With my current Cisco AnyConnect Secure Client VPN connection I am only able to designate only one AnyConnect VPN Subnet for those users that are VPN'ing into that location.   Do we know if it is possible to create additional VLAN's and have VPN users assigned to a different Subnet/VLAN??       ... View more

In our company we have employees that travel and currently in our users XML profile(Cisco Secure Client) we have everyone configured with the "Always on VPN" set.   This affect all our users trying to connect to Hotel WIFI's and Airline WIFI access.  They are unable to because they cant establish the Internet access to start the VPN process.      I am trying to check with the Meraki community here on what is the most secure setting for our users with the "Always on VPN" feature configured in our environment.   What is the most secure Captive Portal XML configuration to use.   We rely heavily on the highest secure settings and cannot compromise our data and would like to get some ideas or screen shots from what other companies are allowing access to Hotel WIFI and plane hotspots with the "Always On VPN" feature enabled. ... View more

In our company we have employees that travel and currently in our users XML profile(Cisco Secure Client) we have everyone configured with the "Always on VPN" set.   This affect all our users trying to connect to Hotel WIFI's and Airline WIFI access.  They are unable to because they cant establish the Internet access to start the VPN process.      I am trying to check with the Meraki community here on what is the most secure setting for our users with the "Always on VPN" feature configured in our environment.   What is the most secure Captive Portal XML configuration to use.   We rely heavily on the highest secure settings and cannot compromise our data and would like to get some ideas or screen shots from what other companies are allowing access to Hotel WIFI and plane hotspots with the "Always On VPN" feature enabled. ... View more

Does anyone know if Meraki has the capabilities to update the Cisco Secure Client version to the version that is in the Meraki Dashboard?   I know Cisco Firepower ASA's have this capabilities and does anyone know if the Meraki MX appliances will check the client version and update the client version if its not the version on the dashboard....?   If I enable the "Profile Update" will this update the Cisco Secure Client version???                 ... View more

In our environment we have certificate validation authentication enabled.   We have random users receiving "Certificate Validation Error" messages about once a week in our environment.   We have about 75 users VPN into our network and why would a random user receive this error message.   If one user cannot authenticate using the cert wouldn't if affect all users trying to VPN into our network?     ... View more

Below is a report of all the devices on our network.  I am trying my best to identify each device on our network for audit and security concerns.   Anyone would know what devices are that I have Questions marks by?   I called Meraki support and they were no assistance on providing me any information.   Manufacturer-# Clients Meraki-62 Other-226 (I am assuming this is all clients clumped into this category?) Cisco Systems-1 (We dont have any other cisco hardware other than Meraki) SILICOM-1 (??) Edgewater Networks-1 (??) Winstars Technology-63 (??) LANNER Electronics-1 (??) Adtran-1 (??) Intel-65 (I am assuming this is intel processor but what devices make up this 65?) Dell-7 (Im assuming Dell laptops?) Wistron-4 (??) Microsoft-4 (We have more than 4 microsoft products in our environment) Wistron-1 (??) RICOH-5 (We actually have 5 RICOH devices so this actually matches) Universal Global-1 (??) Polycom-32 (Our VOIP phones) CLOUD Network Technology-1 (??) infinias-21 (Badge readers) LCFC(HeFei) Electronics-1 (??) HP-2 (Printers) CHONGQING FUGUI-1 (??) Texas Instruments-1 (??) ... View more

Meraki security appliance does not have an “SSL Decryption” setting in the dashboard.  How can you enforce higher security standards to block older TLS versions.   Ideally we would like to block all outdated TLS versions.   I do believe Meraki does not provide a direct way to specify TLS versions in Layer 7 rules.   Would like to get insight to see how this is possible.   Thank you!! ... View more

In our environments we have AnyConnect VPN authentication and use Certificate Authentication and periodically only a few users will receive certificate error messages and other users will not receive a certificate error message.    Why only a few users would receive this certificate error message.   All users have the same setting.   Is it because when the VPN authorization is in process that user is unable to get the cert authentication from the Meraki dashboard?     If we go into the Meraki dashboard and "Disable" the certificate authentication mode those handful users that received the cert error will be able to successfully VPN into the network.   If I go into the dashboard and re-enable the certificate authentication mode the next day the users that received the certificate error message are now successfully VPN'ing into the network.    Anyone has experienced this behavior in your environments using certificate authentication mode with Anyconnect? ... View more

Users are unable to VPN into our Meraki MX security appliances with captive portal set to false.   If we open captive portal we open our company to a vulnerability.   Is there anyway around or any additional fixes to get around to allow users access to Hotels/Plane hotspot to allow VPN access into our Meraki environment. ... View more