Meraki

WWWolf · ‎Apr 8 2020

I highly recommend AGAINST turning off Windows Firewall unless you have an alternative firewall in place. It is far better to adjust your firewall rules to allow RDP through it. (Windows Firewall has built-in rules for RDP - you just need to check the boxes to allow the traffic. I also recommend checking more than just the "Domain" checkbox as Windows sometimes can have difficulties identifying the network.)

PhilipDAth · ‎Apr 7 2020

Insight lets you set a target response time for an app. It passively monitors the application traffic. You can get it to actively generate ping traffic use the "VoIP Health" feature.

DHAnderson · ‎Apr 7 2020

To get the alerts, make sure that under Network-wide/Alerts that both Malware is blocked and Malware is downloaded are checked, and that there is a valid email address in Default recipients

Skaminski · ‎Mar 24 2020

I'm currently running the latest version of the iOS app with no improvement. Still getting messages every 15 minutes. Support had turned it off on the back-end but as a test wanted me to put it back on and then back off. Unfortunately, when turning it off, the alerts never stopped. My suspicion is that i'm turning it off while there is high utilization and because its in an triggered status, its not changing the flag from the iOS app. Again.. just a suspicion. This all may be compounded by a camera NVRthat is recording from 6 cameras. This device shows in the app to be about 40Mbps. For some reason, this shows as "Internet" bandwidth even though the traffic is all internal.

DHAnderson · ‎Mar 14 2020

On the Meraki Go App, click on the hardware icon, then select your firewall, and scroll down to the troubleshooting section. You can test the performance to any website you want. If you are looking for a system that will send you emails when performance to any set of sites drops below any threshold and let you know where the problem is (LAN, WAN or site), a Meraki Insight license with a MX series firewall it a great solution. Let me know if you want to see a demo of Meraki Insight.

DHAnderson · ‎Mar 4 2020

My personal preference is to keeps things simple, until you can't. Planning a current network design based future maybes (not hard requirements) can increase cost, complication and reliability, without any direct benifit today. So my suggestion would be to set up the simplest design first, and plug the two WAN ports into the MX. Later, when you eventually (hopefully) get a warm spare, a more complex configuration is required. Just be sure you do not move your single point of failure from a firewall to a switch.

DHAnderson · ‎Mar 4 2020

When the MS250's uplink was connected to a Cisco switch, I needed to specify a native VLAN for MS250's interface for traffic to flow. I was assuming the Cisco router would behave in the same way, so when the MS250's uplink was connected to the router, it would need the native VLAN defined. Sadly traffic wouldn't flow. When I removed the native VLAN from the MS250's uplink port and connect it to the Cisco router, everything started working.

Ilene · ‎Feb 12 2020

We are working on hardening our os and also retention periods on our video cameras. We need to set policies and get better pc to be able to utilize the camera feeds

JamesMW · ‎Feb 9 2020

@DHAnderson - I will get back to you ASAP with updates on VLAN support with Meraki Go full stack.

DHAnderson · ‎Jan 21 2020

I looked at Air Marshal and there were 0 spoofs and 0 Rouge SSIDs. I went through all the Other SSIDs and did not see any matching the guest. I also looked at all Air Marshal events in the event log and there were no events. I have tested Air Marshal in the past and I am confident of it's operation. So, since all my other clients were on 25.13, I took the advice to downgrade to that.

Nash · ‎Jan 14 2020

If you can't change the routing protocol in use to OSPF or convert to static routes, you're not going to be able to use the MS250. EIGRP is Cisco's special sauce. If EIGRP is required, I'd see if you can get your money back.

SoCalRacer · ‎Dec 30 2019

Different VPN software on the client, like Sonicwall or something your previously used? Also AV or Endpoint security software could be causing the issue? virtual adapters could cause issues and should be removed.

DHAnderson · ‎Dec 22 2019

@Matthew I am attempting to use a Meraki MS250 to replace a Cisco router that is using EIGRP. You mentioned you have a mixed environment. Since the MS series do not support EIGRP, how did your mixed environment work? - Dave

MeredithW · ‎Dec 13 2019

Thanks for a fun challenge, @BlakeRichardson! Congrats to our randomly selected winners, @SeaTec and @r_timmons!

