Hi all,   We have recently implemented the Meraki/Cisco Secure Connect SD-WAN solution and have all of our MX devices now connected to each other via the Secure Connect VPN feature along with Umbrella and the cloud-based internet break-out. This gives us a nice centralised internet solution whether in or out of the office.   Whilst it works relatively well, there seems to be absolutely no useful tools for analysing the outbound internet-based traffic and whether something is blocking certain apps/processes.   We can see from the Umbrella DNS/firewall/web logs that calls to a certain URL/domain are being 'Allowed' and that nothing is being logged as blocked.   We have a third party installed application that communicates to a cloud-based Postgres SQL instance and we simply cannot get it work work via Secure Connect. Nothing is showing as being blocked and only 'Allowed' entries in the log, all of which relate to the app.   If I only have a URL/domain, how on earth can I get the Secure Connect firewall to just allow the traffic, or even see why it's being clearly being blocked but not logged? I cannot use the MX's 'Local internet breakout' feature to resolve this particular situation because the cloud service the app connects to has some kind of load balancing in front of it and the IPs change on an almost minutely basis. They're also on massive subnets so excluding them all would be madness. Plus, we've added IP after IP and never managed to get it work even once. The MX does have a feature to exclude a URL/DNS entry but it does not work and I suspect that may be because we use the Umbrella agent for DNS protection on our endpoints? Meaning the DNS query would never hit the MX?   We also provide remote connectivity for our users using the Secure Client (AnyConnect component) to the same Secure Connect instance and had the same problem while out and about. We have resolved the situation while working remotely by excluding the URL/DNS domain from the client VPN tunnel, via the basic config settings, and this works perfectly.   Any ideas why we can't do the same from traffic originating from our office-based MX devices? ... View more

I am thinking of purchasing some second hand legitimately owned switches (which have been unclaimed) but wonder what the situation is with ongoing warranty/support if I simply purchase the associated licensing.   Does the license cover the physical support/failure of switches? My existing is estate is currently 100% purchased by our business, from new so don't want to be left in a position where a physical problem leaves us in the cold.   Thanks in advance! ... View more