Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About lpopejoy
lpopejoy
A model citizen
Member since Sep 1, 2017
Thursday
Community Record
190
Posts
86
Kudos
2
Solutions
Badges
Mar 15 2022
6:28 AM
16.16, but we have had the issue on other firmware versions at this site.
... View more
Mar 14 2022
5:06 PM
1. What model of MX do you have? MX64 2. How many users? 15 3. If you disable Advanced Malware Protection does the situation improve? Haven't tried, but I doubt it. It is too erratic to test reliably. 4. Do you have any client VPN or site to site VPN's running? No client VPN. One other site via AutoVPN.
... View more
Mar 14 2022
11:24 AM
Yeah... I got excited when I saw it show up a while back. I even opened a support ticket today just to be sure this wasn't one of those magical "you have to contact support to get the feature enabled" things.... Here is their response: Thank you for contacting Cisco Meraki support. My name is _ and I will be the support engineer assisting you on this case. This is currently a known issue our development team is aware of. That graph is not populating because it is not a fully developed feature and is planned to be removed from the report due to this. Unfortunately, there is not any other information I can provide regarding the CPU utilization, but feel free to respond with the issues you are seeing on the device and we can hopefully troubleshoot it further. Please feel free to let me know if you need any further assistance or have any questions.
... View more
Mar 14 2022
9:45 AM
2 Kudos
I'm dealing with a lot of packet loss on a small network. Support says that the CPU is hitting peak utiliization about 75% of the time. Two questions: 1. There is abviously something going on that is causing the CPU to max, but I'm not sure how to isolate this issue. What would you do? 2. It is a bit frustration to have to call support and sit on hold for 40 min just to find out the the cpu utilization is. Does anyone know if there is a way to get this data via API? (note this is different that the performance score which IS available via API) 3. Is there a way to get the built in chart for CPU Usage to work? (org->Summary report->select a single network)
... View more
Feb 11 2022
6:47 PM
anyconnect doesn’t help with site to site. …and it has a minimum license purchase of 25 licenses which pretty much kills its usefulness for most of our clients. Otherwise, I agree.
... View more
Feb 10 2022
9:57 AM
I know it isn't available, that's why I posted! This needs someone inside Meraki to push it up the development path.
... View more
Feb 10 2022
3:40 AM
1 Kudo
Two issues: Client VPN - almost zero firewall rules around this. Excluding the hack job of using group policy and assigning to the VPN client device (which isn't reliable) Site to Site VPN w/ 3rd party firewalls - no ability to block inbound traffic. Meraki's position is that it all needs to be blocked "closest the the source". That's all good and well, but what if you don't have control over the source. We have multiple cases of setting up S2S VPN's w/ 3rd party firewalls and outside vendors. I don't like it, I don't want to do it, but didn't have a choice. That really terrible part is that we have to expose our entire network to the 3rd party and can't control the ingress on the VPN. We NEED firewall rules on inbound VPN traffic - both S2S AND Client VPN - but especially S2S. Every other firewall I've worked with has this capability. PLEASE!!
... View more
Labels:
- Labels:
-
3rd Party VPN
-
ACLs
-
Client VPN
Dec 28 2021
11:33 AM
I'm pretty sure MSP relationships are not Meraki's top priority. Unfortuantely.
... View more
Dec 27 2021
1:19 PM
But you can't split that 25 licenses over multiple organizations can you? You are just saying that one multi-site organization can share the 25 licenses across all of their sites?
... View more
Dec 27 2021
1:00 PM
Am I missing something or is there no way to license less than 25 users for a site?
... View more
Labels:
- Labels:
-
Client VPN
Dec 13 2021
10:01 AM
Ah, ok. So if it would have been HTTPS, would it still have been blocked? My guess is "no."
... View more
Dec 13 2021
9:36 AM
@DangerNoodle that is VERY cool. Thank you for sharing that. I would still like to know more details on *how* it works, but I guess it is just looking at source IP's. Do you know if this connection was inbound to a TLS encrypted port?
... View more
Dec 11 2021
1:03 PM
9 Kudos
According to https://blog.talosintelligence.com/2021/12/apache-log4j-rce-vulnerability.html Meraki MX (w/ Advanced Security, I'm sure) can detect and block Log4J exploits (https://www.huntress.com/blog/rapid-response-critical-rce-vulnerability-is-affecting-java). I'm curious how this is possible if the the traffic is TLS encrypted. As far as I know, Meraki MX is not doing SSL inspection/decryption which means that Log4j compromises couldn't be detected, right?
... View more
Labels:
- Labels:
-
Other
Nov 30 2021
5:21 PM
Hello, In the last few weeks we have had to open multiple support cases for different sites due to the fact that their Site to site VPN between MX appliances in the same organization was unstable. Support "changes the VPN registry" due to the "registry being overloaded" and this resolves the issue. This is VERY frustrating to me on multiple points: If the registries are overloaded then fix the real problem This shouldn't require me to open support tickets to fix There is no way that I can see what registry is being used, if it is the problem or not... I just open a ticket, and cross my fingers that support will fix it. Anyone else seeing this?
