Hi @BhushanKhachane  This is my understanding.   First If your public ip of MX interface is not pingable. Please check Security & SD-WAN > Firewall > Security appliance services [ICMP Ping is allowed = Any]   Second Now as you MX is connected on LAN Port of MX and public ip of ASA is of the same subnet. You may try to configure 1:1NAT. Security & SD-WAN > Firewall >1:1 NAT [Type in your ASA Interface IP in "Public IP" and "LAN IP" fields]   Hopefully this shall solve your issues. ... View more

Hi @I_Naitoh  I understand there is no limitation on number of Urls that can be blocked/whitelisted.   ... View more

Hi @bdw72,   I understand we need to introduce an additional router (Preferably MX) in our network at the HUB Location to inject Non-Meraki routes into AutoVPN.   Aaron created the following document explaining this in an awesome manner. https://www.willette.works/merging-meraki-vpns/ ... View more

Hi @MattinVegas  I understand even though we create 2 Orgs. We will not be able to downgrade the Advanced Security to Enterprise Licensing. I believe we need to plan this before hand and place all Enterprise License based devices in 1st Org and Advanced Security based devices in the 2nd Org.   As you know we will loose AutoVPN functionality when we break the Org into two. ... View more

Hi @GregK  Hope the MR45 is plugged on a "Trunk" Port with VLAN 3 & 10 allowed.   ... View more

Hi Rich, Meraki MXes (Security Appliances) by default NAT the traffic. We need not do any special configuration for this. MX can ping google. How about clients? How about traceroute on clients? If the internet is working. and the MX is not blocking? the PCs native firewall is not blocking? any other 3rd party product is not blocking?   Clients shall reach internet. [You may try plugging PC directly on MX if already not]   Also as @SoCalRacer suggested kindly recheck the DNS Server settings and reach ability on clients.   Network-wide > Event log could be a place to monitor the logs on the Meraki Dashboard.     ... View more

Same here Mike. A friend of mine got the similar issue on Windows 10 after the recent update. [MAC Bootcamp] However it seems to work well with Z1 not with Z3.   ... View more

Hi @AlexanderDrago  I may be completely wrong. I understand Meraki Native Client VPN by default creates a FULL Tunnel with the site. You need to have internet service on the site. This may be a reason why clients are not able to access internet. You have scripts available to create a SPLIT Tunnel on Windows 10. (If the above reason is the issue). ... View more

Hi @michaelpersaud  I am not sure if this helps you. Could you please try the following if already not? 1. Browsing in Incognito Mode. 2. Whitelisting the device on the Meraki Dashboard, ... View more

Hi @I_Naitoh  同様の質問で次のスレッドを確認してください。   https://community.meraki.com/t5/Wireless-LAN/WPA3-announced-Does-Meraki-have-any-plans-to-include/td-p/8945 ... View more

Hi @Quimax   Following is my understanding   Rule 5 Says "Allow" protocol "TCP" for ["IP Address=x.x.x.75" + port "25"] to destination ["Any IP Address" + port "Any"] - Means a specific IP Address from your LAN can access port 25 service.   Rule 6 Says "Allow" protocol "TCP" for ["Any IP Address" + port "25"] to destination ["IP Address x.x.x.75" + port "Any"] - Means all IP Addresses from your LAN can use port 25 service for a specific destination.   Rule 7 Says "Deny" protocol "TCP" for ["Any IP Address" + port "25"] to destination ["Any IP Address" + port "Any"] - Means No IP Address from your LAN can use port 25 service I believe if you remove Rule 6. You may achieve the desired result.   ... View more

Awesome Philip. You are the "Inspiration". ... View more

Hi @SCC    Going by the definition of NGFW. I may say "YES".   Recent introduction is HTTPS inspection. However I follow @PhilipDAth on his views on HTTPS Inspection. https://community.meraki.com/t5/Security-SD-WAN/MX-HTTPS-Inspection-Coming/m-p/45870   However for additional security we recommend Cisco Umbrella to our customers which can be easily integrated with Cisco Meraki Solutions.   You may check the following url for complete information on Cisco Meraki Firewall. https://www.syndicateinfo.com/post/why-cisco-meraki-firewall     ... View more

Hi @ShadowoftheDark  I understand we are discussing about "Non-Meraki VPN" Confguration. Constructing tunnels with Meraki Auto VPN (between Meraki Devices) or Non-Meraki VPN (between Meraki and Non Meraki) are kind of easy. I believe the logs displayed on the Dashboard shall be relevant to your VPN only. I could see "failed to get sainfo" event   Did you happen refer to following url (Lists down most of error events) https://documentation.meraki.com/MX/Site-to-site_VPN/Troubleshooting_Non-Meraki_Site-to-site_VPN_Peers   Event Log: "failed to pre-process ph2 packet/failed to get sainfo" Error Description: The tunnel can’t be established and the following error is recorded in the event logs in the Dashboard “msg: failed to pre-process ph2 packet (side: 1, status: 1), msg: failed to get sainfo.” Error Solution: This can result from mismatched subnets in the IPsec tunnel definitions, typically a mismatched subnet mask. Check to be sure that the local and remote subnets match up on each side of the VPN tunnel. ... View more

Hi @martijnwireless   The only information I could search is the following. https://meraki.cisco.com/lib/pdf/eol/meraki_eol_mr34.pdf   Seems MR42 is a replacement of MR34. So I believe "End of Sale Date" ie. October 31st, 2016 seems to be "Release date" for MR 42.   I may not be correct though.   ... View more

Hi @Mule  Could you please verify the "MAC Address" of the "Whitelisted" machine? Is it correctly Identified on the Dashboard?   ... View more

Hi @loudmog    I do not have any experience with Ubiquiti EdgeRouters. However I am just trying to share a bit of information about Meraki Client VPN. Meraki client VPN works on, UDP 500 and 4500. Could you please make sure these ports are available for the service to work?   Also could you please share the error message you see while connecting?   You may also check the following Url (This documents most of the common errors with Meraki Client VPNs) https://documentation.meraki.com/MX/Client_VPN/Troubleshooting_Client_VPN ... View more

Hi @Wong    I believe this may not be possible. One idea could be. You may install  a "Router" between the ISP and MX84s and share the ISP with both MXes. ... View more

Hi @Prashan    Is the L7 Rule not working?   If not you may block the host name. Check the following url for iOS. https://documentation.meraki.com/zGeneral_Administration/Other_Topics/Blocking_or_rate_limiting_iOS_updates   For Android I believe above will be challenge as they have various sources. I believe Cisco Meraki EMM may help you on this provided you "OWN" the devices.       ... View more