@Adam2104 wrote: Not that I know of, NAT is only for (V)LAN --> WAN flows. I'm curious though, what is the design situation requiring internal NAT?   There's a router in VLAN B that I a) need to get traffic to/from and b) have no control over.  The easiest path forward is to recreate it like the ASA that's being replaced and NAT the 4 or 5 VLAN A machines to a VLAN B address when traffic is destined for that router.  Or all the time, really, it doesn't matter that much. This is one of the reason I really have a hard time proposing Meraki solutions for any but the most basic scenarios.  "Yes, I'm sorry, the $10,000 device we proposed won't do what the $3,000 device we're replacing did."   Yes, I know, we should let routers route and NAT.  But still, between little quirks like this and the non-meraki vpn peer issues... I just wish it was a little better. ... View more

Not sure if that's happening here - there is a port/machine active.  It's the same destination as the other events that were blocked.  It's still happening today - 9 'blocked' with that same signature to the same destination, 1 'allowed' right in the middle of it. ... View more

Only 2 allowed, about 20 blocked over the course of ~ 24 hours.  Not bursty at all. Nothing whitelisted - the 2 allows are from other countries. They're even spaced apart - same rule was blocked around 0730, allowed at 0800, blocked at 0815, allowed at 0930, blocked at 1000. ... View more

Do you have any kind of ticketing system?  A template that leads them through the what / when / who / where questions you normally have to follow up with could be helpful.   If not, try to find a couple 'champions' at each location and get them to be your technical point of contact there if possible.  These are normally people that are at least a little tech savvy and understand that you don't take your car to the mechanic and only tell them "It makes a 'whomp whomp whomp' sound"   It can take awhile.  There's a certain type of person that likes to just throw problems over the wall.  If you can explain that a little more information will help you both and get it resolved a little faster, they're usually on board with that.  If not, you can always give them a log to fill out for you - day/time, device, and what they were trying to do.  Tell them once they have 5 or 6 entries in the log to send it to you. ... View more

I'm fairly certain IP address will work.  If not, you could always create a hosts file on the machine you're using to run the command.  If you have a ton to do, just download the VPN client list as CSV and do a quick edit of that to generate a temporary hosts file. ... View more

Neat idea 👍 I just did FIT L1 yesterday.... so that helped 😁     ... View more

@CptnCrnch wrote: Then "Make a wish", perhaps it'll be granted 😉 People tend to forget about / not notice the 'make a wish' button or think it goes into some black hole somewhere. I can tell you from my own personal experience, they see it and often do something with it. ... View more