We have two Cisco Meraki networks under the same organization, each in a different physical location: one is our main HQ, and the other is our Corporate failover site. For remote access, we use Cisco Secure Client (AnyConnect) VPN, and authentication is handled through Microsoft Entra (Azure AD), with multi-factor authentication (MFA) via Duo.   We're now working on configuring the AnyConnect VPN for the Corporate failover site to use the same authentication method—Microsoft Entra with Duo MFA. However, we're running into an issue in Duo: it only allows adding one SAML identity provider. When I attempt to create a separate Enterprise Application in Microsoft Entra for the failover site, it asks for the Identifier (Entity ID) from the Duo SAML configuration.   The problem is that the Entity ID needs to be unique across all Enterprise Applications, but it's already being used in the application for our main HQ Cisco AnyConnect setup. ... View more

Users that connect to Anyconnect vpn cant be identified in Meraki, it only shows the word email as the connected user. We are using DUO and Azure AD with Cisco Anyconnect for MFA, is there a setting I need to change, so the users email address shows as the user connnected? ... View more

We have an employee who is working remotely from Dubai this week, when he tries to connect to the Meraki Client vpn, it says couldnt establish connection, might need to change network settings for connection.  I am not sure what to change.  I am able to remote in to his laptop.  ... View more

I need to add MFA with our Client VPN, I was advised to get licenses for Anyconnect.  I reached out to our vendor for a quote on Anyconnect licenses, and then advised I would need DUO licensing also.  Does anyone know which DUO license would cover the MFA , the license they are suggesting seems pretty steep ( Cisco Duo Essentials edition) is the description ... View more