps if the goal is to use AD groups. Can you help me understand the issue?

Melissa · ‎Feb 15 2018

Hi everyone! I have some great news - Cisco Meraki Systems Manager has been named a Gartner Peer Insights Customers’ Choice in Enterprise Mobility Management! This distinction is given to vendors with more than 50 reviews and an average score of 4.2 or above. As of the writing of this post, Systems Manager has received 71 reviews on Gartner’s Peer Insights platform and has an average rating of 4.5 of out 5. We are thrilled that our customers find Cisco Meraki Systems Manager so valuable! Here are a few excerpts from the Gartner Peer Insights page (which is free to join!): “Interface is user friendly & easy to manage without giving up powerful management features” As of August 1, 2017 “Setup and Implementation was Effortless” As of December 12, 2017 “Excellent BYOD tools for securing end users mobile devices” As of January 26, 2018 The team at Meraki is so grateful for this validation and more energized than ever to continue delivering for our customers 🙂 We hope you'll continue to share your feedback with us! Click here to read our recent blog post. Disclaimer Gartner Peer Insights Customers’ Choice distinctions are determined by the subjective opinions of individual end-user customers based on their own experiences, the number of published reviews on Gartner Peer Insights and overall ratings for a given vendor in the market, as further described here and are not intended in any way to represent the views of Gartner or its affiliates .

Melissa · ‎Feb 15 2018

Hi @kanteen_uk! Currently Apple will not allow you to manage those native apps on devices, but you can use SM to show or hide them! If it's helpful in managing cellular data, you could go to SM>Policies and set up a policy that checks for devices using data beyond a certain threshold. You could then go to SM>Settings>Restrictions>Show/hide apps and hide those stock apps. You could set the scope of that profile to only devices violating the policy you had set above. In this scenario - any device that exceeds a certain data usage limit will automatically have those stock apps hidden from the user! Another option - you could hide those stock apps ALL the time and use SM to push out apps you can manage 🙂 Hope this is helpful!

Melissa · ‎Feb 6 2018

Also - Group Policies on Meraki wifi networks can also be used to block or throttle bandwidth for OS updates! Under Network Wide>Group Policies: Devices in Systems Manager can automatically be put on Group Policies using the Sentry Policies integration, here:

Melissa · ‎Feb 6 2018

Hi @soomeGUy! I'm late to this thread, but I think the steps below will help. Unchecking the restriction "Allow App Removal " under Restrictions> ios restrictions (supervised) will lock all apps on the device - which doesn't sound like what you want. Instead, I might make all managed apps set to auto-install, so even if a user deletes them, they will be reinstalled by SM. Using VPP device assignment will also set this up to install silently (the user can't block or deny this). Here's more on that - https://documentation.meraki.com/SM/Apps_and_Software/Using_Apple%E2%80%99s_Volume_Purchase_Program_(VPP)_with_Systems_Manager With regard to your question about geofencing and location services - at this time Apple does not provide the ability to force location services, except through Lost Mode. In your case, I might actually use IP override to gather location info for your devices, and set a geofencing policy that is active when devices are off/outside of your network. That would work even if location services have been disabled by the user. Another option would be to use time-based tags, instead of location based tags. Do you want the device to operate different when your users are offsite - or do you simply want to know when they are offsite? https://documentation.meraki.com/SM/Monitoring_and_Reporting/How_Systems_Manager_Approximates_the_Location_of_a_Managed_Device

Melissa · ‎Feb 6 2018

@jared_f Yes! Security Connector is basically an app that combines the Cisco Amp for Endpoints product (called "Clarity") and Umbrella (formerly Open DNS). Systems Manager can be used to manage all products in one interface, as well as automated deployment of Security Connector app itself. Here's some more info and use cases - https://blogs.cisco.com/security/now-available-cisco-security-connector-for-ios Here's a link to our guide - https://documentation.meraki.com/SM/Apps_and_Software/Cisco_Security_Connector_(CSC)

Melissa · ‎Feb 6 2018

@jared_f Good points!! I would always recommend that wifi configuration profiles are made without any other settings applied. The reason being - if you add a long list of settings to a configuration profile and need to change anything that profile, when the profile is refreshed, this could affect connectivity to the wifi networks configured in that profile. It would basically "reset" anything in the given profile. I would also recommend making any configuration profiles with Active Sync separate as well - for the same reason! When refreshed, a configuration with Active Sync or mail (if using App settings instead to configure mail accounts) can prompt the user to re-input their password.

Melissa · ‎Feb 6 2018

@soomeGUy Have you had any luck playing around with this? In reading your post a few things jump out to me: 1 - If you enforce wifi whitelisting without first having installed wifi configuration profiles on devices, this would likely cause problems (as the device can only connect to configured wifi networks, and if not installed...there would not be any). 2 - Does wifi whitelisting solve your DNS issue? 3 - Would using a proxy or content filter help? (Settings>Restrictions>ios restrictions (supervised)) Lastly...if all else fails, have you seen anything about Cisco Security Connector? This is a new product that integrates Umbrella and Clarity for supervised iOS devices. It might be what you are looking for! https://meraki.cisco.com/blog/2017/12/cisco-security-connector-now-available/

Melissa · ‎Feb 6 2018

@discoveranother For your second question - it sounds like you are referring to the Restrictions on the Settings page. Is that right? Under "Cross Platform Restrictions", deselecting "Allow installing apps" will turn off the user's and SM's ability to install applications. The more popular option would be to use the restriction under "ios restrictions (supervised)" to deselect "Allow App Store". This works for supervised devices on ios 9 and above and will still allow you to push apps and updates through SM 🙂

Melissa · ‎Feb 6 2018

I'm late to this thread - but thank you @jared_f! You might play around with the Apple Classroom app on your iOS devices - it's free and works outside of Apple School Manager. The latest versions support something Apple calls "unmanaged classrooms" - basically the ability create a class and have devices (even those without the classroom app) join via bluetooth. This could be really cool for trainings or presentations - if you or your users find themselves needing to lead people through content or apps on ipads!

About Melissa

Melissa

Community Record

Badges