Hi All, looking to purchase a mx68 with advanced security licensing for a small office location..   from the list below.. please can you tel me what is and what is not supported - the datasheet is very limited.   SSL VPN tunnel - yes but requires a anyconnect license? or covered by the advanced security license and how many users?  DLP  - cannot see specific data pertaining to the mx68? Web filtering - supported yes but limited cannot do custom profiles etc that i am aware off. WIDS (wireless intrusion detection) supported?   thank in adv ... View more

Hi All,   new setup on meraki.. we have the following outbound rules.   LAN -> Internet allows ports http(s), dns, ntp, ping - very basic Then i have another rule to with any any allow..   is there a way i can audit what traffic is being passed over the any any allow rule? i see hits but unable to determine what ports/dest IPs are still going out. no syslog configured at this stage as in POC testing atm.   thanks ... View more

Hi All,   as a MSP, we use Solarwinds to monitor client environments for device uptime etc..   I know this post is quite old.. but is it still applicable?   https://community.meraki.com/t5/Security-SD-WAN/Monitoring-MX-with-3rd-party-tools-such-as-Solarwinds/m-p/57295   so option might be to use API but does not look like it will allow me to monitor much anyways, and provides access to the org rather than a specific device it seems.. i guess other options would be to allow icmp to the WAN interface from our snmp public poller. very basic but something at least. OR configure the dashboard to send alerts to a valid email that we can then create orchestration/playbooks to integrate into our ticketing system.   thanks in adv ... View more

Hi, can admin roles be set to allow engineers only access to specific devices within an org? we have a MX and some meraki switches under the same network.. i need to give user1 admin rights to the MX only and no access to the switches. how can I achieve this?   thanks   ... View more

Hi All looking to configure snmpv3 so we can monitor (from the outside) an MX within an organization where we have a bunch of meraki switches also. the only option i see for snmp is within the organization settings. how and where (if possible) do i configure snmp purely for the MX within this org?   thanks ... View more

Hi All, I need to move my MX from one network into a different network within the same organization. As per documentation, this is possible however the downside is that I will lose my config and essentially have to rebuild from scratch?   has anyone done this before and found a way to move the MX and keeping their old config in place?   thanks in adv ... View more

Hi All, newby on meraki..   busy setting up a MX250 with basic config as a poc. WAN1 connected to ISP1 WAN2 connected to ISP2   Port 3 connected to LAN   WAN ports are not live yet hence cannot test.   we want certain lan subnets to connect to internet via wan1 and others via wan2 (not using sd-wan and not using load balancing at this stage)        - Will it work if I just define 'flow preferences' for certain source networks via wan1 / wan2 ie in the  'SD WAN and traffic Shaping' section?            192.168.10.0.24 > ANY > WAN1          192.168.20.0.24 > ANY > WAN1           172.16.10.0/24 > ANY > WAN2           172.16.20.0/24 > ANY > WAN2    It seems not to be possible to define a source based route for wan interfaces under the 'Security SD-WAN\addressing    and vlans' section, can only do this for non-WAN interfaces it looks like.   is this the correct process to follow?   thanks in adv ... View more

Im a cisco, forti  and palo guy - meraki still very new to me.   i cannot find a way to configure just a normal L3 interface without specifying a vlan tag id.. is this possible? doesn't look like it. ive done in on the uplink ports thats fine and working.. but on the GbE ports seems not an option..   on other FWs you'd create a L3 interface, then sub-interfaces if you want to do vlan ports.. but Meraki it seems i am forced to use vlan tags from the get go.   thanks in adv ... View more

Hi All, i am new to Meraki and need some insight please.. we have a sinlge MX250 being deployed.. it has 2 internet interfaces (SFP) and we have 3 ISP connections. From i read i cannot use the GBE or SFP ports for internet connectivity.   What is the best way to connect all 3x ISPs to the internet interfaces?   Can i aggregate the internet 1 and 2 together and create a subinterfaces for each ISP link using vlan tagging for each ISP connection? alternatively what is the best option to configure?   additionally, if the above is possible, can i then configure load balancing accross all 3 ISP links?   thanks in adv   ... View more