If you want to be able to deploy apps without user intervention on Android you must put the device into Device Owner mode. https://documentation.meraki.com/SM/Deployment_Guides/Android_Enterprise_Deployment_Guide_(Android_for_Work)   If you think this is tricky - wait till you have to do an Apple device. ... View more

I think I have figured this out.  Set the phase 2 authentication to MSCHAPv2., ... View more

I have not seen this happen myself - unless there really is an IP address conflict.   I assume there is no chance there are two DHCP servers on the LAN?   Are both devices configured to use DHCP, or is one/both using a static IP address? ... View more

Negative, the Cisco "Support Forums" are on Lithium as well and they don't have the same limitations . ... View more

If you think my response helped it would be great if you could give me some Kudos and mark my answer as correct. ... View more

Did you make those three ports on the MS220 access ports? ... View more

You can also say to create the new network by copy the existing network. ... View more

Is Samsung cloud an actual app? Do you think you could find its ID?   It may be that it is being caught by some other restriction. ... View more

I noticed that usernames are very restrictive as well.  My surname has an apostrophe in it and I couldn't enter that either. ... View more

Is your MX connecting to a switch?  Have you configured it as a trunk port?  Is the switch port configured as a trunk port?  Have you created the VLANs on the switch?  Have you put the switch ports into the correct VLANs? ... View more

If this is an App you should be able to push it out.   I have not seen any options for selecting or configuring a keyboard. ... View more

Scratch that, I was wrong. https://documentation.meraki.com/zGeneral_Administration/Licensing/Licensing_Guidelines_and_Limitations "Note: The organization co-termination date does not depend on the current device count, but rather the license limit. Removing devices from a network or organization will not impact the co-termination date" ... View more

Multi-year licences have pretty good discounts, so you probably have not lost out that bad over buying annual licencing.   I don't know this for sure, but due to the way licences are weighted I would try removing the MX's from your organisation inventory all together.  Note your overall end licence date before and after.  It might stretch the date afterwards due to the weighting. ... View more

Check out this post as well. https://supportforums.cisco.com/t5/wireless-ip-voice-and-video/ascom-wifi-phone-problems/td-p/1589289 ... View more

As I understand it, those phones don't support 802.11r, so you will have issues anytime they roam from one access point to another. ... View more

I don't know the answer, but I would have thought it should be using PEAP rather than TTLS. ... View more

I tried this with the beta firmware 13.22 and it did the same thing as well (allow ping traffic to the MX interface). ... View more

Negative @MilesMeraki.  Creating an organisation does not ask you anything about location. ... View more

I don't know this answer 100%.   I know that it is located in multiple Amazon AWS availability zones, and also in Cisco Meraki data centres.   I know that a big chunk is in the Amazon AWS East Coast region.  I understand it is also in other regions. ... View more

Any chance it is related to a change of season and the office temperature has been adjusted? ... View more

Negative to @kruse on (3).  If you make the vMX100 a hub the traffic for AWS will go directly to AWS.  It will not flow via the hub. ... View more

With regard to Amazon AWS - you would be better off using the Cisco Meraki vMX100.  The advantage with this is it allows all sites to automatically build a connection to Amazon and your HQ.  This does not use the Amazon VPC VPN system so you don't need to pay per connection. https://meraki.cisco.com/products/appliances/vmx100   You don't mention how many users are in the satellite offices.  I don't like using the built in WiFi unless the site is very small.  The standalone access points have considerably more functionality than the built in access points.  In offices I most typically use MR42's.  The MR42 is a 3x3 MIMO radio (versus the MR33 which is 2x2).  The MR52 requires you either have an MGig port or channel two ports together to get maximum performance. I particularly like using the MX65 because it has a pair of PoE ports - perfect for powering a couple of access points.   What you you want to avoid doing is using an MX with a built in access point and a standalone access point.  The configs are completely different.  Avoid this config.  Using exclusively one or the other. ... View more

It would be great if you could mark my answer as the solution to your original question.   Every app has an ID. For example, the ID for the "standard" camera app is "com.android.camera".  This guide gives one way to get the bundle ID. https://documentation.meraki.com/SM/Tags_and_Policies/App_white%2F%2Fblacklisting_in_security_policies   It appears you can do wildcards as well (never done it myself.  So you should be able to do: com.samsung.*   I haven't done it for a while, but I recall doing a settings.applications/about option somewhere to get the ID. ... View more