Content filtering allows you to block certain categories of websites based on your organizational policies. You can also block or allow list individual websites for additional customization. For example, if you block the "Internet Communications" category this also blocks gmail.com and facebook.com because both websites are communication platforms. You can allow list gmail.com and facebook.com to make sure that both websites are fully operational while all other websites providing chat functionality are blocked.   Content Filtering  URL Block List and Allow List Patterns  ... View more

It would be wise to do so (yes). ... View more

Great idea @AmyReyes!!!  There are several that contribute here/there and are exceptionally helpful when they choose to participate/contribute!!!     Shout-out to these frequent contributors ! ! !  👏  👏  👏 @AidanKamp  @GreenMan  @Ryan_Miles  @ConnorL  ... View more

@P40 A suggestion would be for you to contact your Sales Representative, reach out to the Sales Team, or visit meraki.cisco.com/eval to register for a free evaluation of a Cisco Meraki product (i.e., systems manager) and give it a try to see if it fits your organizational needs vs the laborious process of resting/configuring iPads over and over. ... View more

@AidanKamp - private message sent. ... View more

And after waiting for roughly 20+ min, the network-wide > client (data) UI telemetry comes back.  20 min seems like a long time.  On the bright side, the dashboard is now showing relevant data (amen). ... View more

@AidanKamp the dashboard was working fine for me initially but I made a DHCP change on one network and now all orgs/networks in N216 shard are back to showing no network-wide > client (data) UI telemetry. And I have a support ticket open - maybe I should seek a way to get off the N216 shard? 😅 ... View more

Are your firmware updates setup or configured to use staged upgrades? ... View more

You can tell what shard you are on by looking at the beginning of the dashboard URL. In this example it's N216 - which at the moment is SUPER sluggish and I (too) like you are having difficulties with the dashboard. My other shards are working as expected and both thankful and grateful for that. 😃  ... View more

Aqua typically indicates OM3. MA-SFP-10GB-SR would be compatible with the OM3 LC-LC (MM) fiber and both switches. I suspect the 6 strand fiber at each end are not the same.  I would focus to make sure each end is being used the same at both end. ... View more

I'd be inclined to start the troubleshooting process or steps by verifying that your SFP or SFP+ part numbers are the right modules for the C9300 and MS225s followed by the second step of verifying the right fiber was used.  You mentioned the 6 strand fiber....are the same strand being used on both ends or are they mis-matched?  If the tech can see lights at both ends, what does the dashboard show?  Are the ports the SFP modules are inserted in coming up (on)? Hopefully it's as easy as a fix that @Mloraditch mentioned (swapping one fiber end). Small-Form Factor Pluggable (SFP) and Stacking Accessories  ... View more

You are not alone. The dashboard seems sluggish to me today too and I am not able to see Network-wide > client (data) on 10 of 12 networks.  It could be the dashboard.  I submitted a ticket to see if something on the backend is goofy.   Although data is flowing on all my networks, the UI telemetry is hit/miss as well as there is quite a lot of dashboard sluggishness when navigating from org to org or network to network. ... View more

By chance, are your organizations/networks setup for Staged Upgrades ?  If so, you might be sure the stack is tagged accordingly.  Maybe at one point each switch (as a standalone) was set to upgrade in certain stages and now they are part of a stack instead?  Not sure if this might be the culprit? ... View more

When you setup DHCP scope for client devices, how are you configuring the DNS nameserver (for DHCP responses)? I tend to specify nameservers to those which provide the lowest latency and that tends to help client devices have better service/performance.  In the USA, CloudFlare and Google offer the lowest latency and I tend to use them for that reason.   Not familiar with how you setup client DHCP scopes but might be worth looking at how yours is setup/configured.   Configuring DNS Nameservers for DHCP and this would be a separate setting/configuration from the your other post about the WAN DNS not saved (WAN Uplink). ... View more

This article describes best practices for configuring DNS servers on the WAN interfaces of all Cisco Meraki products. One of the most common DNS configurations when assigning a static IP address to a Meraki device is to use one ISP-provided DNS server and one well-known public DNS service such as Google (8.8.8.8). Many ISPs use their own hosted DNS server and may not have all records or have lookups to many publicly accessible servers. Best Practices for DNS Configuration with Static IP Assignment  ... View more

The ability to run 1Gig throughput when testing without your MX67 would be the full ISP bandwidth.   The ability to run 700mbps throughput when testing with the MX67 would be limited based on the MX model you are using.   A subsequent 2nd or 3rd speed test to the same ISP could be due to either browser or app cached data or your ISP might not truly be evaluating a new inbound thread after just re-running the same test.  It could be it's being evaluated as a concurrent session since you re-ran the same test moments later or even minutes later.   A direct MX67 test to your ISP would (should) yield the capacity of the MX model.  Having turned on NMVPN to two sites would be additional factors that your WAN is working to provide you service with/to.   The 400mbps VPN limitations would be what you'd expect (best case) when sending traffic to/from S2S or NMVPNs.   Perhaps testing your speed with a different test site than your ISP would give you more consistent results. Or it might give you a better indication.  Bear in mind that some of the larger and more reliable ISPs that offer speed tests are truly able to handle multiple users/devices, higher overhead bandwidth capacity of running multiple and simultaneous speed tests concurrently - whereas your ISP test machine (site or server) might not be able to handle that same scenario. Not sure where you are located but I tend to run speed tests against 3 different Google speed test locations and sometimes to get a 4th result will use Comcast.   ... View more

Not all speed test sites are created equal. Running a second or third speed test might have significantly different results from the first speed test based on where the 2nd/3rd speed tests (endpoint) are located - or how far away.  A way to tell if you are on a decent test site is to look at the latency/jitter column (results), lower is better.  Another quick way to see if the site you are testing on is by looking at the upload and download chart (graph)....if the upload/download lines all over the place - you might want to choose another speed test site.  You might have to be a bit selective in choosing which test sites to use by going with some of the more mainstream providers versus some of these smaller test sites or less familiar named sites. Do you have any group policies or traffic shaping (per client bandwidth limit) in the equation?   The two S2S VPNs on this WAN could very well impact your speed test results if other users' data is coming in or going out to those sites - yes, it could impact your speed test results.  If there are other users/devices on the MX67 their network activity could also impact your speed test results. ... View more

How long are you waiting for the change you made to take effect?  Typically it can take 60-90 seconds on a good day.  And you might have to refresh that page to see the change take effect after waiting 60-90 seconds.   Also, I just logged into the dashboard and it took me 4 tries before it actually allowed me access to the dashboard which isn't something I normally encounter.  It might be that you have to make the change when the dashboard is responding better without the hiccups or sluggishness. ... View more

External Identity Sources  Configuring Splash Page Authentication with an LDAP Server  Configuring Active Directory with MX Security Appliances    Creating and Applying Group Policies  ... View more

Are there any events listed under Dashboard > Assurance > Alerts? You can also look for other performance or problem indicators by select the AP and looking at Device Health, Event Log, Connections and performance. Basic Access Point Troubleshooting  Wireless Issue Resolution Guide  ... View more

There is a Role-based Camera and Sensor Permissions for SAML/SSO section in this document for your consideration.  Not sure if you have seen this yet but it might help. Restricting Access to Cameras  ... View more