If a critical CVE is found, then firmware is pushed to all devices, as we have seen in the past. ... View more

i have seen the same thing. I have not looked into it though, as it happens so quick that user’s haven’t complained about it  ... View more

When replacing devices, you have to enable autovpn for the subnets again as Phillip has suggested  ... View more

AnyConnect does not include MFA, but you are not required to use Duo, you can pick any SAML vendor your want.   Almost all our clients have integrated AnyConnect with Azure AD/Office 365 and just use the MFA included in Azure AD conditional access   https://documentation.meraki.com/MX/Client_VPN/AnyConnect_on_the_MX_Appliance/AnyConnect_Azure_AD_SAML_Configuration ... View more

Have you had a look at this update https://community.meraki.com/t5/Security-SD-WAN/New-MX-18-107-4-Stable-Release-fixes-for-advanced-feature-CPU/m-p/204353#M47041 ... View more

Hi ypu could just use Duo as a radius provider. I have never seen anyone using Mfa for wireless though ... View more

I can confirm NBAR working on a MX64 with MX16 firmware.   AnyConnect should be comming to both MX64 and MX65 https://documentation.meraki.com/MX/AnyConnect_on_the_MX_Appliance ... View more

Thanks for the quick reply!   I will just have to wait a little longer then 🙂 ... View more