I'd thoroughly enjoy some swag too please! ... View more

Wonder if it's related to this: https://documentation.meraki.com/MX-Z/Monitoring_and_Reporting/IP_Conflict_Events_Triggered_by_iOS_Devices   We've had to turn off notifications due to the iOS issue. ... View more

That looks way better! Nicely done ... View more

Thanks to you four for your willingness to help out and make this place so awesome, congrats! ... View more

Thanks to you three and the other Meraki employees for sharing your knowledge and expertise! And congrats! ... View more

I'm pretty sure it goes through a process of trying several variations of each entry. ... View more

I think just adding amazon.com will do it too.   Thanks,   Mark ... View more

The MX84 and higher do HTTP content caching (Security Appliance --> Configure --> Traffic Shaping and scroll down to Web Cache) but i'm not sure if the issue seen here in 2014: http://www.bhargavs.com/index.php/2014/05/05/would-you-like-an-open-proxy-with-your-firewall/ is still an issue. I'd say enable it and then see if you can configure a laptop to use it as an open proxy or if you need to authenticate to it or if you can't access it from outside at all.   Here's a doc that shows the storage capabilities of the various MX line: https://meraki.cisco.com/lib/pdf/meraki_datasheet_mx.pdf Look at page 7. ... View more

In Network wide --> Configure --> Group policy you add a group. In that group you give it a name, select Custom network firewall and shaping rules in the  Firewall and traffic shaping section, then you add a firewall rule with a deny policy with any protocol to any destination. Save that. Then you go into Network wide --> Monitor --> Clients. Check the box on the clients you want to block from the internet and click on the policy drop down and select group and select the group you just made. ... View more

If the clients are not already in a group policy then you could put them in one that has custom network firewall and shaping rules with a firewall rule that denies any traffic to any. Or you could block by default and instead add the devices that are allowed on the internet into a group policy that allows internet traffic. ... View more

It would be nice if the Z3 docs could be edited to mention the dual WAN capability as discussed here: https://community.meraki.com/t5/Security-SD-WAN/In-Meraki-Z1-amp-Z3-which-LAN-port-works-as-secondary-WAN-port/m-p/5084#M1307   And maybe edit the Z1 docs to mention that it's not possible to do dual WAN with that device?   Thanks! ... View more

In Security Appliance --> Configure --> Firewall you could add a layer 7 rule that denies any traffic from 172.168.0.0./16 to 0.0.0.0   You may need a rule before it that allows traffic from 172.168.0.0/16 to other subnets that have corporate servers if there are other subnets.   Traffic from a device in the 172.168.0.0/16 should be able to contact another device in the same subnet without being routed. ... View more

One gotcha, the flow preferences only work for TCP, UDP or both. They don't work for ICMP and possibly not other protocols. ... View more

In Security Appliance --> Traffic Shaping --> Flow preferences you can add an internet traffic rule with the source of your mail server and destination of either upstream server or any and destination port of 25 or 587 or whatever and tell it to use WAN 1   Edit: Here's the help for flow preferences: https://documentation.meraki.com/MX-Z/Firewall_and_Traffic_Shaping/MX_Load_Balancing_and_Flow_Preferences   ... View more

MA-PWR-50WAC ... View more

If you had traffic analysis turned on since before today then there's something strange going on with the graphs as they should look more like this: Notice the yellow highlighted areas where it shows total usage and then breaks it down into sent and received or upload and download. Wonder if your dashboard is just having a momentary issue, it happens from time to time.   Edit: Ah, I see, you want the upload and download shown separately in the graphs... Don't think that is currently possible. ... View more

Good point Philip. I was assuming that the OP would have been provided a modem that would connect to the MX via ethernet. Darned assuming anyways. ... View more

If you navigate to Network Wide --> Traffic Analytics and then change the drop down for 30 days that will show your the traffic. If you have other Meraki devices in your network, you'll have to select "for security appliances" as well.   Edit: I think for this to work you need to have Traffic Analysis turned on to basic at minimum in Network Wide --> General ... View more