Hi @jameshottinger,    I have a link to a Spiceworks article saved in my notes from when I was trying to do the same thing. I never could get a GPO that would include the pre-shared key...but I was able to use the CMAK (Connection Manager Administration Kit) and create a configuration that works for our scenario. It may be worth looking into.    https://community.spiceworks.com/topic/417332-gpo-to-configure-l2tp-vpn https://www.windows-server-2012-r2.com/create-a-connection-profile-with-the-cmak-wizard.html  ... View more

Hi @Danjns,    I have not tried this myself, but I think you could create a Time-Based Tag in Systems Manager > Configure > General specifying the hours that you want. Then tie that tag to a SM profile containing your VPN for the devices. Then tag your devices with the time-based tag.   Let me know if that will work!  ... View more

Hi @LostITguy,    Is the MX Uplink WAN port currently configured for Static or DHCP for the public addressing?   http://wired.meraki.com/#configure should take you to the local status page for your MX to verify. There you can see if the MX is successfully getting a Public address via DHCP or you can plug in your static information.   ... View more

Ah, they may have added that feature after they retired the free version. I think you would need the full (licensed) version of Systems Manager to be able to change those features. It might be worth reaching out to Meraki to find out for sure.  ... View more

Hi @Shock,    Under Systems Manager > Settings > More Android > Restrictions there is a check box for "Prevent installation of apps from unknown sources" that I believe is defaulted to be checked when adding the setting to your profile. Have you verified that setting is unchecked?  ... View more

Hi @DorothyL   Is this going to be primarily focused on Meraki use for Retailers? Or would there be any benefit for other customers to attend?  ... View more

Hi @JayInJersey,    I agree with @Adam, double check group policies wherever they are assigned and remember the hierarchy outlined in Meraki's Documentation.  ... View more

Hi @garak0140,    If you haven't already created your cloud dashboard, start there.    You can add your devices under Organization > Inventory or under Network-wide > Add devices once you have created a network for your remote offices.    You can then start the configuration of that network in your dashboard. When the devices are physically put in place and have a valid connection to the internet, they will automatically check-in to your cloud setup configuration and pull those configs down. Make sure your network is solid and running as designed before moving on to the site-to-site vpn setup.    See Meraki's documentation for more site-to-site vpn information. I think the documentation on their site can help you through most basic setup scenarios as long as you are familiar with networks in general.  ... View more

Hi @MSCICT,    I believe this option is enforced when backing up the device to a computer via iTunes. It will prompt you to set a password which will then be used to decrypt that backup in the future.    See Apple Support Article ... View more

Hi @Tspan,    For now, I think it's a limitation of the design of the Traffic Analytics page. I wish they would add more filters here, such as the ability to specify a single Meraki device or filter by Tags.    I think it would also be nice to be able to filter the Network Wide Clients page by the Connected To field. This could get us there as well. I guess I'll just keep submitting wishes... ... View more

I hear you loud and clear now, @jffortier!   You're talking about the arrangement of the App Icons from the Home Screen Layout in Profiles & Settings. I have not tried rearranging including the Webclips here on Supervised devices. If I can get to it, I'll let you know. But I do see that it does not let you specify the Webclip to choose.  ... View more

Hi @jffortier,    I think I may be a little confused as to what you are asking here. Feel free to let me know if I'm way off on what you're trying to do.    I use a single webclip here that links to a URL for a web gui of our ERP. The webclip just acts as a shortcut to a webpage. I don't believe it is designed to ask or prompt where to go, just simply opens the URL to the webpage it is configured to.   ... View more

I have found a quick and easy way that works for me is to search for the subnet assigned to Client VPN.    For example, if you have 192.168.27.0/24 assigned to Client VPN connections...just search for '.27.' in network connections and it will show you all of the connections for the given time period.    If you drill down into the client details, it will show you the last time it connected and when it disconnected (although, my disconnects are hit and miss, think it may be if they truly disconnect vs. a computer timeout or shutdown).  ... View more

I was lucky enough to pick up a fidget cube from the booth at Spiceworld, but I’m jealous of the socks @MilesMeraki ! ... View more

Hi @Aondio_Carlo,    I think using a group policy in this case may not be the best solution for you. When your Meraki MX picks up each login/authentication event and sees an individual user, I believe it is then applying the appropriate group policy to the device (or client) and not each unique session id within the OS. Since they are all accessing one physical network device, it will apply one group policy to the client at a time. You may need to find a different solution for limiting access with that specific RDP host.  ... View more

Great job you guys! I'd be lying if I said I haven't already found useful info between your posts and responses. Thanks @PhilipDAth, @Mr_IT_Guy, @MilesMeraki, and @BHC_RESORTS!!!! ... View more

I don't see the option for "Protected Networks" there under security appliance > Threat protection. ... View more

@RafaelM,    While your solution works for a very top level overall usage amounts from the Client Monitoring page for individual or multiple clients, I'm afraid the same does not hold true when getting in depth detail for a specific client. What I would call the "Network Client Summary" area (I don't believe it has a name other than the client's given name or mac address once you click on the client from the client monitoring page) shows application usage and time spent that is not exportable in this way, via .csv or other. I have submitted wishes for this in the past, but it has never come to fruition. I have resorted to expanding the list shown and printing the site's page to a .pdf. Far from what is expected by "reporting."  ... View more

The closest thing I can think of would be Configuration Templates.    Found under Organization -> Monitor -> Configuration templates ... View more

I believe the entire MX line of security appliances either have a second dedicated WAN port or can be configure to use another port for WAN as well.    EDIT: Sorry, I missed the "more than 2" ... View more

While I also think it would be nice to filter the Network Wide Clients page by the "Connected to" column, I've found that adding that column and linking directly to that switch I can see all connected clients on the Switch's Summary page. You can drop in IP address, port, and VLAN into that grid as well. Not a total solution, but maybe get by until they add it to the Network Wide Clients.  ... View more

Correct me if I'm wrong, but I think you are under the assumption that you cannot broadcast multiple SSID's from any single AP? You should be able to have both SSID's broadcasting from any AP. Then you can setup a schedule for the "Lunchtime" users SSID that they will connect to under the SSID Availability page in your dashboard. Under the Firewall & traffic shaping page for that same SSID, you can set individual client bandwidth limits, or a limit for the entire SSID per AP. I think that would be the way to go unless you want to setup some more in-depth Group Policies.  ... View more