Hi!   Have you tried to configure the PPoE using the local management webpage? If you only have this uplink it’s probably config is not getting applied to avoid loose cloud connectivity    https://documentation.meraki.com/General_Administration/Tools_and_Troubleshooting/Using_the_Cisco_Meraki_Device_Local_Status_Page ... View more

I hope to find them 🤭 ... View more

Yes, under Organization -> Summary Report you can see a report, or under Network Wide -> Event Log you can see detailed logs   if you consider my answers as a solution I’d appreciate if you mark them as solution 🙂     ... View more

Yes it works, just double check that you are tagging the traffic from SSID with the VLAN ID in question and it should work  ... View more

If you have an MX upstream you can set a group policy with the filtering in the VLAN in question and all devices thru the same vlan will be under that policy.   If you do not have an MX firewall I don’t think if that’s possible due SSID has some L7 firewall it but is more oriented to apps than website categories   here you can find more info   https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Creating_and_Applying_Group_Policies ... View more

Have you checked the events on the Meraki dashboard regarding Client VPN   Usually I have configured windows machines generating the power shell config with this script and avoid human errors: https://www.ifm.net.nz/cookbooks/meraki-client-vpn.html   Regards!   ... View more

I recommend to block the remote access apps on your MX Firewall and set a single app as default remote access and integrate it with LDAP Authentication. If an employee exists the company only remove the username on your Active Directory and that’s it. We as Network Security Engineer have to enforce policies in our company to keep it safe from the world. I don’t consider a good practice allow any remote access application in your Network because it opens a lot of attack surfaces.   For example you can enforce to only permit RDP from Microsoft and authentication with 2FA agains Active Directory.   If you consider my answer as solution please mark it as solution 😀   Regards! ... View more

Happy IT professionals day!   For everyone who puts the knowledge every single day to keep the world connected and share the knowledge with the ones who are beginning on this world of networking.   unfortunately my colleague that I want to mention on this post is no present on this community but I would like to mention my colleague Luis from Costa Rica, who has shared a lot of experience with my since I knew him!     ... View more

Hello!   I dont consider that disconnecting and isolating the network manually is a good practice for ransomware attacks, the best way is to configure policy enforcements in case of device compromising.   In my experience I would consider a three alternatives:   Using System Manager we can mark devices in quarintine    https://documentation.meraki.com/SM/Monitoring_and_Reporting/Selective_Wipe_and_Device_Quarantine_in_Systems_Manager     We can include devices in a Block List     Or we can try to use Cisco ISE to enforce ACLs on the switchport and block any potential traffic.   https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/admin_guide/b_ISE_26_admin_guide/b_ISE_admin_26_maintain_monitor.html ... View more

I loved the way how everybody help each other and always are being humble! ... View more

Sure!   You can get logs in two different ways,   The first (easier)   Going to the Network-wide tab and then to event log, you can download the sorted logs in a CSV file:     The second way and scalable solution is via API, you can follow this link if you have some coding experience:  https://documenter.getpostman.com/view/7928889/SVmsVg6K?version=latest#1982f77c-5ee6-49da-94f4-ee1a28794f59   I hope this information can be useful for you 🙂     ... View more

Hi!   You can get them from Meraki Dashboard  via APIs  ... View more

Awesome! Thank you! ... View more

Bienvenida!! ... View more

Meraki Community has made me a Meraki Guru! ... View more

I`m in!   ... View more