- About WWWolf
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
WWWolf
Here to help
Member since Feb 21, 2020
a week ago
Community Record
23
Posts
42
Kudos
0
Solutions
Badges
a week ago
1 Kudo
It still seems a bit foreign to me when I see some businesses still keeping people home. We are fortunate enough to be in a low impact area that is now mostly back to normal minus mask and hand sanitizer regulations. On top of that, I personally never got the WFH experience having drawn the short straw to be the only IT worker on staff stay at the office to make sure everyone else could do what they needed to do. (Translation: My workload increased while others got to lounge at home in their PJs lol.) Whether you are at home or the office, or somewhere in between, I hope everyone is doing well and staying healthy.
... View more
05-04-2020
09:37 AM
1 Kudo
I am finally circling back to this. I can confirm that changing the phase 2 algorithm to " aes128-sha1" fixes the VPN connection on Linux Mint 19.3 (at least it did for me) Thank you so much for finding this solution.
... View more
04-28-2020
11:58 AM
1 Kudo
Congrats everyone! Special congrats to @PacerX for the Grand Prize. Also, thank you @MeredithW and Meraki for holding this fun drawing.
... View more
04-23-2020
11:37 AM
3 Kudos
@BrechtSchamp Good call! Your math looks more accurate (and simpler) than what I was doing. I was so wrapped up in trying to calculate odds of winning that I didn't think to calculate the odds of loosing which is just the inverse. Thanks for putting my mind at ease. P.S. If anyone cares, without rounding and including the nominal chance for the Grand prize, percentages are; T1 = 27.36%, T2 = 58.67%, T3 = 71.19% (essentially identical to Brecht's #s for all intensive purposes)
... View more
04-23-2020
09:51 AM
3 Kudos
@BrechtSchamp I forget how to calculate the combined percentages. You can't just add the percentages because if you have a 50% chance at prize A and a 50% chance at prize B, you still do not have a 100% chance of winning something. (Using simple percentages for easy math & understanding.) Multiplying doesn't get it either because 50% * 50% = 25% and it doesn't make sense that having a second chance would reduce your chances. I also thought about adding the 25% to the 50% as 75% kinda makes sense in this scenario but if your odds are 50% and 25% then .5 * .25 = 12.5% + 25% = 37.5%. Of course, 12.5% + 50% = 62.5% which kinda makes sense but how do you pick which % to add the combined percentage to (Is it always just the larger one)? Maybe I'm thinking too much into this. Maybe I need more coffee. Maybe it really doesn't matter lol If my assumptions are correct (big IF), based on my previous numbers, Tier 1 has an overall 27.15% chance, Tier 2 has a 54.88%, and Tier 3 has a 67.94% chance of getting a prize from one of the tiers (including the Grand Prize). Of course, if any of you math geniuses out there can pinpoint errors in my logic or calculations, I do welcome input/corrections. P.S. Sorry for yet another long post about math that doesn't really matter much in terms of this forum. Math does tend to keep me up at night from time to time and apparently there are a few here that find some value.
... View more
04-21-2020
08:13 AM
3 Kudos
In case anyone else is interested, I did the math to calculate the odds. Assuming I counted right, Tier 3 has 33 entries, Tier 2 has 35 (+ 33 from T3 -10 prizes = 58), and Tier 1 has 152 (+ 58 from T2 - 25 prizes = 185) entries. (# of prizes subtracted from weighted totals to account for winners of higher tier prizes being removed from lower tier drawings.) With 50 prizes, everyone has about a 27% chance of getting the Tier 1 prize. Tier 2 people have about a 43% chance of getting one of the 25 prizes of that tier plus the same odds as the rest for Tier 1. Tier 3 people have about a 30.3% of getting that prize plus the odds of the lower tiers. With 220 total entries, odds of the grand prize are 1:220 (about 0.45%). NOTE: These are all just rough calculations to give you an idea. There will likely be some changes to the totals over the next few days. Good luck everyone. May the odds be ever in your favor 😉
... View more
04-20-2020
12:50 PM
2 Kudos
Out of curiosity, if someone reaches Tier 3, are they still in the drawings for Tier 1 & 2 on the off chance they don't get drawn for Tier 3? Obviously, you probably wouldn't want to reward 1 person in multiple tiers but if you start the drawing with Tier 3 and remove those winners from Tier 2 & 1 drawings, it does considerably increase the odds of Tier 2 & 3 people of getting a prize. It's not a big deal & I am sure some Tier 2 & 3 people might not care about the Tier 1 prize - I was just slightly curious about the drawing procedure. Thanks again for caring enough for your customers & the community as a whole to hold these drawings.
