I have AD integration configured for several years.  I use it for both content filtering policies and VPN authentication.   The AD servers are Server 2012 R2 domain controllers.  I noticed two of then were producing tls errors in the dashboard.   When I looked at the server, I see DCOM error Event ID 10036:   The server-side authentication level policy does not allow the user <domain admin account> SID (S-1-5-21-71189414-624380436-382417117-21771) from address <MX IP Address> to activate DCOM server. Please raise the activation authentication level at least to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY in client application.   Meraki stated the issue is with Microsoft Security and provided this link:   https://support.microsoft.com/en-us/topic/kb5004442-manage-changes-for-windows-dcom-server-security-feature-bypass-cve-2021-26414-f1400b52-c141-43d2-941e-37ed901c769c   I did not have success with the reg hack the article references, so I again asked support for help.   I received this from Meraki Support:   "After talking to our development team it looks like there is an update in the works for the AD integration but there is no current ETA on when that will be released. In the meantime, we suggest updating the registry key outlined in the following article by Microsoft." https://docs.microsoft.com/en-us/answers/questions/564347/server-2019-update-kb5005568-sept-2021-forcing-new.html?page=2&pageSize=10&sort=oldest   Has anyone else seen this issue with an MX an AD integration?         ... View more

I have an MT10 that goes offline for hours and causes a "red" indicator on the network to which it belongs.  I have opened a support case and they emailed me a link to troubleshooting.  Very helpful.     Does anyone else have an issue with sensors going offline for hours at a time, then coming backing online on their own without any steps taken to resolve?   This seemed to start after a recent MR firmware upgrade.  I provided this information to support, but they said that is not the issue and do not revert.  There is an MV camera about 4 feet from the sensor and the sensor should be using this MV as its gateway.     Is there a way to check what the MT sensor is using as a gateway?   Is there a log for this connection? ... View more

I have nine locations each with a Meraki MX security appliance.  All of the locations use content filtering and group policies to restrict access to certain websites.   I am having an issue with internal intranet sites being blocked on a shopfloor policy that blocks all url patterns (*) and only allows patterns on the matching whitelist.  I am having to white list are internal URL patterns.   Further, AMP is causing issues with our internal sharepoint site at one of our locations, and in AMPs case, the whitelists are not at all reliable (many issues where whitelisting has no affect, and disabling AMP does).   Is there a way to tell the MX to not apply content filtering and threat protection to Site-to-Site VPN traffic?   ... View more

I have an MX400 and I am using content filtering and categories.  I block streaming media, and I have a policy setup up to allow youtube.   This policy is applied by LDAP group membership, and it works great.  Users that are members of the group can get to youtube, and all other stream media categories are still blocked.   I would like to be able to do something similar with specific youtube video urls.  The goal is to block youtube by category, but allow a specific URL match within youtube.    This does not seem to be doable, and it has been discussed, but it's important enough to my company to warrant a new discussion thread.   Anybody else working around this issue?   ... View more