Have you tried the hairpin as referenced in @PhilipDAth comment?   If nothing else, the proof of concept may give you more insight into how NAT can work in a MX.   - Dave ... View more

Thanks for the update @CarolineS  ... View more

This is rather late update to this thread, but I have been installing Trend Micro Worry Free Business Services XDR for my clients.   It has Endpoint Detection and Response, Hosted Email Security and Cloud storage security.  I have witnessed it block ransomware.   I deploy the client app via Systems Manager, so roll out to a new organization is easy.   ... View more

I have several clients using JumpCloud Radius authentication over Meraki access points.   I have not seen the problem you have mentioned.  One thing to check is that the WAN IP address is the same address specified in the JumpCloud Radius settings.   Also, you can test the Radius authentication in the Access Control settings for the SSID.   ... View more

All of my clients are behind a MX.  The clients with AD and an internal DNS server are not having that issue.   I have the MX handling DHCP and setting the DNS addresses to the internal DNS server and to Google. ... View more

i am sorry to hear that, but I do understand your point.   Perhaps you could look at the Meraki Go access points.  The do not require a license and are easily managed by the Meraki Go app on your phone. ... View more

You seem to have done every bit of troubleshooting possible. Let us know what the problem turned out to be if they figure it out... ... View more

You should be able to use and network cable from the MX to the Netgear.   I use a color system, where primary cables from providers to the firewall are orange, uplink cables are yellow, data blue. ... View more

1. Set up 3rd Party management for Device management in Google Workspace 2. Create a token and copy it. 3. In the Dashboard under Organization / MDM, choose Google authentication and paste in the token.   Once that is done, when someone adds their work email to their phone, SM will download and install automatically.  The end user will need to enroll the device so they will need the enrolment code.   There is currently a bug somewhere between Android / Meraki / Google Workspace that breaks this functionality in Android 11.   -Dave   ... View more

I am deploying Trend Micro to PC and Mac clients by using the parameters from the Deployment Script.   Under Installation arguments I have: IDENTIFIER="Your Trend Identifier here" /L*v+ "C:\Windows\Temp\wofie_msi.log   -Dave ... View more

SonicWall recently announced MultiGig firewalls.  The TZ firewall 470 has 1.5 GBPS Threat protection throughput and Zero Touch deployment through their cloud based single pane of glass interface.  They are still missing the ease of use that Meraki has.   The tea leaves are pointing in different directions due to Covid19, but we will eventually go back to offices and MutiGig is becoming a reality.   -Dave ... View more

Did you ever end up finding a way to close those ports?   Thanks.   Robert. ... View more

The cost of the licenses is an issue if just looked as an expense.   If Total Cost of Ownership is considered, the license cost becomes less of an issue.   - Dave ... View more

Hello,    unfortunately, as mentioned below, there is no evidences due to cloud strategy... For now i will give all those answers from this topic to my company compliance.   Thank you all for your reply 🙂     Nickola ... View more

Bummer...I did find this searching around, and I'm looking forward to seeing if it solves the issue: https://community.meraki.com/t5/forums/replypage/board-id/security/message-id/21878   I will post my findings later today...   Reis ... View more

I am very happy that Network Objects came out ahead of IPV6.  Using IPV6 addresses instead of objects would render firewall rules almost impossible to manage! ... View more

Thanks very much Peter!   ... View more

@CN this is so cool, thanks for sharing and thanks for introducing the idea to us in the first place 🙂   Here's the abstract to save you a click (though, of course, the rest of the paper is worth a perusal and they'll be updating with new info as it becomes available). So exciting to know we have been part of such an impactful project:   ... View more

@mumbles202 Did you ever setup a Network Policy Manager? ... View more

I think I figured out the issue. The client is at the office and on the same LAN as the cameras and he can see the images.  I am not on the same LAN.  There is a Cisco Router between the cameras and the outbound internet, and it is blocking most ports. ... View more

We run a 9 site network with MX84 or MX100 HA pairs at each edge site and an MX250 pair in the primary DC.  Edge MXs are in routed mode with two WAN links and core MXs are in concentrator mode meaning you can have more than 2 links as they are terminated in a L3 switch.  The primary CUCM server is at the main DC and we have about 5-600 handsets.   Using the built in best for VoIP QoS rule we get perfect voice calls but sometimes the CUCM desk video calls aren't perfect.  I was going to try the no-NAT feature on the 15.x MX train but while talking it through I can't see how that would make any difference as the auto VPN builds the tunnel to be LAN-LAN.  Perhaps I'm wrong though?   We load balance all other traffic and have created a low latency rule to shove latency sensitive traffic down the best path dynamically and in combination with the built in rule is seems excellent.   All in all I'm very impressed how you can make realtime changes very easily and not only does it show the effects pretty much instantly with good graphs and flow logs, it doesn't disrupt ongoing traffic that you aren't selecting.   A** Meraki ... View more

Do you have both the source and destination subnets participating in the VPN? See below.     ... View more