I guess they could sell some of their time to configure it for you.  Engineering time.   Otherwise, it's part of your licence that you pay for.  The only question is who will spend the time to make the configuration change. ... View more

We had Meraki for 3 years and switched to FortiNet, and we still have home offices on Meraki. There is a learning curve as those things are 10x more capable and feature rich, but also more complex. They do have cloud mnagement as well, but if a device comes with gig ports, it's pushing  gig. I've been pushing ~300  clients through 2x 1gig uplinks with a FortiGate 60F (~$1000) without any problems. ... View more

That sounds right. I agree they need to just let you make the static routes needed.   They do have something called VPN exclusions now that might help in some situations. If only I could figure out a rule to exclude everything except a certain IP. Then it would be doable but a stupid way to do it. ... View more

A low comment says they were able to configure this, but did not test it. ... View more

Intel x86 CPU's are top secret information apparently. The smaller models are built using various models of SoC like Broadcom.   On the MX models I've pulled the cases off they have serial ports on the motherboard where you can watch the bootup sequence in plaintext, alternatively just pull the heatsink off and look. ... View more

I agree with you.The MX product line has stagnated. The simple fact is that Meraki MX devices aren't suitable for all deployments as a firewall. They certainly have their place and for many customers they fit very well in certain sections of the network but they can't be installed everywhere. ... View more

@Pavithran If you upgraded to MX16 then the 15.44.3 would disappear, it only remains as you have some MXs on MX15. ... View more

LOL, that is a lot, Sophos can do as many as there are physical ports on the device (minus 1 for LAN and one for HA if you are using it).  I'm sure Meraki will move to more (3 or 4) but it may well only be on the newer MXx5 devices... ... View more

Only one license as the only HA option is active / passive, so only one device is forwarding traffic at any time. No changes to licensing needed when failing over either automatically or manually via the button in Dashboard. ... View more

@ViniciusFranca the beta versions move to stable release candidate if enough people adopt them, then to stable.  We too are using on most sites already and happy with it. ... View more

>but it required to add into meraki dashboard so that my MX250 can connect to meraki cloud and get firmware upgrade right    The most you can do then is to create a temporary staging network that is a copy of the production network and put the MX into that.  This will get the MX onto the correct firmware.  Nothing else will be kept. ... View more

I had these spares from another project, and they are currently working fine in MX250's running 15.44 https://www.amazon.com/dp/B08BP57TRJ   Obviously not "Supported" Meraki option, but real Meraki ones all seem to be backordered currently.   ... View more

Thank you, this is exactly what we were experiencing. The MX record is associated with the 1:Many NAT and the O365 server on the outside is expecting to only receive from that IP, so it denies anything from the WAN IP of the Merak. I confirmed this from the headers in the email that was being sent as the source was the WAN IP of the Meraki. Thank you for the information. ... View more

Yes we have also noticed higher CPU and lower VPN throughput as a result of this issue. There is a note in 16.4 which states "Significant performance regressions for VPN traffic may be observed on MX84 and MX100 appliances" and I suspect this is present prior to this release. ... View more

I'm guessing EE have got IPv6 to IPv4 working properly then, which is good 👍 ... View more

Has anyone taken a look at the Meraki.com page today?   https://meraki.cisco.com/product-category/security-sd-wan/ ... View more

I have the same q. Any lurkers ? My reqt is pretty similar - have built 100+ sites (network envy of >400 😉) individually, but want to edit URL filtering directly, either in one go or probably by using a small number of templates applied in groups, to handle a staged implementation. Yes, we can use the API, but a GUI method is even more widely available. ... View more

Hello,   as the new firmware is in Beta and doesn't support some features like multicast over LAN, Could you please tell me, how long does it take to get a productive version of MX16.x Firmware? We need to run anyconnect on our devices but as long as the firmware Beta version is, we can not use it in the production world.   Best Regards!       ... View more

Hi Greenberet,   you've actually made a good catch here -- if all countries in the world are switching forward to DST during this hour.   But think about US (have done it two weeks before) or countries in the southern hemisphere (either switching back or also having different cycles like US). With respect to CET (= Central European Time) you are certainly right, and the service window Sunday 28 March 2am to 3am does not exist at all, i.e. is virtually skipped this very Sunday!   Nevertheless, I think it would be a very good idea if Configuration Templates would display either no timezone at all or at least UTC, if any. The mapping of this window to a real local time shall be driven by the local network and its configured timezone.   For networks that are configured to CET, the question for this Sunday is: Shall the Firmware Upgrade happen at 1:02am CET (= 2:02am CEST virtually) or at 2:02am CET (= 3:02am CEST) or automatically being postponed to the next Sunday when this window of lowest usage does really exist once again?   Kind Regards ... View more

This will let you specifiy a different blacklist (and/or different category list) per VLAN which is what the original request was. Use append and the global blacklist and categories to apply firewall wide (all VLAN's) and the VLAN specific list for granular filtering. ... View more

I switched them over at lunch time.    Only dropped 2 pings.    Dropped a zoom call for 5 seconds which was great.    Thanks everyone.    Ye all so helpful.      ... View more

You'll need to open a support ticket and ask them to enable the NO-NAT mode feature.  Then you'll see it. ... View more