... View more
04-20-2020
12:30 PM
4 Kudos
Congrats everyone and good luck with the drawing.
... View more
04-20-2020
06:30 AM
I'm also on Mint 19.3 and have had issues getting the VPN to work. Will be setting aside some time today (hopefully) to work on finding a solution.
... View more
04-16-2020
11:40 AM
At ~ $300+ a piece, the Z3 boxes aren't exactly something we would be handing out to all remote users but I could see some critical roles where they would be worth every penny. I especially like the option of being able to plug an IP phone in for use at home.
... View more
04-15-2020
12:42 PM
You should also be able to configure Layer 7 rules to block inbound connections from a "remote IP range" (or single /32 IP). Depending on your needs, it should be just as effective as a Layer 3 rule.
... View more
04-08-2020
09:02 AM
Can you ping the devices across subnets? Try both IP & hostname - If you can ping IP but not name, check DNS settings. Be sure your internal DNS servers are listed under Security & SD-WAN > Client VPN under Custom nameservers. If both fail, make sure you have the routes properly configured. Are your VLANs configured under Security & SD-WAN > Addressing & VLANs? You can also look under Security & SD-WAN > Route table to see what routes are available to your VPN users. If the necessary routes aren't there, there will be communication problems. If using a separate router to traverse VLANs, there either has to be a route on the MX to that router or the routes also need to be in the MX configuration.
... View more
04-08-2020
08:28 AM
I highly recommend AGAINST turning off Windows Firewall unless you have an alternative firewall in place. It is far better to adjust your firewall rules to allow RDP through it. (Windows Firewall has built-in rules for RDP - you just need to check the boxes to allow the traffic. I also recommend checking more than just the "Domain" checkbox as Windows sometimes can have difficulties identifying the network.)
... View more
04-07-2020
01:19 PM
5 Kudos
Unfortunately some of us IT folk are still holding down the fort handling the local issues that aren't so easy to do remotely. (Hey, someone has to change out the backup tapes, even if they are redundant.)
... View more
04-03-2020
10:00 AM
Great find @Doug100 I don't really have time to fully test that right now but it looks like a solid solution that should work for most users. Unfortunately it relies on the client having the vpnclient module (https://docs.microsoft.com/en-us/powershell/module/vpnclient/?view=win10-ps) installed which I believe is limited to Windows 10 (possibly 8.1 - please correct me if I am wrong). Of course, by now hopefully there aren't too many pre-Windows 10 systems hitting your networks but we all know many organizations are still using at least some Windows 7 systems. Also, I do believe that script requires elevation of privileges to run so it will require you to utilize a remote management solution (not a deal-breaker but slightly more overhead than an email and phone call). All said, the PowerShell option is perhaps the preferred option IF your clients are running current versions of Windows and you have a way to gain access to them. Otherwise, the .pbk file may be an ideal solution for at least a temporary workaround.
... View more
03-30-2020
01:24 PM
6 Kudos
I posted this solution in response to another question but figured many who this may help would never see it there. NOTE: This solution does NOT require elevation of privileges (every step can be done as standard user). If you are looking for a way to create a VPN connection to your MX for (Windows XP, 7, 8, 10) users who are out of the office and can't bring their systems in for you to work on, you can make a .pbk (phonebook) file that you can send via email with these steps: * Create a blank text file on your desktop and then rename it to have a ".pbk" extension * Open the file (you should see a message saying the phonebook is empty prompting you to add an entry) * Click Ok * Select "Workplace network" * Enter the address to your VPN connection and give it a name and click Next * Enter your login credentials (optional) and click Create * With your new connection selected, click Properties * Verify address on General tab then select the Security tab * Un-check CHAP options at the bottom and select PAP under "Allow these protocols" * Select L2TP/IPSec for the type of VPN * Click the Advanced settings button, select the preshared key option and enter your key then click Ok * Click Ok to close the Properties * Click Connect to connect to the new connection * Enter logon credentials if you did not already do so (optionally select to save credentials) and click Connect Users who use this type of connection will have to remember to connect via the .pbk file and not via their network connections dialog. (I would recommend having them save it to their desktops.) You will still need to verify settings on the security tab. In the test that I did I had to enter the preshared key again after transferring the file to another system.
