Hello,   I am looking at improving the way end user devices connect to our internal wifi (laptops, phones, pcs etc). I want to use a Certificate based system like EAP-TLS, however I am not sure how a brand new device would be able to get its certificate from the CA since it needs a cert to get onto wifi to contact the CA lol. I am in the process of trying to get management to buy systems manager for us and wondered if this is something else it could do for us. At first I wondered if it could somehow deploy the certificate before the machine joins the domain/network but then I wondered if all that would even be necessary - does systems manager have its own set of tools for managing network access? Thanks! ... View more

Hello, When I do a call to get L4 firewall rules from a MX, where the rule uses a policy object as source or destination, the API returns the object ID - but I cant see anywhere that tells me which policy has which ID. Iv checked the dashboard and API return fields....I assume there must be somewhere in the dashboard view but im just missing it 😛 thanks! ... View more

Hello, I am looking to standardize filtering throughout our organization as we currently have a mish-mash of rules and methods. There appears to be multiple ways to do it and I'm not sure whats best. Theres the Content filter and L7 firewall rules. Theres L7 firewall rules on each WiFi SSID Theres L7 rules in Group Policy Not sure if im missing one. I read something that gave this priority order; "There are a number of different ways on the MX to use content filtering to block or allow access to websites. In circumstances where different filtering options contradict one another, the following priority applies (from highest to lowest priority): Blocked and allow listed URL patterns. Content filtering rules applied via Group Policy (using Active Directory or otherwise). Global content filtering rules." But what about the firewall? It sounds like content filter has least priority but im not sure. If I have content filter rules, do they override SSID firewall? or just the MX L7 rules? What if I have a mess of rules in group policy, both L7 firewalls AND content filter? (I don't, but I just want to know how it works). Thanks! ... View more

Hello, I have just configured a virtual MX in AWS as a VPN endpoint for AnyConnect using SAML SSO in Azure. It all seems to be working nicely however, every time I connect, it asks me to enter my username. I enter it, it does the MFA and I'm in. Annoyingly it doesn't remember my username between connections. Is there any setting anywhere so that it either remembers and auto populates the username, or just doesn't ask at all and goes straight to MFA? Our Azure is administered by a Group level IT dept (I don't have access) - any they tell me there is nothing in the Azure app that effects this 😞 Any ideas? Cheers. ... View more

Happy New Year everyone,   I am trying to use the Dev Hub API to check the API requests for my org to troubleshoot an issue but the Auth header seems to be greyed out so I ant put my key in 😞 I tried just adding a new Auth field but it didn't work. Any idea what the issue is? https://developer.cisco.com/meraki/api-v1/get-organization-api-requests-overview/   ... View more