About CptnCrnch

CptnCrnch

It only tells you that the file has been scanned and found clear / benign so it's allowed through. I'm not seeing any relation to slow workstations here.

CptnCrnch

Please define "junk values" a little further. I'd guess QRadar is interpreting the Syslog messages (or better: the order in which the information within the Syslog message is being sent) incorrectly. Normally, this is not a Meraki issue.

CptnCrnch

Happy IT Professionals Day everybody! I nominate @KarstenI who attended an ISE training ages ago (back in ISE 1.0 days) where we had loads of fun switching browsers to fulfill tasks that could be handled by Firefox but not Chrome and vice versa. Those were the days...

CptnCrnch

...afterwards realize that you'll need another layer of security because there's no centralized endpoint protection anymore. Let me warmly welcome you to the funny world of SASE! 😎

CptnCrnch

What the?!? 😮 Unexpected indeed, as excited he seemed at this years' CIsco Live US.

CptnCrnch

Big fat thank you for taking the effort and documenting this!

CptnCrnch

1) Yes, you could see it this way. MX is simply building up an AutoVPN tunnel to Umbrella where global intelligence, SSL decryption etc. take place. 2) Strictly speaking, you don't need Advanced Security on the Meraki side of things, but to be able to have a "real" SASE setup including local internet breakout for things like Microsoft 365, you'll even want to use the SD-WAN Plus license on Meraki. Umbrella SIG Essentials would be the "low-end" license on Umbrella, but won't give you things like L7 firewalling, IPS, DLP and so on. 3) The AC Umbrella Module is managed by Umbrella itself. 🙂

CptnCrnch

As described above by @ww 🙂

CptnCrnch

@KarstenI as long as @PhilipDAth is alive: most definitely 🙂

CptnCrnch

Educated guess: are you using 802.1x / Access Policies for your switches? Are you using diffrent ones on different switches?

CptnCrnch

From what I've tested (a while ago though), I can confirm.

CptnCrnch

Wouldn't it be easier if you could let us know at least a shortened version? From my point of view, that's the spirit that keeps great forums like this one so useful.

CptnCrnch

Well deserved @RaphaelL (and of course everybody else). Simply gotta love those stellar contributions!

CptnCrnch

First and foremost: congrats for taking the chance to have a decent network design in place! Brother lists the following ports: https://help.brother-usa.com/app/answers/detail/a_id/52673/~/firewall-ports-needed-to-allow-network-communication-with-the-brother-machine Also, HP has a nice documentation what ports are being used for their products: https://support.hp.com/us-en/document/c02480766 Depending on what kind of printers you have, you should have Bonjour / mDNS forwarding in place: https://documentation.meraki.com/MX/Other_Topics/Configuring_Bonjour_forwarding_for_the_MX_Security_Appliance

CptnCrnch · ‎08-25-2022

Same here on a mixed MR36/45/46 network.

CptnCrnch · ‎08-24-2022

Congrats to the greatest online community on planet Earth and to all the fine people adding value to it! Thanks for your stellar contributions @PhilipDAth!

CptnCrnch · ‎08-19-2022

There are two unforgettable moments regarding this forum: 1. Having my first answer marked as "problem solved" 2. Being awared as an All Star Another very pleasant memory was finally being able to meet @MeredithW and @KarstenI at Cisco Live US this year. 😎

CptnCrnch · ‎08-18-2022

You're on the right track following Group Policies.

CptnCrnch · ‎08-16-2022

Educated guess: ESP is blocked on one end of that connection.

CptnCrnch · ‎08-16-2022

Which MX firmware are you running? There has been a lot of work to get the new L7 classifications right in the current versions.

CptnCrnch · ‎08-12-2022

Happy birthday Meraki Community, one of the friendliest places on the Internet!

CptnCrnch · ‎08-12-2022

Is there a firewall between your MX and your new RADIUS server?

CptnCrnch · ‎08-10-2022

Looks pretty much spot on from my point of view.

CptnCrnch · ‎08-10-2022

I hope this was transalted correctly... 🤔 A estas alturas, como muy tarde, alguien debería haber reclamado el número de serie. 😞 Aconsejaría no comprar hardware usado de Meraki sin saber exactamente su procedencia.

CptnCrnch · ‎08-05-2022

Until now, I haven't heard of any issues with Meraki and Syslog-NG. The docs (https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Syslog_Server_Overview_and_Configuration) even mention it explicitly.

CptnCrnch

Community Record

Badges