... View more
Labels:
- Labels:
-
Auto VPN
Nov 7 2021
5:25 PM
I would start by directly connecting a computer to the modem. Make sure you have consistent speed test and ping results. If so, then test the phone the same way. Work down from there until you find the culprit.
... View more
Nov 7 2021
5:14 PM
You can still connect directly even if it’s bridged. You just have to assign the static Ip to your computer.
... View more
Nov 7 2021
5:42 AM
Try connecting a computer directly to the modem to test. Make sure that is solid. yes, you could take your MX over and plug it in. It sounds like even 15 min would be enough to see if that was the culprit. Check what DNS servers the phones are using. I know it sounds unlikely (and probably not the issue if there is packet loss anyway)…. But I recently fixed and issue kind of like this. Turns out the DNS being used wasn’t responding quickly enough and lookups were failing.
... View more
Jun 7 2021
7:11 AM
1 Kudo
See this thread and then decide if you want to use them: 🙂 https://community.meraki.com/t5/Security-SD-WAN/All-firewall-rules-disappeared/m-p/116160
... View more
Jun 4 2021
5:51 AM
Yeah, ok. Too bad! Doesn't that duo setup require running an on-prem server for that proxy?
... View more
Jun 4 2021
5:33 AM
@PhilipDAth , do you know if you can support MFA w/ AnyConnect?
... View more
May 26 2021
6:09 AM
@Paul_H I appreciate you taking a stab at answering, and also can appreciate that you have once felt my pain before being brainwashed. 😉 Listen, I know it isn't easy; and I understand the Meraki MO of "simplicity". But I think you have to ask "simple for who"? I can tell you there is nothing simple about a 60 min call (on hold) to get Meraki to enable DH 14. There is nothing simple about the fact that none of my engineers can tell that DH 14 is enabled on a firewall without ANOTHER 60 min call to Meraki support. There is nothing simple about the fact that most of us don't even know WHICH phantom options even exist - no publicly documented list that I'm aware of. I know managing features across different hardware models isn't easy. But have you ever heard of a little company called Ubiquiti? They have figured it out. ...AND they don't even charge a licensing fee. ...AND their hardware is a fraction of the cost. So, with all due respect to someone who was once in the trenches with me... I have two points: 1. Meraki may look at feature requests, but until that feature request dashboard is public and we can all vote on them and see the rankings, I don't believe that it has the development weight that it is proclaimed to have. There are too many features that people have had to beg for too long to have implemented (or are still waiting for). 2. You have the budget to figure this out. Simple doesn't have to mean "dummy proof". Simple doesn't have to mean "one size fits all". It isn't like you are Apple selling an iPhone to a wide audience from senior citizens to children - needing to assume there is no IT knowledge. You ONLY sell through resellers. Most of your equipment goes to large enterprise or goes through some IT consultant channel. I'm trying to tell you what "simple" looks like for us - and I think that should influence your development decisions!
... View more
May 24 2021
1:11 PM
3 Kudos
Don't get me wrong, Meraki has a lot of things to love, but WHY DO WE HAVE TO CONTACT SUPPORT TO ENABLE CERTAIN THINGS? https://documentation.meraki.com/MX/Client_VPN/MX_Security_Audit_Failed_-_Recommended_Steps To fix that, we have to contact support. Oh, but after DH 14 is turned on client VPN quits working. There is no way to know when you look at the client VPN page that DH group 14 is turned on. Why is this so hard. Just show us the options that are enabled and let us control it. Quit wasting your helpdesk time (and our helpdesk time) with options we can't control and your support doesn't understand the significance of. End of my rant, thanks for listening.
... View more
Apr 28 2021
6:59 AM
Yes, valid point. I thought of that too, but half of what Meraki does is in "beta".
... View more
Apr 28 2021
6:38 AM
2 Kudos
Ok, the answer is in, and it isn't pretty. I'm not even sure how to respond to this. RE: Cisco Meraki Case 0642**** Hello Luke Thanks for the reminder, It looks like dashboards that had Network objects enabled sometimes experienced having L3 FW disappear from time to time and those changes don't appear to show up in the change log. This doesn't happen often but you would have to manually add the L3 FW rules back to the dashboard at this point. Our development team is still looking at ways to make sure that this doesn't happen for any customer dashboards going forward in the future. In the meantime if you experience any additional issues with L3 FW rules disappearing please let me know. Thank you, and I look forward to your response! Je**** Cisco Meraki Technical Support
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 3175 | Jun 7 2021 7:11 AM | |
| 20704 | Jun 30 2018 9:00 AM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 9 | 19862 | |
| 8 | 4425 | |
| 4 | 5654 | |
| 3 | 1936 | |
| 3 | 2471 |
© 2024 Cisco Systems, Inc.
