Once you have tags you can set up those type of alerts under network wide, alerts.    https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Network_Alerts_and_Notifications#:~:text=Note%3A%20Alerting%20for%20a%20specific,Switching%20%3E%20Monitor%20%3E%20Switch%20ports. For an actual report you'd probably need to pull data via the API or setup webhooks.  You could also use SNMP monitoring, but the alerts probably wouldn't be needed in that case. ... View more

I definitely recommend calling Meraki support.  ... View more

That allow list would only apply to content filtering. AMP has an allow list, but IPS doesn't have a traditional one, and Geo Filtering doesn't at all. ... View more

I would guess the issue (if it's a Meraki issue) is Geo Blocking on your Layer 7 firewall settings. There have been many issues over the years with IPs getting loaded into the wrong country by the provider of that database. The best you can do is open a support case to determine fully and then they can alert the provider and then turn off the misidentified country until its fixed. It's also possible some other thing like URL filtering/AMP/IDS have a similar issue where a bad definition/signature has been loaded. You may be able to look in event logs and identify, but I'd just call support. They should be able to find it quickly and will need to log a case to get the data resolved if that's the issue. ... View more

I suggest looking at getting started https://developer.cisco.com/meraki/api-v1/getting-started/ and go from there. I find postman pretty helpful for what I need to do. You could definitely do what you need with a runner in there. Not super pretty but you would get results you could combine and then parse.   There are plenty of resources out there on the internet to learn and test with Postman or Python in a general sense. ... View more

I am not aware of any Apple feature to push files out MDM or otherwise. There are definitely options for kiosk mode type things but this would not be a meraki feature per se. You'd just deploy the app of your choice. If your clients just want prestaged videos available to play when desired a shared folder app on a shared account might be your best option.  ... View more

The API is going to be your friend here: https://developer.cisco.com/meraki/api-v1/get-network-clients/ You should be able to iterate through your networks, filter by online and then just filter out guest users in the resulting data ... View more

The list must be less than a 1000 vlans total. Your list is well over a thousand So 1-998,1100,1200 would be valid for an example or 1-500,600-700,1100-1200 and so on ... View more

Have you packet captured the switch port connected to the physical host where the docker is? You need to see if the packets are actually leaving the host, if they are, then you can probably easily call Meraki support and find where the issue is. Your topology seems sound, but based on the one way traceroute it seems the hangup may be in the docker host. If that's the case you may need to get some help from a linux resource. Although who knows what our fellow members might know! 🙂 ... View more

Yes that makes sense once all is updated you should be good ... View more

As long as the AP you want to be meshed can see another working AP it will come online. Your theory is correct. You do not need to configure anything else. More details here: https://documentation.meraki.com/MR/Wi-Fi_Basics_and_Best_Practices/Wireless_Mesh_Networking ... View more

There is a known cisco bug related to the error: https://bst.cisco.com/bugsearch/bug/CSCwh17392?rfs=qvred Is this is MAC? or have you recently updated your client profile? There could be something misformatted/typed in the XML ... View more

There is a new(ish?) option in the GUI for TLS for syslog:   I don't look at that field often, but often enough that I think I'd have seen it before. The documentation page also doesn't  mention it yet. I suspect they are in the middle of rolling this feature out and it will only work on newer models or firmware and perhaps the gui stuff isn't working right. I would call support and make them aware. ... View more

Considering the whole platform is end of life, if my renewal was coming up I would be investigating alternatives and determining if I could afford to switch to something else, or maybe renew for a shorter term while I came up with a plan ... View more

I just saw this in the documentation digest and mentioned the verbiage in a reply but am also now concerned as this is a policy change without notice.   We have no need for SEC features on our vMXs and this basically doubles the price for all of our customers with no notice. ... View more

I won't get into the disappointment in this new policy here and will make a separate post. However, there is no SDW sku for VMX regarding this update:   Meraki MX/Z Security and SD-WAN Licensing Change: Added "In-addition, with the launch of the Advanced Security License for the vMX, the vMX also now have to match the MX Org license tier." So it should probably read as something like: vMX licenses tiers must now match for Enterprise or Advanced Security customers and for SD-WAN Plus customers they must order Advanced Security.  ... View more

I am somewhat confused with what you are describing about manual vs automatic. You still need a complete chain of trust for the connection to be secure all the way through. There are other reasons to want a load balancer, but all items (Dashboard, Load Balancer, Radius Server) need a cert and need to trust the other certs. So the thing that doesn't support automation will still need to be updated. Are you trying to create a RADSEC connection between just the dashboard and the load balancer and then the load balancer would be having an unencrypted connection to the RADIUS server? I suppose if the load balancer supports that, in theory it would work but I've not heard of that sort of functionality before.  ... View more

I'm literally two credits short right now for one of my certs. This is very helpful and just saved the company a few hundred bucks! Thanks! ... View more

In Azure the extra NIC on the VM is a new option during the deployment wizard. If it was available and you included it when deploying I would think it would show up, if not you would have to redeploy as you can't edit that sort of thing. I can't speak to AWS but if there is an extra nic already attached to the VM you should be able to see that hardware on the cloud side. The upgrade to 19.1.7 shouldn't affect your current operations (outside of the momentary outage from the upgrade reboot) so its worth a shot doing the upgrade to see if it will show up if the NIC is present or you aren't sure ... View more

Do you have one port uplinked to a device that will provide DHCP and internet access?  If no dhcp is available  you can program a static IP by following the C9300 info here: https://documentation.meraki.com/General_Administration/Tools_and_Troubleshooting/Using_the_Cisco_Meraki_Device_Local_Status_Page ... View more

Disable MAC Randomization is a per ssid setting in MDMs, so you are not disabling privacy for devices when they are used on other networks and as you are saying they don't leave campus, I'm not sure what the concern is. They are your devices, on your network. What makes them any different in that scenario from a wired desktop? They just happen to be on wireless. ... View more

  Per the schema: https://developer.cisco.com/meraki/api-v1/get-organization-clients-search/ recentDeviceMac is supposed to provide this, which you could then cross reference. ... View more

You  need a RADIUS server if you want to do this with Meraki with Intune. ISE does support this if you didn't want to deal with a Windows Environment.  https://community.cisco.com/t5/security-knowledge-base/how-to-integrate-meraki-networks-with-ise/ta-p/3618650 https://community.cisco.com/t5/security-knowledge-base/cisco-ise-with-microsoft-active-directory-entra-id-and-intune/ta-p/4763635   If you wanted to use Systems Manager there is a capability to do it without any servers: https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Certificate-based_Wi-Fi_authentication_with_Systems_Manager_and_Meraki_APs ... View more

The caution I have with both subscription and EA is the ability to spin out sites with licensing. I deal with Automotive Retail and there are constantly sales of sites. They make it nearly impossible to spin out a site and transfer the licensing if the new owner doesn't want it and with EA you have even more restrictions as there is a minimum value required for new contracts (100k actual cost). Cisco reps will just say you can but it's not at all automatic and your customer could be saddled with something for the duration of the term. ... View more