I'm not sure but my suggestion is to perform a test connection from a client device to the MX but failing authentication. Then check the MX logs and see if you see a similar event logged or not. ... View more

It depends on the environment.   I have one where there is a common print server - which is actually very helpful for both usability and security given that printers are typically poorly secured devices. So the rules are set up that printers can only talk to the printer server. The clients cannot communicate directly with the printers.   In another environment, some clients must connect directly to the printers, so there are rules ensuring they can only connect to the printers on the ports specified by the vendor (for the features that are used). ... View more

Not sure about the not passing traffic.  There is however  a hardware defect that impacts some MX75's causing it to crash and reboot due to a kernel panic. Support should be able to confirm whether that's occurring or not.   For reference: Re: I'm seeing some very strange and unlikely high defect rates with MX75 (... - The Meraki Community ... View more

That is the IP address of the OpenDNS/Cisco Umbrella security solution. It's likely that either a client on your network has the Cisco Secure Connect client with Umbrella module installed, you have an integration with Cisco Umbrella on the MX or you've configured "Use Umbrella" for DNS in one of your DHCP scopes. ... View more

It's an interesting one. Inline packet captures across the board seem to be more possible than ever now that ASIC's and CPU's are getting much faster and buffers can be deeper. It'll always be de-prioritized to ensure packets are routed/switched if the CPU is too busy to make a copy, but it seems that most devices these days are fairly capable to capture a high number of packets across the device.   That said, I've had issues with inconsistencies with captures from the dashboard.   I'm currently investigating an issue with small UDP packets being dropped. The packet capture on the MS misses a decent number of packets that I know with certainty went across the port I'm capturing on. And we're nowhere near pushing line rate across the switch. I'm hoping a SPAN (Port Mirror) will be more reliable. ... View more

Having the two switches in the Meraki dashboard simply allows you to manage them from one place. It does not interconnect the networks on those switches. To interconnect the networks with Meraki equipment, you would require a Meraki MX device at each site with AutoVPN setup between them.   With just the switches, you would need to setup an alternate method of remote access such as setting up your own VPN server, or installing a remote access application such as TeamViewer on the machines. ... View more

Hmmm the only things that come to mind are the usual: 1. Either reboot the MX or wait at least 15 mins after creating the rule before testing 2. Ensure you're not testing using IP addresses on the MX as they will always respond to ping across VLANs ... View more

Add the FQDN/IP Address to the Trusted IP Address list and the AMP whitelist under "security & SD Wan -> threat protection  ... View more

This is one of my biggest annoyances on a day-to-day basis. I want the notifications for VPN's disconnecting, but not if it was down for a matter of seconds.  I also have 4G backups at some sites which drop and reconnect randomly due to patchy reception or IP address rollover etc. Talking to our SE last week, apparently, he hears it quite a bit from customers. Not sure if there's anything in the pipeline for it though.   Personally, I'm hoping that once we get a proper monitoring solution in place, I can just turn off the dashboard native alerts and use the monitoring tool to set holds and rules before notifying. ... View more

If you've tried factory resetting the MX (link for reference below) and still cannot access the local device page via LAN ports, log a case with support.   Resetting Cisco Meraki Devices to Factory Defaults - Cisco Meraki Documentation ... View more

The Network Tunnel section of Umbrella is for generic IP-SEC tunnels. If Umbrella has been integrated with Meraki via AutoVPN, the tunnel will not show up in that section. ... View more

Your next steps would be a long the lines of:  - Try to connect to the local status page -  Verify that your internet connection isn't the cause of the issue (eg. Test with another device)  - Factory reset the device   If after those you still can't get it connected to the Internet and/or cannot access the local device page, open a case with support via the dashboard or phone. ... View more

That's awesome. Did this come with a firmware change or just a backend dashboard update? I do wonder whether the change is correlated to my VPN concentrator concentrator no longer showing any usage graph today  😆     ... View more

As with all Meraki devices, the MS130-12X requires an internet connection to manage and configure. It also requires purchasing a license alongside it.   You may also want to check out some of the following resources to get started: https://documentation.meraki.com/MS/MS_Quick_Start https://community.meraki.com/t5/MS-Fundamental-Implementation/ct-p/MS-Fundamental-Implementation ... View more

+1 for a wireless survey. There's really no substitute from a proper wireless survey being performed.   In the meantime, you can check some information around interference under Wireless -> RF Spectrum ... View more

Agreed with @cmr - unless you're doing something particularly special, any Meraki switch should work here. Whilst not ideal, using Meraki switches to split ISP connections can work. It's just a PITA if you do something that causes it to lose Internet connectivity. ... View more

Re-reading the rules in your image, @BlakeRichardson has a point - the last rule is an allow any-any so the rules above it shouldn't matter. Check downstream - any other network devices, windows firewalls etc. ... View more

It seems to me like the issue is with your source ports. The ports listed in the linked website are outbound destination ports. The source ports will be ephemeral ports (typically 32768–60999). The easiest thing to do though is just set the source port to Any. ... View more

This seems likely but fascinating that the firewall would copy the packet to IDS before applying the geoblock. I assume it's for speed of packet processing but there's a potential argument to be made that you wouldn't have to process nearly as many packets if they're geoblocked from the start. ... View more

As said above, essentially "Use Umbrella" points to Umbrella/OpenDNS servers. My understanding is that this includes some very basic security type filtering (known Malware domains, C&C's etc.) Unlike the paid version of Umbrella, this does not include any content filtering, granularity of policies or reporting.   Google DNS is using Google's DNS servers with no filtering at all. ... View more

Great idea for a competition @AmyReyes ! Let's get solutioning! ... View more

Not much in it at all for the top spot! Congratulations @double_virgule @AlexGregoire and the Top 12. Great to see so many contributions quality contributions.   And an excellent quality writeup @PaulF ! ... View more

You either need:   - Two physical links for each service as hand-off from your ISP. You then plug one into each firewall   - To place a switch (or 2) upstream of the firewalls. You connect the ISP handoff and the firewalls to the switch and use VLAN's to 'connect' them. ... View more

As @ww said, group policies are the way to do this. You can assign it manually to the user's device via the dashboard, or by integrating with an authentication mechanism such as Active Directory, RADIUS Attributes or iPSK. ... View more