Hi @AmyReyes did you email me yet? ... View more

yes I agree it's easier with the MR than the MX because you can route to a landing page. Since the authentication happens first, you can assign the group to get a specific dhcp scope, provided you have windows server providing dhcp option 252. Then you can assign that subnet to a vlan in the MX. That is the long way but it is possible to use the MX and use the proxy, but not use the MX TO route to proxy if that makes sense.   Have you tried connecting to the setup.meraki.com or wired.meraki.com local config page? There is an option in many MX I have seen from MX64 and up for a proxy on this page.  The install guide says this:   Web proxy settings These settings take effect if the MX device has to fall back to using HTTP to contact the Cloud Controller. By default, web proxy is disabled. To enable web proxy, do the following: When the WAN connection is fully enabled, Internet LED 1 will turn green. Please note that all these settings below are accessible only via the local management console. • Choose Web proxy > Yes. • Enter values as appropriate for Hostname or IP and Port. • If you require authentication, choose Authentication > Use authentication, and enter appropriate values for Username and Password       I also recommend you call Meraki support desk and if they don't have what you need then please submit a feature request as those are looked into.   Here is a guide to force proxy for MR wireless clients. https://documentation.meraki.com/MR/Firewall_and_Traffic_Shaping/HTTP_Force_Proxy_on_MR_Access_Points     You can also try a free proxy like squid which is much easier. ... View more

I would not suggest using cat5e for gig much less multigig. I only run 10G copper or better these days cat 6a. The lack of insulation in cat5e causes crosstalk and other issues. You would need 10G copper cables and a multigig switch port. The CBS switches offer 2.5G and work great for PoE. Otherwise you need to connect to the 10G sfp port to get the full speed. One user will only connect at the max speed allowed by their radio and antenna, so you would need to stack up multiple users to see the WAP use the 2.5G otherwise it seems to sit at 1G until the uplink needs more ... View more

are they wired or wireless clients? what traffic are you redirecting? Is it LDAP or Web traffic? First identify the traffic, source, and destination. then you can easily redirect using port forwarding. If this is for web traffic you might also tag an AD group or some other traffic to assign dhcp and vlan and use a policy to route that traffic to the proxy as the gateway for that vlan. Can you give us more details on the topology and interesting traffic? ... View more

are you using windows built in vpn client or anyconnect or some other software client? If you use windows VPN and you choose the documented settings from the Meraki website it can change. If you manually configure the adapter with PAP it will change the authentication in windows settings. You have to go back in and change that to "username and password". Many times this will toggle the MSCHAP back on the VPN adapter so you have to go back there and select PAP again. It's been a bug for a while with windows but not in software vpn clients like anyconnect. Sometimes you have to toggle the settings twice before windows will stop mangling your connection then it should connect fine. Just make sure you have CHAP off. ... View more

which port are you referring to? You can block the facebook app and still open any port. Please post a screenshot of your firewall rules for this port and censor any private details ... View more

I am also having this problem. I have moved to testing third party options that work with meraki cameras. The cameras are intelligent enough and you can use zones to count people and cars, and that is it. The built in AI isn't capable of things such as counting pallets on a trailer as they enter or leave a yard. It can count the truck if they all drive through the zone, but not the objects on the truck. ... View more

If you identify the traffic you can tag it in Meraki to allow it. You might try these other ports for whatsapp also: TCP: 4244,5222,5223,5228,5242 TCP/UDP: 50318,59234 UDP: 3478,45395 ... View more

Does this reply count as the first? ... View more

Happy Halloween! ... View more

MX anything. People here saying compliance doesn't matter and just don't have a client vpn... ridiculous. Meraki is still my fav but lets be honest they are a huge fail for compliance and the covid world.   No ssl vpn. No certs for client vpn. Using algorithms that were outdated a decade ago. Still no IKEv2 unless you go full beta and that's only on STS VPN...and it's the year 2021. Can anyone seriously think this is okay for any security appliance? ... View more

no, this was and still is a problem. Still waiting for ikev2... ... View more