About Adam

Adam

I also just did a test of this to make sure it wasn't something that got broken with a firmware update. It is blocking as expected except I noticed that anything I was able to ping from my test laptop when on the trusted network I could still ping when I moved to the "Public" network. Although if I tried to ping other stuff I couldn't. So it likely has some streams cached.

Adam

@svk253 wrote: It's set up pretty simple, the only thing I specifically enabled for the SSID besides the firewall rules is the splash page (no login, users can click through). The Deny All rule has been there for a few days, I just added the ICMP rule. No group policies. I don't *think* the client is whitelisted, but how would I check that? SSID drop down is on the correct SSID, let's say Company_Public. Client is connected to Company_Public. Go to Network Wide>Clients, search for the client and check what policy is assigned.

Adam

If the computer you are testing from is 'whitelisted' it'll be exempt from that deny rule. I found that out the hard way when doing testing. Otherwise that rule should work as long as you are definitely on the SSID that rule is being applied to. On that page verify the SSID drop down just above the screenshot you posted. And also check the client to make sure they are connected to that SSID and not inadvertently connected to a different one.

Adam

I just checked one of mine to see if that is normal. Mine both show as powering on a MS350-48. Depending if this is in production you could try turning the switch off and reseating both power supplies or swapping them into each others slots to see what happens. Then power back on.

Adam

Well strange, at this point I'd try an after hours reboot of the MX if you haven't done that. Then I'd try to simulate some security traffic that should show up to diagnose further.

Adam

Also what indication do you have that you were hacked. Starting there is a good point.

Adam

I believe the interface IP would become the gateway for your clients.

Adam

What is the main routing device and where do the VLANs live? I assume on the MXs? And which part is holding you up?

Adam

I'm good at silly questions @Dylan_YYC Have you checked your MX routing? At one of our sites we were routing all of our traffic via 0.0.0.0 to a private MPLS connection on one of the LAN ports instead of going out the WAN port and this caused there to be nothing in security center since it wasn't traversing the WAN interface. Other than that, it should be working.

Adam

Silly question but you verified that Security Appliance>Threat Protections are enabled right? If both disabled it'll show up blank.

Adam

Just disabled the 'Try Beta', I'll wait a few and see if it shows up. Thanks @MRCUR

Adam

Hrm I'm not seeing an option for 3.6 in my networks? Only 3.4 still.

Adam

@MRCUR wrote: MV 3.6 firmware is available with additional MV12 fixes. I'll give it a look, please post here if anyone tests or notices a fix for the issue outlined in this thread.

Adam

@PhilipDAth wrote: So you are saying Cisco Meraki launched a DOS attack against you - or simply disabled your devices for non-payment? I read it the same way as well. It seemed like he was saying that Cisco was launching a Denial of Service (DOS) attack against his networks. But I'm hopeful to assume that he just means his services were being denied. Or just a fancy way of saying his services were disabled. I strongly doubt Cisco would launch a DOS attack on a customer unless they were ready to cut a large check after being sued.

Adam

They give a grace period don't they? Or did that expire too?

Adam

What mode is your MX in?

Adam

@PhilipDAth wrote: Never tried it myself (stopping using Visio in preference to www.lucidchart.com a long time ago - Visio is such a rip off), but on the topology page their is a download button on the top right which can download an SVG file. You should be able to import this as a background graphic in Visio. And agreed with @PhilipDAth I just make my drawings in Google Drawings

Adam

Network Wide>Topology then click the 'Download' button in the top right.

Adam

I feel like I may have noticed this when reviewing a port the other day as well.

Adam

@Owen wrote: Transparent MX between edgerouter and internal switch as a content filter. You can't do VLAN's though when in transparent between the router and switch. Interesting idea. I wouldn't need the VLANs since I could do those on the core switch. Have you tried something like this? Does it circumvent the bandwidth restriction of the MX? Would it still allow me to use the MX for IDS/IPS and Content Filtering? What are your thoughts as well @PhilipDAth

Adam

rofl @PhilipDAth size 2 font.

Adam

Praise given ;)

Adam

@CarolineS wrote: @NSGuru wrote: Is there a way to had unanswered topics shown on the main page of the community when logged in? Ooh, I think I can do that, let me investigate! Me and @CarolineS discussed something like that on the phone as well #reminder. Maybe on the right above ' Top Kudoed Posts'

Adam

Same for us. Disabling audio has resolved the choppiness and export issues but I installed my 3 cameras and replaced some nest cameras specifically for audio. So I hope to hear more from support soon.

Adam

Looks like you can view and playback multiple cameras at the same time based on your layouts. But when you go to export you can only export a single camera at a time.

Adam

Community Record

Badges