Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About TBisel
TBisel
Getting noticed
Member since Dec 3, 2018
Jun 30 2021
Community Record
42
Posts
11
Kudos
1
Solution
Badges
Nov 6 2020
1:08 PM
2 Kudos
I really am starting to hate this company. To add to the trouble, Apple has released the update. And its getting flagged by Meraki and AMP as malware.... So the alerts have just begun... Yippy! File downloads as 86ea5441393e1f0b96656bb5ad56364b308b7ca6.zip From: http://updates-http.cdn-apple.com/2020FallFCS/mobileassets/001-62165/F4052D84-DC41-414E-90A4-7E6E9715DD7C/com_apple_MobileAsset_SoftwareUpdateDocumentation/86ea5441393e1f0b96656bb5ad56364b308b7ca6.zip And is identified in AMP for Endpoints as: W32.6B9A473044-95.SBX.TG With SHA of: 6b9a47304497324fe40e3ccfba43bbb056c152500550849d1597fc47b4ebab35
... View more
Oct 21 2020
8:54 AM
2 Kudos
Which part is considered "The Issue"? Is it the problem in general with Apple swapping MAC addresses, or is it that even with randomization turned off, its still happening? We don't have MDM, and walking people though settings is not realistic.
... View more
Oct 19 2020
12:33 PM
1 Kudo
I dont think there is a way to limit the alerts on a per-scope or VLAN. I think that might end up being the Meraki work around though. Seems like Android is going to do a similar thing.
... View more
Sep 28 2020
5:26 AM
2 Kudos
Took DHCP leases down to an hour, still getting these stupid alerts. Dont want to disable the alerts, but we currently do not have MDM. So looks like I am going to be losing alerting for this... Fun.
... View more
Sep 24 2020
10:55 AM
1 Kudo
I have multiple sites sending alerts for IP conflicts recently. It is only iPhones, and only on our wireless. I have SSIDs and a VLAN setup dedicated just to mobile phones, and the MX running as DHCP server for that VLAN. This was not an issue until two or three weeks ago but we are getting two to three alerts for different sites almost every day. Anyone have any idea where to start looking on how to fix this? Is this another iOS bug?
... View more
May 26 2020
7:52 AM
You have a model number for one you have good experience with? Most of these places we have these installed at cant get internet or cable so getting 5G there is going to be pretty far off. But the option to have an additional antenna is appealing. Am I the only one wishing for a Starlink waiting list?
... View more
May 21 2020
8:22 PM
Yea that thing is way to expensive for what it is and than pairing it with the licensing it seems ridiculous. Unless there is something major I am missing.
... View more
May 21 2020
1:56 PM
So we have a handful of sites that rely on Verizon USB failover. The new models they are selling are horrible and after firmware updates the old ones are now less reliable than they have been. Want to find something that will give me an ethernet handoff instead of a USB one. Im in the energy industry so anything huawei is out. Anyone have any other recommendation?
... View more
Mar 6 2020
8:23 AM
For anyone still looking, just ran into this issue myself. For some reason the pre-existing firewall rule for port 1812 is garbage and doesn't work. If you disable Windows firewall or make a new rule to allow just port 1812 everything functions as it should.
... View more
Jan 30 2020
5:35 AM
@PhilipDAth What if I track by IP Address can the blocking still be done by group policy? I dont think this is whats going on but I do want to check.
... View more
Jan 29 2020
1:07 PM
Yea we gave it two months to try and build it but we have stupid expensive internet connections here and my Systems Admin wasn't having it. Two 200MB symmetrical WAN connections and a 150MB Symmetrical fiber to another site. Me explaining that it was set to full list and it would take time to build just wasn't cutting it. Playboy and Hustler is showing up categorized correctly in the tool. Firmware is sitting at 14.39 with an update available. Going to have to try that.
... View more
Jan 29 2020
12:32 PM
It seems other adult websites are being blocked but at least these two are not being blocked.
... View more
Jan 29 2020
12:28 PM
I got the green light to test from my machine to see if I can actively see the sites. I can reach them from my machine, I am not seeing them being hit. I am seeing a lot of hits for parked domains and for social networking (Also listed to block) but the adult content is not being blocked.
... View more
Jan 29 2020
12:18 PM
So having patch luck with content filtering. I have both Porn and Games listed under "Category Filtering -> Blocked Website Categories" on our MX. We do have a Catalyst switch for L3 functions so I am not sure if that has something to do with it. But for pure metaphorical reasons, lets say playboy.com and hustlerholloywood.com are both being let through, and the loopup tool is still showing them both as porn. But Newgrounds.com which is being seen as games, is being blocked because its a games site. Any ideas on where to start to look for this?
