I tried contacting inseego but haven't heard anything back yet.  I was hoping some others that have implemented it with a Meraki device would have a good real-world suggestion for a vendor.   The MG21 ends up being about twice the price and the SkyusDS would work just as well.   Thanks for the responses though, I'll keep looking. ... View more

@Adam2104 wrote: Not that I know of, NAT is only for (V)LAN --> WAN flows. I'm curious though, what is the design situation requiring internal NAT?   There's a router in VLAN B that I a) need to get traffic to/from and b) have no control over.  The easiest path forward is to recreate it like the ASA that's being replaced and NAT the 4 or 5 VLAN A machines to a VLAN B address when traffic is destined for that router.  Or all the time, really, it doesn't matter that much. This is one of the reason I really have a hard time proposing Meraki solutions for any but the most basic scenarios.  "Yes, I'm sorry, the $10,000 device we proposed won't do what the $3,000 device we're replacing did."   Yes, I know, we should let routers route and NAT.  But still, between little quirks like this and the non-meraki vpn peer issues... I just wish it was a little better. ... View more

Not sure if that's happening here - there is a port/machine active.  It's the same destination as the other events that were blocked.  It's still happening today - 9 'blocked' with that same signature to the same destination, 1 'allowed' right in the middle of it. ... View more

Only 2 allowed, about 20 blocked over the course of ~ 24 hours.  Not bursty at all. Nothing whitelisted - the 2 allows are from other countries. They're even spaced apart - same rule was blocked around 0730, allowed at 0800, blocked at 0815, allowed at 0930, blocked at 1000. ... View more

Do you have any kind of ticketing system?  A template that leads them through the what / when / who / where questions you normally have to follow up with could be helpful.   If not, try to find a couple 'champions' at each location and get them to be your technical point of contact there if possible.  These are normally people that are at least a little tech savvy and understand that you don't take your car to the mechanic and only tell them "It makes a 'whomp whomp whomp' sound"   It can take awhile.  There's a certain type of person that likes to just throw problems over the wall.  If you can explain that a little more information will help you both and get it resolved a little faster, they're usually on board with that.  If not, you can always give them a log to fill out for you - day/time, device, and what they were trying to do.  Tell them once they have 5 or 6 entries in the log to send it to you. ... View more

I'm fairly certain IP address will work.  If not, you could always create a hosts file on the machine you're using to run the command.  If you have a ton to do, just download the VPN client list as CSV and do a quick edit of that to generate a temporary hosts file. ... View more

Neat idea 👍 I just did FIT L1 yesterday.... so that helped 😁     ... View more

@CptnCrnch wrote: Then "Make a wish", perhaps it'll be granted 😉 People tend to forget about / not notice the 'make a wish' button or think it goes into some black hole somewhere. I can tell you from my own personal experience, they see it and often do something with it. ... View more

@DarrenOC wrote: What’s shocked me are the number of companies that seemed well under prepared for such an event. I understand that this is an unprecedented one but why are companies still using desktop PC’s which has left them scrambling for laptops. I’m always mobile anyway so take this for granted I guess!   I’ve seen firewalls crumble under heavy utilisation and their IT departments trying to implement split VPNs to take the strain off the concentrators.  Why spec a firewall for a couple of hundred of connections when there are 1000 people in the company?   LinkedIn is full of stories of home endpoints being utilised for remote access. Stick a VPN client and job done!  Not long before said stories are replaced by “we’ve been breached”.   Tough couple of weeks and more to come but they’ll be lots of lessons learnt for many. The answer to both of your questions is "money" 😀   Desktops are typically cheaper and last longer than laptops.  For those that don't need mobility, is just makes more sense.   I've probably installed a couple hundred firewalls in my career.  I don't think I've ever spec'd one for a 'worst case scenario' where the majority of the company needs a VPN connection.   I do think we'll see some security fallout from this.  Most of the IT people I know are winning the fight against allowing home devices unfettered access to the corporate network.  I support a number of small / medium businesses - for the most part, we're keeping them safe.  Once we explain the dangers and provide some alternatives, they're usually on board.  There are are exceptions though 😓 ... View more