We had Meraki for 3 years and switched to FortiNet, and we still have home offices on Meraki. There is a learning curve as those things are 10x more capable and feature rich, but also more complex. They do have cloud mnagement as well, but if a device comes with gig ports, it's pushing  gig. I've been pushing ~300  clients through 2x 1gig uplinks with a FortiGate 60F (~$1000) without any problems. ... View more

Hi PhilipDAth   Your cookbook and online configurator is indeed a good tool and nice programming ... View more

I was Leary on the word "personal" but looking it up, that does include business property. I couldn't find a better fit on Avalara so I think you nailed this one. Also, Avalara has done a good job on the search engine asking key questions to narrow down the choices. After I answered the questions, it highlighted SM020400.   https://taxfoundation.org/tangible-personal-property-tax/ ... View more

with the size and intrusive nature of Mickysoft updates and the working hours settings I have my users leave them on for nighttime M$ sillyness. ... View more

Perhaps, I have that same setup in my home lab for an unrelated project, and I recall configuring it in client mode, to associate to my home lab wifi SSID, and with a patch cable from the wired port into the Internet port of my Z1, the Z1 then sees that as it's viable Internet path (has no concept that there's essentially a wireless bridge link in that path).  Perhaps it's a just a quick update to your TP-Link device if it supports a client mode.  This is not the model I actually have, but the diagram is identical, and working fine.  https://www.tp-link.com/us/faq-1323.html     ... View more

Here you go 😉 https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Advanced_Malware_Protection_%28AMP%29 ... View more

Ignore me. I'm confusing things and quoting the wrong rule. Our problem is the same as the rule quoted in this thread. ... View more

>due to proper security SSL settings - this obviously breaks web apps and sites.    This wont break SSL or web apps.  If a request is NAT'ed through from the outside world the reply traffic from the web server will return via the same path (using the same 1:1 IP address). ... View more

Fully agree. Useless response by support. ... View more

This was my experience. I ended up adding a generalised account to all ORG's and at the same time enabling SAML authentication. Once SAML was in place, all my engineers could sign in with their own credentials ... View more

As @Adam said, you need a dedicated VLAN and use traffic shaping to point that VLAN towards your WAN2. ... View more

Direct Access has many benefits over a traditional VPN.  First, the connectivity is over HTTPS so it is not blocked at places that block other VPNs (some public libraries and free WiFi spots).  Second the remote client is visible from the LAN, meaning WSUS can still update while the client is in the field, and tools such as Remote Desktop can run from the LAN to the remote client.   Unfortunately, Microsoft keeps all this goodness limited to Windows 10 Enterprise clients. ... View more

Nice I will look into that.. we are setting Pingdom up now to monitor WAN 2 until Meraki can add it as a feature. ... View more

Set your DHCP to give out your internal DNS servers.  Then set your internal DNS servers to forward to OpenDNS.  We have the same setup and that is their recommended configuration.  If you have any public wifi networks or anything that doesn't need to be attempting to use your internal DNS servers you can set those to custom DNS and specify those OpenDNS IPs.  Note:  All of our device management IPs just use public DNS like OpenDNS.  Those are just for checking into the internet so no need to have those using internal DNS which is likely less reliable.  ... View more

That is what I thought, but why would the Meraki tag it as "malicious" -- shouldn't it be "unknown", or was it tagged as malicious because it thought it was? ... View more

Could be a nice use case to try and up-sell the customer some MV camera's.    - No static settings needed on an APP, just tell them to download the Meraki app and they can access any camera in any location at any time. - No need for a DVR, less hardware, less cost, less management.    Just a few reasons to push the MV range 🙂 ... View more

@ww @PhilipDAth   I would find it quite convenient to be able to give the PPPoE link an additional local LAN address so that I can monitor the modem. BT keeps screwing up the SNR and I can adjust the modem to partially remediate the situation. It drops download speeds by upwards of a third.   ... View more

As far as I know, threat protection absolutely scans all site to site VPN traffic. We had an issue where threat protection was blocking QNAP replication between two sites. After weeks of working with support, they confirmed there is no way to stop that from happening at this time. The only fix was to white list all the signatures so it ignored them. That was our fix which worked. ... View more

@TM_1 Glad you got to the bottom of it! ... View more

Hey Joe,   That number only indicates how many clients have that policy directly applied to them, so if you apply it to a VLAN, it won't go up at all - this also applies to policies that are assigned via a RADIUS attribute or from Active Directory. Understandably a bit confusing if you're not familiar with it. ... View more