... View more
03-30-2020
12:54 PM
Great job in implementing these features. I would also like to request the ability of detecting failed attempts to access the client VPN. With the added focus on VPN traffic, it would be really nice to know if someone from <INSERT_FOREIGN_COUNTRY_HERE> is attempting to access our VPN every few hours. Of course, logging/alerting on failed attempts also helps us detect and better help end users who are legitimately having problems. Alternatively (or additionally) if we could actually search (not just filter) the event logs, manually detecting such attempts would be a LOT easier.
... View more
03-30-2020
10:31 AM
5 Kudos
It's nice to see such active participation 🙂 Keep up the great work everyone.
... View more
03-25-2020
11:44 AM
1 Kudo
I have never had much luck with syslog servers and would rather not rely on them. With as important as IDS is to security, I was really hoping Meraki would have better reporting without relying on 3rd-party tools.
... View more
03-25-2020
09:56 AM
1 Kudo
I am looking for a way of getting better visibility on our client VPN connections and wondering if any of you have found better solutions. Currently, to see the successful connections I go to the Event log and in the "Event type include:" box I add VPN client connected & VPN client disconnected. The active connections also show well on the clients page. When you sort by "Status" it groups them nicely. This is great for showing the successful connections but no help for viewing any failed (legitimate of otherwise) attempts. To see all connection attempts, I am adding "All Non-Meraki / Client VPN" to the include box. However, the sheer volume of Client VPN negotiation events does make sorting this all out into a bit of a chore. Unfortunately, there is currently no way that I know of to better refine these results such as searching for specific text in the Details column. Alternatively, it would be nice if the client VPN connection information showed on the "VPN Status" page or had its own separate page. With more and more people working from home, the bad-actors are definitely shifting focus to try and attack all the new VPN connections popping up everywhere. The more we can do to detect and stop any malicious activity on our VPNs the better.
... View more
03-25-2020
09:35 AM
1 Kudo
One possible solution I have found is to create a new connection via a .pbk (phonebook) file. * Create a blank text file on your desktop and then rename it to have a ".pbk" extension * Open the file (you should see a message saying the phonebook is empty prompting you to add an entry) * Click Ok * Select "Workplace network" * Enter the address to your VPN connection and give it a name and click Next * Enter your login credentials (optional) and click Create * With your new connection selected, click Properties * Verify address on General tab then select the Security tab * Un-check CHAP options at the bottom and select PAP under "Allow these protocols" * Select L2TP/IPSec for the type of VPN * Click the Advanced settings button, select the preshared key option and enter your key then click Ok * Click Ok to close the Properties * Click Connect to connect to the new connection * Enter logon credentials if you did not already do so (optionally select to save credentials) and click Connect Users who use this type of connection will have to remember to connect via the .pbk file and not via their network connections dialog. One of the main advantages of this method is the .pbk file can be emailed to your users for easy remote setup - you will still need to verify settings on the security tab and in the test that I did I had to enter the preshared key again after transferring the file to another system.
... View more
03-25-2020
08:56 AM
1 Kudo
Cisco AnyConnect would be a welcome change for client VPN connections. I have been fighting these issues as well. It seems Windows like to periodically botch the connection settings. The 2 areas that I have found usually being the culprit are; * Preshared Key missing or otherwise messed up - Go to VPN Properties > Security tab > Advanced settings > re-enter the key Authentication switched from PAP to CHAP (assumingly changed by an update) - Go to VPN Properties > Security tab > Allow these protocols > Make sure PAP is selected and both CHAP options are unchecked
... View more
03-25-2020
08:34 AM
4 Kudos
Awesome idea @MeredithW and thanks for doing this. I am really liking the looks of those socks and mugs.
... View more
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 6 | 463 | |
| 5 | 3699 | |
| 5 | 3108 | |
| 4 | 2062 | |
| 4 | 2417 |
