Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About WWWolf
Community Record
29
Posts
54
Kudos
0
Solutions
Badges
03-29-2022
08:26 AM
2 Kudos
Thank you. I did request BrightCloud to update their categorization for this site. It would still be nice for a more streamlined way of reporting but at least there is a viable solution as such.
... View more
03-29-2022
07:47 AM
After a brief investigation, I found out that for some reason Brave Image Search (imgs.search.brave.com) was being blocked on our MX as "Adult and Pornography" and "Illegal". This was after discovering that searching for any image in Brave Search only results in blank images. This is just an alternative search engine to Google and as such shouldn't be blocked. Now with an event log full of disturbing-looking false positives, I placed the above URL into the box to check for threat categories and and then clicked the x for both categories to stop blocking the site. After a while (for some reason it wasn't instant) I was finally able to see images loaded when doing a test search. Is there a better place to report false-positives or alert others who may be experiencing similar issues? Ideally, instead of just the x to stop our MX from blocking the site, there should be a way straight from the Content Filtering page to report false positives. Alternatively, it would also be nice to add categories to any known bad sites that have yet to be categorized by Meraki (I know you can add a URL to the Block list under URL Filtering but content-based filtering is a little more elegant).
... View more
07-21-2021
01:07 PM
2 Kudos
Fair warning, they don't bounce very well on concrete if you accidentally knock it off the edge of your desk (at least my previous one didn't and I don't recommend this particular stress test). Good luck everyone.
... View more
06-29-2021
01:03 PM
1 Kudo
I have a new avatar! Giving Moon Moon a little break for a while with this image of myself... kinda.
... View more
11-23-2020
07:21 PM
2 Kudos
Well that was fast...
... View more
11-23-2020
12:40 PM
2 Kudos
Just in time before Christmas 😁 Thanks for all you do Meredith
... View more
10-21-2020
05:45 AM
1 Kudo
It still seems a bit foreign to me when I see some businesses still keeping people home. We are fortunate enough to be in a low impact area that is now mostly back to normal minus mask and hand sanitizer regulations. On top of that, I personally never got the WFH experience having drawn the short straw to be the only IT worker on staff stay at the office to make sure everyone else could do what they needed to do. (Translation: My workload increased while others got to lounge at home in their PJs lol.) Whether you are at home or the office, or somewhere in between, I hope everyone is doing well and staying healthy.
... View more
05-04-2020
09:37 AM
1 Kudo
I am finally circling back to this. I can confirm that changing the phase 2 algorithm to "aes128-sha1" fixes the VPN connection on Linux Mint 19.3 (at least it did for me) Thank you so much for finding this solution.
... View more
04-28-2020
11:58 AM
1 Kudo
Congrats everyone! Special congrats to @PacerX for the Grand Prize. Also, thank you @MeredithW and Meraki for holding this fun drawing.
... View more
04-23-2020
11:37 AM
4 Kudos
@BrechtSchamp Good call! Your math looks more accurate (and simpler) than what I was doing. I was so wrapped up in trying to calculate odds of winning that I didn't think to calculate the odds of loosing which is just the inverse. Thanks for putting my mind at ease. P.S. If anyone cares, without rounding and including the nominal chance for the Grand prize, percentages are; T1 = 27.36%, T2 = 58.67%, T3 = 71.19% (essentially identical to Brecht's #s for all intensive purposes)
... View more
04-23-2020
09:51 AM
4 Kudos
@BrechtSchamp I forget how to calculate the combined percentages. You can't just add the percentages because if you have a 50% chance at prize A and a 50% chance at prize B, you still do not have a 100% chance of winning something. (Using simple percentages for easy math & understanding.) Multiplying doesn't get it either because 50% * 50% = 25% and it doesn't make sense that having a second chance would reduce your chances. I also thought about adding the 25% to the 50% as 75% kinda makes sense in this scenario but if your odds are 50% and 25% then .5 * .25 = 12.5% + 25% = 37.5%. Of course, 12.5% + 50% = 62.5% which kinda makes sense but how do you pick which % to add the combined percentage to (Is it always just the larger one)? Maybe I'm thinking too much into this. Maybe I need more coffee. Maybe it really doesn't matter lol If my assumptions are correct (big IF), based on my previous numbers, Tier 1 has an overall 27.15% chance, Tier 2 has a 54.88%, and Tier 3 has a 67.94% chance of getting a prize from one of the tiers (including the Grand Prize). Of course, if any of you math geniuses out there can pinpoint errors in my logic or calculations, I do welcome input/corrections. P.S. Sorry for yet another long post about math that doesn't really matter much in terms of this forum. Math does tend to keep me up at night from time to time and apparently there are a few here that find some value.
... View more
04-21-2020
08:13 AM
3 Kudos
In case anyone else is interested, I did the math to calculate the odds. Assuming I counted right, Tier 3 has 33 entries, Tier 2 has 35 (+ 33 from T3 -10 prizes = 58), and Tier 1 has 152 (+ 58 from T2 - 25 prizes = 185) entries. (# of prizes subtracted from weighted totals to account for winners of higher tier prizes being removed from lower tier drawings.) With 50 prizes, everyone has about a 27% chance of getting the Tier 1 prize. Tier 2 people have about a 43% chance of getting one of the 25 prizes of that tier plus the same odds as the rest for Tier 1. Tier 3 people have about a 30.3% of getting that prize plus the odds of the lower tiers. With 220 total entries, odds of the grand prize are 1:220 (about 0.45%). NOTE: These are all just rough calculations to give you an idea. There will likely be some changes to the totals over the next few days. Good luck everyone. May the odds be ever in your favor 😉
... View more
04-20-2020
12:50 PM
2 Kudos
Out of curiosity, if someone reaches Tier 3, are they still in the drawings for Tier 1 & 2 on the off chance they don't get drawn for Tier 3? Obviously, you probably wouldn't want to reward 1 person in multiple tiers but if you start the drawing with Tier 3 and remove those winners from Tier 2 & 1 drawings, it does considerably increase the odds of Tier 2 & 3 people of getting a prize. It's not a big deal & I am sure some Tier 2 & 3 people might not care about the Tier 1 prize - I was just slightly curious about the drawing procedure. Thanks again for caring enough for your customers & the community as a whole to hold these drawings.
