Yeah, ok. Too bad!  Doesn't that duo setup require running an on-prem server for that proxy? ... View more

@PhilipDAth , do you know if you can support MFA w/ AnyConnect?     ... View more

Thanks Andy, just responded! ... View more

Yes, valid point.  I thought of that too, but half of what Meraki does is in "beta".   ... View more

Ok, the answer is in, and it isn't pretty.  I'm not even sure how to respond to this.   RE: Cisco Meraki Case 0642****   Hello Luke Thanks for the reminder, It looks like dashboards that had Network objects enabled sometimes experienced having L3 FW disappear from time to time and those changes don't appear to show up in the change log. This doesn't  happen often but you would have to manually add the L3 FW rules back to the dashboard at this point. Our development team is still looking at ways to make sure that this doesn't happen for any customer dashboards going forward in the future. In the meantime if you experience any additional issues with L3 FW rules disappearing please let me know. Thank you, and I look forward to your response! Je**** Cisco Meraki Technical Support ... View more

Yeah, I hope we get a good explanation.  It creates a LOT of questions for me.  (How do I know this hasn't happened somewhere else).  This could be a disaster.  Firewall rules are not items that should "just disappear".   ... View more

Yes, Layer 7 FW rule was edited, and a bunch of switch ports.     I opened a support ticket - he looked through everything for about an hour, but said he would have to "escalate to development".  That feels like a black hole, but we'll see. ... View more

@Inderdeep No, we haven't. ... View more

@PhilipDAth, I like your idea of applying a default policy for the VLAN and then over riding it on a per client basis.  The only potential issue I see is that if a device is offline for 30 days for some reason, I think the over ride policy will need to be reapplied, but that should be really rare.    Great suggestion, thank you!  🙂 ... View more

It only monitors the clients you specify.  What if we want to know if a previously *unknown* client connects?  That's what I'm looking for.  It is SOO close...   ... View more

"Meraki-branded Depends"     ...You know, they are big on swag...  😂 ... View more

Does anyone know how the licensing works for AnyConnect on MX? ... View more

Nice, you inspired me to revisit that option, and I found the issue!  🙂   In my case, I had an org that was disabled because they had closed the business, and that was causing an error and causing the JOIN node to not work correctly! ... View more

I tried to use join several ways, and it wouldn’t work for me. GetOrganizationNetworks returns multiple values for you, right? ... View more

@Sriram Sure:   The real key is to take output of getOrg and split it (this is only needed if you have multiple organizations), run it into a limiter to not hit API limits, and then run from that into a function.  The function right before "getNetwork" is this: msg.organizationId=msg.payload.id return msg;  This sets the msg.organizationID that getnetworks is looking for from the value that was obtained in the getOrganizations query.   Hope that helps! ... View more

@jdsilva    I agree....I made a wish this AM.  In my experience, those just go into a black hole.     My 30000 requests for better real time visibility of client traffic has been ignored so far... ... View more

@cmr  that's the issue, link is saturated.   We are already dropping the packets so no issues there. ... View more

@BlakeRichardson  Yes, which is kind of my recommendation thus this post.   However, I wanted to keep more of a "primary w/ failover" model.  Otherwise, nothing will prevent a student from gaining access to a staff laptop at some point and doing a quick "whatsmyip" and starting the attack on the 2nd connection.  Won't take long for them to realize their DoS isn't working...   However if I leverage a failover connection, according to the comments on this post, it isn't going to fail over.  And that's a bit of a problem! ... View more