DHAnderson · ‎Nov 12 2019

I have a full stack of Meraki Go and Meraki equipment. The Go access point does not have scheduling or most of the features of a MR. That said, you can create an isolated guest network, set usage limits and get email notification when equipment goes off line. The firewall subscription gives you Cisco Umbrella, but you cannot disable content filtering. There is no Snort for traffic inspection, but there are layer 7 rules in the access point. The switches support POE, and cable testing, but not isolation. I know this is just a smattering comparison. Let me know if you have any specific questions. - Dave

DHAnderson · ‎Nov 8 2019

The client has purchased a Meraki MS120-24P to replace the Netonix. I will be glad to get rid of the Netonix, and the Microtek used to bypass firewall to allow the ISP to manage the switch.

Mish · ‎Jul 22 2019

I'm having the same issue. Unfortunately the Meraki dashboard doesn't give much info about the attack. A customer of mine is having an issue with syslog events NOT showing any info on SQLi attacks after changing their IPS from Barracuda to Meraki! Meraki needs to provide granular configurations in their MX product otherwise security minded professionals will steer away from this box deeming it too simple! They could easily enable an advanced (geek) mode!

SoCalRacer · ‎Jul 18 2019

Check Security Center - You will find the threat there if IDS is detecting it https://documentation.meraki.com/MX/Monitoring_and_Reporting/Security_Center Change the Mode or Ruleset down a notch and see if that resolves the issue https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Threat_Protection 99% certain the data is actually on a different URL that googleusercontent.com. I am thinking there are multiple URLs to whitelist, although not sure of them. Below is a doc regarding Google Drive URLs, so it gives you some ideas https://support.google.com/a/answer/2589954?hl=en

MeredithW · ‎Jul 1 2019

Thanks everyone for sharing your stunning new avatars! Our two randomly selected winners are: @Wazz and @JM. Congratulations!

DHAnderson · ‎Apr 26 2019

More information I had been prototyping a network layout where there is no "Trusted Lan" (See Google's BeyondCorp). I enabled port isolation on my switches, and then Layer 2 Isolation on the RADIUS lan. So the Layer 2 isolation is breaking the ability of a client on a Meshed Access Point to connect to the internet.

DHAnderson · ‎Apr 26 2019

@LegoGeek you can pm me at dave.anderson@essential-consulting.com

Matthew_Cholin · ‎Apr 22 2019

Previously the printer was manually configured for a static IP Address on the network, DHCP was disabled from the Administrative Web Access. Just as a test, I created a reservation in our DHCP Server for the printer and converted it to DHCP instead. The printer is now pulling an IP address from the DHCP server, but it did not change the behavior of the alerts we are getting from the Meraki. The most recent set of alerts today claimed the following IP Addresses were in conflict on the network: 169.254.222.176 169.254.77.114 169.254.169.41 169.254.1.2 All of them involving the same Canon printer and 4 other devices, each of which pulled a valid IP from our DHCP server within seconds of the alert being thrown, while the printer was online at it's assigned address.

DHAnderson · ‎Apr 20 2019

I had Chrome changing the SSID password if I ever opened the Wireless / Access Control page. The edit box must have been labeled "password" in the HTML code, because it kept putting in my Meraki password. I raised a support ticket to have then change the name of the edit box, and the problem has stopped occuring sometime after that. When the problem was occuring, the site warned me that I had changes that needed to be saved every time I opened the page.

DHAnderson · ‎Apr 20 2019

I have setup VPNs on several firewalls and find that most cannot connect to the VPN from the LAN side. I also have setup Routing and Remote Access on different Windows severs. With that config, users could connect to the VPN from the LAN. A different way to accomplish a Guest Network that has managed access to the LAN, would be to setup an Employee Guest SSID that uses RADIUS to your server for authentication.

DHAnderson · ‎Apr 20 2019

This advice may be too late, but 1 use a password manager. 2 Grant access to a backup admin. I follow these two rules for everything that is of critical importance.

About DHAnderson

DHAnderson

Dave Anderson

Community Record

Badges