... View more
04-20-2020
12:30 PM
4 Kudos
Congrats everyone and good luck with the drawing.
... View more
04-20-2020
06:30 AM
I'm also on Mint 19.3 and have had issues getting the VPN to work. Will be setting aside some time today (hopefully) to work on finding a solution.
... View more
04-16-2020
11:40 AM
At ~ $300+ a piece, the Z3 boxes aren't exactly something we would be handing out to all remote users but I could see some critical roles where they would be worth every penny. I especially like the option of being able to plug an IP phone in for use at home.
... View more
04-15-2020
12:42 PM
You should also be able to configure Layer 7 rules to block inbound connections from a "remote IP range" (or single /32 IP). Depending on your needs, it should be just as effective as a Layer 3 rule.
... View more
04-08-2020
09:02 AM
Can you ping the devices across subnets? Try both IP & hostname - If you can ping IP but not name, check DNS settings. Be sure your internal DNS servers are listed under Security & SD-WAN > Client VPN under Custom nameservers. If both fail, make sure you have the routes properly configured. Are your VLANs configured under Security & SD-WAN > Addressing & VLANs? You can also look under Security & SD-WAN > Route table to see what routes are available to your VPN users. If the necessary routes aren't there, there will be communication problems. If using a separate router to traverse VLANs, there either has to be a route on the MX to that router or the routes also need to be in the MX configuration.
... View more
04-08-2020
08:28 AM
I highly recommend AGAINST turning off Windows Firewall unless you have an alternative firewall in place. It is far better to adjust your firewall rules to allow RDP through it. (Windows Firewall has built-in rules for RDP - you just need to check the boxes to allow the traffic. I also recommend checking more than just the "Domain" checkbox as Windows sometimes can have difficulties identifying the network.)
... View more
04-07-2020
01:19 PM
5 Kudos
Unfortunately some of us IT folk are still holding down the fort handling the local issues that aren't so easy to do remotely. (Hey, someone has to change out the backup tapes, even if they are redundant.)
... View more
04-03-2020
10:00 AM
Great find @Doug100 I don't really have time to fully test that right now but it looks like a solid solution that should work for most users. Unfortunately it relies on the client having the vpnclient module (https://docs.microsoft.com/en-us/powershell/module/vpnclient/?view=win10-ps) installed which I believe is limited to Windows 10 (possibly 8.1 - please correct me if I am wrong). Of course, by now hopefully there aren't too many pre-Windows 10 systems hitting your networks but we all know many organizations are still using at least some Windows 7 systems. Also, I do believe that script requires elevation of privileges to run so it will require you to utilize a remote management solution (not a deal-breaker but slightly more overhead than an email and phone call). All said, the PowerShell option is perhaps the preferred option IF your clients are running current versions of Windows and you have a way to gain access to them. Otherwise, the .pbk file may be an ideal solution for at least a temporary workaround.
... View more
03-30-2020
01:24 PM
6 Kudos
I posted this solution in response to another question but figured many who this may help would never see it there. NOTE: This solution does NOT require elevation of privileges (every step can be done as standard user). If you are looking for a way to create a VPN connection to your MX for (Windows XP, 7, 8, 10) users who are out of the office and can't bring their systems in for you to work on, you can make a .pbk (phonebook) file that you can send via email with these steps: * Create a blank text file on your desktop and then rename it to have a ".pbk" extension * Open the file (you should see a message saying the phonebook is empty prompting you to add an entry) * Click Ok * Select "Workplace network" * Enter the address to your VPN connection and give it a name and click Next * Enter your login credentials (optional) and click Create * With your new connection selected, click Properties * Verify address on General tab then select the Security tab * Un-check CHAP options at the bottom and select PAP under "Allow these protocols" * Select L2TP/IPSec for the type of VPN * Click the Advanced settings button, select the preshared key option and enter your key then click Ok * Click Ok to close the Properties * Click Connect to connect to the new connection * Enter logon credentials if you did not already do so (optionally select to save credentials) and click Connect Users who use this type of connection will have to remember to connect via the .pbk file and not via their network connections dialog. (I would recommend having them save it to their desktops.) You will still need to verify settings on the security tab. In the test that I did I had to enter the preshared key again after transferring the file to another system.
... View more
03-30-2020
12:54 PM
Great job in implementing these features. I would also like to request the ability of detecting failed attempts to access the client VPN. With the added focus on VPN traffic, it would be really nice to know if someone from <INSERT_FOREIGN_COUNTRY_HERE> is attempting to access our VPN every few hours. Of course, logging/alerting on failed attempts also helps us detect and better help end users who are legitimately having problems. Alternatively (or additionally) if we could actually search (not just filter) the event logs, manually detecting such attempts would be a LOT easier.
... View more
03-30-2020
10:31 AM
5 Kudos
It's nice to see such active participation 🙂 Keep up the great work everyone.
... View more
03-25-2020
11:44 AM
1 Kudo
I have never had much luck with syslog servers and would rather not rely on them. With as important as IDS is to security, I was really hoping Meraki would have better reporting without relying on 3rd-party tools.
... View more
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 6 | 2049 | |
| 5 | 24674 | |
| 5 | 8466 | |
| 5 | 23659 | |
| 4 | 11067 |
