Hello it´s possible block a Scan for applications like NMAP on MX67 ?? ... View more

Hello   My VPN with a NON Meraki equipment go DOWN, the other equipment is a Checkpoint.   It´s happening repeatedly daily, we didn’t take actions only sets after about an hour approximately.   The team of the checkpoint said: “We didn´t move anything”   We have another VPN with NON MERAKI and doesn´t present this problem ….   These are the Log´s of my MX67 Meraki:   X.X.X.X My Public IP Y.Y.Y.Y IP Public of the checkpoint     Non-Meraki / Client VPN negotiation msg: IPsec-SA expired: ESP/Tunnel X.X.X.X[500]->Y.Y.Y.Y[500] Non-Meraki / Client VPN negotiation msg: IPsec-SA expired: ESP/Tunnel Y.Y.Y.Y[500]->X.X.X.X[500] spi=114078164(0x6ccb1d4) Non-Meraki / Client VPN negotiation msg: IPsec-SA expired: ESP/Tunnel X.X.X.X[500]->Y.Y.Y.Y[500] Non-Meraki / Client VPN negotiation msg: initiate new phase 2 negotiation: X.X.X.X[500]<=>Y.Y.Y.Y[500] Non-Meraki / Client VPN negotiation msg: phase1 negotiation failed due to time up. ad482ac8e1414444:96f5b55cbd68dfdb Non-Meraki / Client VPN negotiation msg: request for establishing IPsec-SA was queued due to no phase1 found. Non-Meraki / Client VPN negotiation msg: IPsec-SA expired: ESP/Tunnel Y.Y.Y.Y[500]->X.X.X.X[500] spi=206208868(0xc4a7f64) Non-Meraki / Client VPN negotiation msg: Y.Y.Y.Y give up to get IPsec-SA due to time up to wait. Non-Meraki / Client VPN negotiation msg: IPsec-SA expired: ESP/Tunnel X.X.X.X[500]->Y.Y.Y.Y[500] Non-Meraki / Client VPN negotiation msg: initiate new phase 2 negotiation: X.X.X.X[500]<=>Y.Y.Y.Y[500] Non-Meraki / Client VPN negotiation msg: phase1 negotiation failed due to time up. 49cf18a936a8c3ac:e9f2bda1bf813e3c Non-Meraki / Client VPN negotiation msg: IPsec-SA expired: ESP/Tunnel X.X.X.X[500]->Y.Y.Y.Y[500] Non-Meraki / Client VPN negotiation msg: IPsec-SA expired: ESP/Tunnel Y.Y.Y.Y[500]->X.X.X.X[500] spi=149535210(0x8e9b9ea) Non-Meraki / Client VPN negotiation msg: Y.Y.Y.Y give up to get IPsec-SA due to time up to wait. ... View more

  A bit about yourself & your work: I´m CMNA, I´m 30 years old. Your experience with Cisco Meraki: Yes, I have implemented several data networks What you're hoping to gain from the community Learn about VPN, SD.-WAN, Security. A fun fact about yourself: One day I shutdown a trunk link for error... xD ... View more

I have implemented several data networks with Meraki MX and MS.   SD-WAN LAN WAN ... View more