Has anyone figured this out, We are getting an increase of this on our network. ... View more

>I really don't want to unblock P2P in my firewall but how do I allow our partner's ip thru our firewall    You can't. ... View more

A common issue I run into all the time with Windows 10 machines is WiFi performance being throttled by power saving settings.  If it is a Windows 10 (and probably 11) machine, try this as a test:   powercfg /SETDCVALUEINDEX SCHEME_CURRENT 19cbb8fa-5279-450e-9fac-8a3d5fedd0c1 12bbebe6-58d6-4636-95bb-3217ef867c1a 0 powercfg /SETACVALUEINDEX SCHEME_CURRENT 19cbb8fa-5279-450e-9fac-8a3d5fedd0c1 12bbebe6-58d6-4636-95bb-3217ef867c1a 0   ... View more

Quick update - 41 AP's replaced and not a single issue reported, happy with that. ... View more

You don't normally port forward ports to phones.  They should be able to work without that. ... View more

Ok, I should probably clarify, this is already in place (the connection) the current firewall is a watchguard, but they are using the /30 address.  We will be putting in the MX. Was trying to see how to configure it ... View more

I also removed the Aruba MS220-8P off the network. Reorganised the location of some of our WAPs becque of interference. These too seemed to make a difference. My errors are now cumulatively down by about 15%. ... View more

Yes, MX is in Routed mode.    Serial number is the same but Mac address is slightly different. I guess this is ok? Like "...2c..." in the device vs "...2b..." in Dashboard.  ... View more

No. ... View more

If you make a change that cuts the Meraki device off from the dashboard it will automatically roll back the change. ... View more

ps. I've seen this happen before where the customer was using an MSP - and the customer did not own the equipment.  Of course, if the customer does not own the equipment the MSP is not going to gift it to you. ... View more

I have never tried doing this with syslog.   As @RomanMD say, you need to start by having the MX know who the user is in some way.  You need to be able to click on the client in the dashboard, and have it display a username.   If you use Active Directly, you can do this passively by sucking the data out of the event viewer. https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Configuring_Active_Directory_with_MX_Security_Appliances  You just need to do the Active Directory bit only, you don't need to do anything with group policies or mappings. ... View more

If it is plugged into an MX and used as a backup-only link, it will use around 100MB of monthly traffic. ... View more

did not configured static IP, the strange is when i found the conflicting IPs from the client page I have fixed them with 2 separate IP which  was not in use,     I can still see the same IP for 2 devices. it is not refreshing   And when i click on the devices it shown the fixed IP ... View more

Another option: Buy web filters separetly (Barracuda, BlueCoat, etc.) Buy Firewalls without subscription (Cisco, Fortigate) or free pfSense / OPNSence Buy SD-WAN from Fortigate or Palo, since MX doesn't do SD-WAN at all:) Pay your admins / engineers more to addminister all this stuff😀 ... View more

Thanks for posting all this, really helpful and interesting bug.  Don't get me started on the transparency of these things from support!  I also live in fear of the next release, so far 29.2 in an office of about a dozen MR56 APs is working ok.  Only 2 weeks in though so often these things take time to rumble to the surface.  I'll post here with anything I find though. ... View more

If we have a fully functioning Layer 2 Aggregate Switch network and want to minimise downtime in switching to Layer 3, can we go ahead and create these VLAN Interfaces without it affecting the network until we're ready to cut-over to Layer 3 (and then switch to Warm Spare (VRRP)?     We currently have 2 x Meraki MS425 Aggregation switches with a bunch of MS225 edge switches connected via LACP. The 2 x MS425 Aggregation Switches are currently connected to old and fear of failing 2 x Catalyst x3750's which currently are in place for the purpose of routing traffic at Layer 3! Our plan is to configure Layer 3 Switching on the Meraki 425's and switch them to a Warm Spare VRRP setup (accepting that we'll lose our 20Gbps aggregation to edge switches, down to 10Gbps.) This should then hopefully allow us to remove the aging Catalyst x3750 stack. The Warm Spare setup will have the "Primary" MS425 connected to our Preferred NCS/WAN (1gb/1gb) connection, and the "Spare" MS425 connected to our Backup NCS/WAN connection (1gb/1gb). ... View more

Oh, I didn't think that was the order it checks if the website is allowed I just put it randomly in there.    Is that really the correct order when it checks a website (Group Policy --> Firewall Rules (Ooutbound), Firewall Rules (Layer 7),etc..)?   Also, is there a way to check which is causing the blockage?    In the logs I can only see the following causes:   - Content Filtering (doesn't say if its Category Blocked or URL Blocked though, doesn't say if its from GP as well) - Firewall Blocked (doesn't say what rule)   Thanks ... View more

Hello @Dee120  unfortunately new announcement  is below    '10-Aug-2022: We have received reports of customers experiencing select Microsoft 365 service outages because of Snort rule 1-60381 blocking CVE-2022-35748. The Snort rules have been removed to reduce the impact. A fix has been pushed out and any pending issues should auto-resolve by 6:00PM PST.' ... View more

Looks like it, this exact text is found in several places on the internet:    ... View more

Check with your IT people.  It sounds like they may have used a conditional access policy in Azure to restrict where you can access the resource from. ... View more

300mm away from the antennas is usually fine.   And for bonus points; I will assume this will mostly be using 2.4Ghz to increase coverage.  2.4Ghz uses a 122mm wavelength.  You want to avoid interference sources being placed a multiple of 1/4 of the wavelength away from the antennas (31mm, 61mm, 92mm, etc).  This is also why the length of a 2.4Ghz antenna is usually a multiple of a 1/4 wavelength (maximum gain). You also want the antennas spaced out from metal light poles (in case you are not using concrete or wood), to prevent the metal light pole from soaking up a lot of the radiated RF energy. I think it is pretty common to put them above the light fixture.   But once you are 300mm away the impact is so small you can ignore it. ... View more

Could you try turning IPS off and back on again on your MX.   There was an issue with a recent Microsoft CVE, and I wonder if it is related. ... View more

Thanks, And providing we advertise both mx's at a different cost, if at least the link between the sites break, the secondary site will still have availability to the datacentre via the SD-WAN. If we lose internet connectivity at the DC, it should also fail over to the secondary mx as the primary will be offline.     ... View more