About CptnCrnch

CptnCrnch

Best advice would be having a local partner or Meraki AM at hand. Where are you located?

CptnCrnch

Guess your options are then to die one of the possible deaths: Pay more and have all bells and whistles available (Cisco, Palo, (Check Point)) Pay a little bit more and have a very inconsistent management / analysis (Forti*) Pay less and delve into a world of „interesting“ management and buggy software (Ubiquity) Don‘t know about e.g. Sophos who could be a challenger in that field.

CptnCrnch

Repeat after me: MX is not ASA / Firepower. MX is not ASA / Firepower. MX is not ASA / Firepower 🙂

CptnCrnch

Because MX does Health Checks to the outside. I‘d be very surprised of that is related to your problem. To keep things going forward: have you read our questions / suggestions? What about these?

CptnCrnch

Without further ado, it's c 🙂

CptnCrnch

Well, what kind(s) of ICMP? ICMP could also be UDP port unreachable when traffic is blocked... .:)

CptnCrnch

Are you referring to Meraki spokes are are you using 3rd party VPNs?

CptnCrnch

DoH will definitely affect some of the features mentioned. https://umbrella.cisco.com/blog/doh-dns-over-https-to-block-or-not-to-block perhaps will give you a better idea. If you should decide not to support DoH within your environment, you could simply block access to the systems currently in use: https://support.umbrella.com/hc/en-us/articles/230904088-Preventing-Circumvention-of-Cisco-Umbrella-with-Firewall-Rules

CptnCrnch

Great to have you on board @Bruce!

CptnCrnch

As far as I (also) can see, there's not an API endpoint for that one.

CptnCrnch

How do your Web Search Filtering settings look like? https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Web_Search_Filtering_and_its_Effect_on_Google_Apps_and_Google_Search

CptnCrnch

Congrats, everyone. It's been loads of fun! I also hope this will take place (at least) once a year! 🙂

CptnCrnch

I'd never have thought somebody would ever take the first place instead of Phlipp. 😉 Congrats @UCcert and big fat kudos to @Bruce and everybody else (of course)! 👍

CptnCrnch · ‎10-27-2020

That's a very unspecific question. Could you narrow down a little bit? What exactly are you searching for? Which standard for ISMS should it be related to?

CptnCrnch · ‎10-27-2020

¡Bienvenida Tania!

CptnCrnch · ‎10-09-2020

Count me in!

CptnCrnch · ‎10-09-2020

It will magically fail over to you second WAN port: https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Connection_Monitoring_for_WAN_Failover (at least I'm misreading your question)

CptnCrnch · ‎10-08-2020

I guess @cmr will chime in here too. I'd even say that's a known problem with AX and the Intel chipsets (or better their drivers). Please keep us updated regarding your TAC case.

CptnCrnch · ‎10-08-2020

Correct, it's still Brightcloud. That's something I've asked a lot in the last few months but haven't recived something when Meraki also will switch to Talos (which would make a lot of sense)

CptnCrnch · ‎10-07-2020

This is something that will have to be defined on a higher (management) level: Either you're further controlling your client infrastructure (technologically better decision) or try to control it via (network / security) infrastructure built around those clients (which will fail in the long run). Best way of course would be having controls on both sides of that table. 🙂

CptnCrnch · ‎10-05-2020

@Pipeline wrote: Is there a way to fully disable the FW? Just don't use the WAN ports. Your MX will be a (good looking) switch then 😉

CptnCrnch · ‎10-05-2020

Gotta have seen Mike Storm present. That guy is a legend! 😎

CptnCrnch · ‎10-03-2020

Great to see the achievements every month! Congrats everybody, special shout outs to @cyriel95 and @KarstenI!

CptnCrnch · ‎10-02-2020

Hey Karsten, funny to meeting you here after all those years of Rootforum 😉

CptnCrnch · ‎10-01-2020

Of course Meraki gives you possibilities to use MGig ports for the newer APs, just not on your firewall itself. 😉 E.g. https://meraki.cisco.com/product/switches/stackable-access-switches/ms350-24x/

CptnCrnch

Community Record

Badges