... View more
Aug 5 2019
12:34 PM
What I have done in the past is send a IP scan for the subnet over the VPN from another location. We have security cameras and a lot of other things scattered around multiple sites that has plenty of L2 traffic but nothing that ever needs to hit the logic of the MX. So usually I just send some type of IP traffic from another VLAN and give it a few seconds to populate.
... View more
Apr 22 2019
6:34 AM
Ive used P2P before, but with Meraki are you sure that it is going to decrease the speed by half? I understand most APs but Meraki has a bunch of built in dedicated stuff and since they all support mess fail over I think it would be a great over site not to have a dedicated band that can be used for P2P data. And for the AP was thinking more of "Do I need to go to MR84 or will MR74 be enough?" Havent used Meraki for P2P only Unifi and a bit of Mikrotik and they both have models specifically for P2P.
... View more
Apr 22 2019
6:00 AM
I have a location that I need to set up I am thinking three APs. One will be at the main building and pointing in the direction of the other 2. The thing is this is a 100% band-aid job for a cheapo security system. So what I need is below. AP at main building - Broadcast 3 hidden SSIDs, each with own VLAN AP at pole 1 - 1 SSID, one VLAN AP at pole 2 - 2 SSIDs, VLAN for each, heading to a 8 port and out. Other then the possibility of the broadcast area not hitting both remote APs, does anyone see any possible pain points? the APs will be in almost a straight line but at a incline which looks to be giving both remote APs direct line of site over ~800ft back to main AP. And does anyone have any suggestions for AP+Antennas? Like I said almost straight line but on an incline allowing clear line of site as distant AP is about 50 ft higher, first remote AP at ~300ft and second almost directly behind it at ~800ft. *Cheapo camera system claims to be IP but needs plugged directly into DVR and into specific port. Tested and I can run over my switch network as long as I keep it on a dedicated VLAN, per camera, the entire way back to DVR otherwise DVR refuses to see camera.
... View more
Apr 16 2019
1:55 PM
So we have two sites that have a EPL connection between them. Both have MX100s with the EPL currently connected directly in and than L3 switches behind them both. Currently whoever set it up prior to be made a bunch of static routes. I would like to move the EPL to the L3 switches, leave the broadband service connected to MX100's. And be able to use the EPL in the event one of the sites broadband goes down. Issue I am having is I do not know how to tell the L3 switches (One site is MS250s, one is Cisco 3850's) to switch from passing default from MX to EPL when Broadband goes down. Any suggestions?
... View more
Apr 15 2019
12:25 PM
Yea thats the boat I was in and hoping I could VLAN tag the Client VPN. Issue I have with doing this at one site is I am getting hundreds of dropped events an hour and want to limit the amount of work the MX is doing to try and limit that. Moved L3 switching to switch but looks like I can only do that to a limited scale.
... View more
Apr 15 2019
12:21 PM
Yea I was trying to do it on the same subnet was hoping I would be able to make it work. Looks like Im not going to be able to. Thanks.
... View more
Apr 15 2019
11:33 AM
But is there any way I can define this in the L3 switch as a VLAN? The case I am working on right now is this VPN needs to join a VLAN that is present on my switch network. But without a VLAN on the MX I feel that I am going to run into issues. Or am I going to need to have two subnets dedicated to this one function? (One for equipment on network and another for VPN)
... View more
Apr 15 2019
9:15 AM
2 Kudos
You can also build a group policy and apply it as the default policy for the VLAN you are using.
... View more
Apr 15 2019
9:13 AM
Have some questions about the Client VPN hoping someone can clarify it up a bit for me. Is there anyway to classify it as a VLAN at all? We have non-Meraki L3 switches at a few sites and not entirely sure how to handle the VPN subnet. Don't want to start pruning VLANs on trunk ports and kill access for the Client VPN. I would like to give Client VPN access to one site that has site to site VPN access, without giving the Client VPN access to the entire organization, and limit it to only one or two IPs on the local network. Can I do that? Even with a L3 switch handling the routing?
... View more
If its showing active on switch an not in clients list that means its traffic is not leaving your network and is localized. Track back to switch port he is in and shut it down there.
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 4719 | Apr 9 2019 11:49 AM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 2 | 22633 | |
| 2 | 24370 | |
| 2 | 26711 | |
| 2 | 2241 | |
| 1 | 24636 |
© 2024 Cisco Systems, Inc.
