Hello,   Thank you for the information. We understand that Meraki is a PCI DSS L 1 SP and that Cisco performs authenticated vulnerability scans on the infrastructure it manages as part of its own compliance.   However, this requirement remains a shared responsibility. Cisco’s authenticated scans cover only Meraki’s internal infrastructure, whereas our customer is required to perform authenticated vulnerability scans on their own PCI-in-scope network components including the Meraki appliances deployed in their environment.   In other words, Cisco’s scans do not replace the customer’s obligation to perform authenticated scans on devices within their PCI scope. This is why we are looking to confirm how authenticated scanning can be achieved on the customer’s side for their Meraki-deployed network components.   Kind regards, ... View more