The Meraki Community
Register or Sign in
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
  • About imuccini
imuccini

imuccini

Conversationalist

Member since Aug 8, 2018

‎01-29-2021
Kudos given to
User Count
CptnCrnch
Kind of a big deal CptnCrnch
1
SliperHO
SliperHO
1
fernando-buil
fernando-buil
1
View All

Community Record

4
Posts
0
Kudos
0
Solutions

Badges

1st Birthday
Lift-Off View All
Latest Contributions by imuccini
  • Topics imuccini has Participated In
  • Latest Contributions by imuccini

Impact of iOS 14 random MAC on IPSK and Meraki functions

by imuccini in Wireless LAN
‎07-27-2020 10:39 AM
‎07-27-2020 10:39 AM
Apple iOS 14 is planning to use a private WiFi MAC Address and change it periodically, even if the device connects to the same BSSID (https://support.apple.com/en-us/HT211227).   How does this impact Meraki IPSK? If the MAC address changes over time, this technique won't work. https://documentation.meraki.com/MR/Encryption_and_Authentication/IPSK_with_RADIUS_Authentication   Is the Meraki team working on alternative solutions or workarounds? ... View more

Re: GDPR compliance of event logs with MAC address

by imuccini in Wireless LAN
‎04-24-2019 01:51 PM
‎04-24-2019 01:51 PM
I am not a lawyer as well, but I understood that "consent" and "legitimate interest" are two different lawful grounds to collect and process personal data. Just associating to an SSID is not a freely given, informed and explicit consent to give "someone" (who?) the right to see and process the MAC address (personal data). So I believe it can't be considered consent.   The only way, I guess, is to leverage the legitimate interest ground. And to rely on that the GDPR requires anyway to inform the customer before, with a notice that explains at least on the first level what data is collected and who is the controller, on top of providing mechanisms to object (a prior and a posteriori) to the collection and to adopt adequate security measure for the processing itself (for example pseudonymization). And this seems to be the tricky part, in fact, I don't know any vendor doing that.   Technically it would be possible eventually, just avoiding to track the logs unless you get consent for it. Moreover, in the end, tracking the MAC address and location (AP) by means of association logs is equivalent to tracking the MAC with the Location APIs from the end user perspective.   Looking forward to collecting opinions on this topic. ... View more

GDPR compliance of event logs with MAC address

by imuccini in Wireless LAN
‎04-24-2019 12:10 PM
‎04-24-2019 12:10 PM
I am trying to advise a customer about the measures he needs to put in place to ensure the GDPR compliance of his initiative using Meraki.   When an end user associates his device to an SSID, Meraki dashboard tracks the device MAC address and the logs of the activities of that device (for example  associations /  disassociations ). This happens immediately as soon as the device associates the first time, independently if there is eventually a captive portal after, or it is a simple WPA2 or open network.   The MAC address is considered personal data in the GDPR, and, since it is not anonymized immediately after the collection, it is subject to the GDPR rules. Moreover, the logs are associated with an APs which physical location is known, so the logs track also the location of the device, plus other info (model, manufacturer, etc..)   The only lawful ground that can be used for the collection and processing of such personal data is legitimate interest.  However, to rely on this principle, the data controller must anyway provide prior notice to individuals before the data is collected. But, even in case of setting up a Splash Page with the privacy notice, that personal data is collected before and independently from the acceptance (or not acceptance) of the terms on the splash page.   What is the best practice recommended for a data controller to be able to deploy a WiFi network in compliance with GDPR? How can a data controller prove the legitimate interest in collecting and processing such personal data in clear and for such a long time?   ... View more

Re: Radius Accounting on MX devices

by imuccini in Security / SD-WAN
‎08-08-2018 01:29 PM
‎08-08-2018 01:29 PM
We are waiting for the same. ... View more
Kudos given to
User Count
CptnCrnch
Kind of a big deal CptnCrnch
1
SliperHO
SliperHO
1
fernando-buil
fernando-buil
1
View All
custom.footer.
  • Community Guidelines
  • Cisco Privacy
  • Khoros Privacy
  • Privacy Settings
  • Terms of Use
© 2021 Meraki