Congratulations friends. Thank you all for the Kudos and Helping me to reach this stage. Wish you all a very prosperous 2020. Regards Ajit ... View more

Hi @RangerZ    The following document contains good information about Meraki Air Marshal (WIPS/WIDS). Do check this if already not. https://meraki.cisco.com/lib/pdf/meraki_datasheet_airmarshal.pdf Most of your concerns can be addressed by MR33. I understand MR33 shall be a better investment in comparison to MR20. ... View more

Hi @etb  I understand the configuration 1 suggested by you shall be the way out. I do not see any other better means except to Deny Inter VLAN communication.   ... View more

Hi @John_D  I believe the port # 4 is configured as WAN2. Could you please convert the port to LAN?   Security & SD-WAN > Appliance Status > Uplink                                                       ... View more

Hi @BhushanKhachane  This is my understanding.   First If your public ip of MX interface is not pingable. Please check Security & SD-WAN > Firewall > Security appliance services [ICMP Ping is allowed = Any]   Second Now as you MX is connected on LAN Port of MX and public ip of ASA is of the same subnet. You may try to configure 1:1NAT. Security & SD-WAN > Firewall >1:1 NAT [Type in your ASA Interface IP in "Public IP" and "LAN IP" fields]   Hopefully this shall solve your issues. ... View more

Hi @I_Naitoh  I understand there is no limitation on number of Urls that can be blocked/whitelisted.   ... View more

Hi @bdw72,   I understand we need to introduce an additional router (Preferably MX) in our network at the HUB Location to inject Non-Meraki routes into AutoVPN.   Aaron created the following document explaining this in an awesome manner. https://www.willette.works/merging-meraki-vpns/ ... View more

Hi @PhilipDAth  Hope you are doing fine. Seem like working for me. https://meraki.cisco.com/products/wireless/antennas-power#MA-ANT-3-A1   ... View more

Hi @MattinVegas  I understand even though we create 2 Orgs. We will not be able to downgrade the Advanced Security to Enterprise Licensing. I believe we need to plan this before hand and place all Enterprise License based devices in 1st Org and Advanced Security based devices in the 2nd Org.   As you know we will loose AutoVPN functionality when we break the Org into two. ... View more

Hi @GregK  Hope the MR45 is plugged on a "Trunk" Port with VLAN 3 & 10 allowed.   ... View more

Hi Rich, Meraki MXes (Security Appliances) by default NAT the traffic. We need not do any special configuration for this. MX can ping google. How about clients? How about traceroute on clients? If the internet is working. and the MX is not blocking? the PCs native firewall is not blocking? any other 3rd party product is not blocking?   Clients shall reach internet. [You may try plugging PC directly on MX if already not]   Also as @SoCalRacer suggested kindly recheck the DNS Server settings and reach ability on clients.   Network-wide > Event log could be a place to monitor the logs on the Meraki Dashboard.     ... View more

Same here Mike. A friend of mine got the similar issue on Windows 10 after the recent update. [MAC Bootcamp] However it seems to work well with Z1 not with Z3.   ... View more

Hi @AlexanderDrago  I may be completely wrong. I understand Meraki Native Client VPN by default creates a FULL Tunnel with the site. You need to have internet service on the site. This may be a reason why clients are not able to access internet. You have scripts available to create a SPLIT Tunnel on Windows 10. (If the above reason is the issue). ... View more

Hi @hilehoffer  I vaguely remember this does work and was tested for one of my client. I not too sure though. Also the following Url suggests the same. https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Configuring_Active_Directory_with_MX_Security_Appliances   Excerpts from above thread.   The MX utilizes Microsoft's Windows Management Instrumentation (WMI) service to pull a continuous stream of Logon Security Events from specified Domain Controllers in the Active Directory domain. These security events have critical information that tells the MX which user accounts are logged into which computers. Specifically, the events contain the IP address of the computer and the Windows username of the logged on user.   However is it possible for you to test the AD Integration by changing the mode to "Track by MAC Address" and directly plugging a PC on to the MX. ... View more

Hi @michaelpersaud  I am not sure if this helps you. Could you please try the following if already not? 1. Browsing in Incognito Mode. 2. Whitelisting the device on the Meraki Dashboard, ... View more

Hi @HPID  MX100 is a Security Appliance (Firewall) which can work independently. You can certainly apply MAC based Group Policies to devices connecting to NON-Meraki Switches. Make sure to have your VLANs on MX. Incase you have a L3 device (Non-Meraki) below MX hosting VLANs  you may apply IP based group policies. ... View more

Hi @Quimax   Following is my understanding   Rule 5 Says "Allow" protocol "TCP" for ["IP Address=x.x.x.75" + port "25"] to destination ["Any IP Address" + port "Any"] - Means a specific IP Address from your LAN can access port 25 service.   Rule 6 Says "Allow" protocol "TCP" for ["Any IP Address" + port "25"] to destination ["IP Address x.x.x.75" + port "Any"] - Means all IP Addresses from your LAN can use port 25 service for a specific destination.   Rule 7 Says "Deny" protocol "TCP" for ["Any IP Address" + port "25"] to destination ["Any IP Address" + port "Any"] - Means No IP Address from your LAN can use port 25 service I believe if you remove Rule 6. You may achieve the desired result.   ... View more

Awesome Philip. You are the "Inspiration". ... View more

Hi @SCC    Going by the definition of NGFW. I may say "YES".   Recent introduction is HTTPS inspection. However I follow @PhilipDAth on his views on HTTPS Inspection. https://community.meraki.com/t5/Security-SD-WAN/MX-HTTPS-Inspection-Coming/m-p/45870   However for additional security we recommend Cisco Umbrella to our customers which can be easily integrated with Cisco Meraki Solutions.   You may check the following url for complete information on Cisco Meraki Firewall. https://www.syndicateinfo.com/post/why-cisco-meraki-firewall     ... View more