You realise if you are using the IPS engine that it is already getting a live feed of threats to stop?  I would tell it to prefer "security" to get the larger set. https://gblogs.cisco.com/ch-tech/meraki-malware-detection-looks-also-into-the-past/   You may be manually duplicating something that is done automatically. ... View more

What happens if you put just cineblog01 in the blocked URL patterns list? ... View more

At least that involves some cooking. ... View more

And to answer your next question, you have to delete the managed application to delete the resource group tp delete the VMX so you can re-deploy it. ... View more

You could also consider using a Webhook.  This would allow your code to be called when a DHCP exhaustion event occurrs. https://documentation.meraki.com/zGeneral_Administration/Other_Topics/Webhooks ... View more

Maybe a shard is having an issue.   For those having a problem what shared are you on?  ... View more

>customer network behind this Meraki Network is not secure at all   No one can simply say they are "secure".  And I certainly would not tell you that "you are not secure at all".  Security is like temperature.  There are a whole range of values.   You need to make a decision about what you feel is sufficient and go for that.  You need to consider what your risks are, and put in sufficient mitigation within what you can afford to stop those threats.     Personally, I have only ever sold Advanced Security licences to customers.  I personally consider the benefits of the content filtering to be able to block known malware sources and other things to be very valuable (proactively stop someone from even being able to download the malware rather than retrospectively trying to deal with it afterwards).  And then their is the great IPS engine built around snort to try and stop attackers from using known compromises to take control of your computers - and lastly AMP - the ability to scan HTTP downloads for malware. ... View more

I suspect the "original" licence was called Enterprise - when there was only one licence.  Then Cisco bought Meraki.  The AMP engine was added to the MX product line.   So what to do about naming?  Well it does offer more advanced security features.  I know, lets call it "Advanced Security", ... View more

I'm more of a Tequila person myself.   ... View more

What do you want the switching solution to do?   Then I'll tell you if I think it is a good fit or not.   Sometimes you need to use Cisco Enterprise switches (such as if you need VRFs, BGP, etc). ... View more

>I'd like to map each VLAN to its own WAN IP   On the whole no.  The only special exception is what @Raj66 has mentioned, which would let you configure a second WAN port and an IP address on that and use flow preferences to direct specific VLANs out specific WAN ports. https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Load_Balancing_and_Flow_Preferences   But on the whole, unless you only have two WAN IP addresses, this wont be a solution. ... View more

Wow, this is a simple question but the answer can be quite involved.   Could I get you to read this post by @m_Andrew and see if it helps out. https://community.meraki.com/t5/Switching/Multicast-Basic-s/m-p/25867/highlight/true#M2125 ... View more

And Blake as well.  ... View more

I'm glad to see New Zealand is over represented in the All-Star members! ... View more

You'll need to speak to your support people as only they'll be able to set the configuration.   Your company may want the company network and your home network seperate - to prevent exactly what you are trying to do.   Typically the Z3 would be plugged into your ISP router.  It sounds like your Velop node and the Z3 should both be plugged into your ISP router. ... View more

If I understand correctly their is a single DHCP server at the DC.   There can only be a single route to that single destination, which the MX is using.  However you want one VLAN to use the AutoVPN tunnel and the other to use some other path outside of AutoVPN.   The only way I can think of to make this work is to have two DHCP servers.  One for the secure network which is advertised into AutoVPN, and one of the internal network which isn't.  Then just DHCP relay to the appropriate DHCP server.   It really sounds like you should be using two DHCP servers anyway considering the security seperation you have specified. ... View more

If you click on one of the switch ports it will tell you.     You can also go Switch/Switch Ports and see it there.   ... View more

You should definately contact your reseller and do this via your reseller. ... View more

Can I have your Pamela Anderson poster please.  ... View more

If you plug your notebook into the same switch port as the AP is in can you get to the Internet ok? ... View more