Meraki

pjwhitby · ‎Jul 25 2022

perfect, thank you Ryan "Once a network has been bound to a template, some options can still be configured normally. Any local configuration changes made directly on the network will override the template configuration. Note: Updating the same options on the template will not clear a network’s local overrides. To clear local overrides, the network needs to be unbound and rebound to the template"

pjwhitby · ‎Jul 25 2022

My customer has numerous Networks, all provisioned and maintained via Network Templates. There are configurable items within a Network, some of which are hidden when a Network is maintained by a Network Template, and some that are not hidden. An example of a configurable item that is not hidden would be the VLAN tag on a switchport. When we change the VLAN tag on a switchport, the association of Network to Network Template is not affected. If we now make an unrelated change to the Network Template, what change gets cascaded to the Networks being maintained by that Network Template? Is it only the change that has been made to the Network Template, which means we would retain the change of VLAN tag on the switchport, or is the Network Template in its entirety reapplied to the Network, which means we would lose the change of VLAN tag on the switchport?

pjwhitby · ‎May 26 2022

thank you cmr I have asked if Rapid7 has a remote agent and I will see what the response is. It looks like IDS/IPS is not in the ENT license.

pjwhitby · ‎May 26 2022

Thank you Brash, I have asked the customers security team and network team if this is an option they can work with but given we are the MSP and that kind of change via API has never been in scope, I am not sure of the outcome. appreciate the help.

pjwhitby · ‎May 19 2022

Thank you for your help. The Rapid7 scanning host is on their private network. It runs from their private cloud (or datacentre if you prefer 🙂) across their SD-WAN network via AutoVPN, and into the remote branch. Rapid7 Server <> Meraki VPN Concentrator <> AutoVPN <> Remote MX <> Endpoint

pjwhitby · ‎May 19 2022

Hello Community, Is there a way to allow a central vulnerability scanning server (Rapid7 in this case) to periodically scan all the endpoints in a remote branch when the remote branch is connected via an MX67 using AutoVPN and configured with Intrusion Detection and Prevention in Prevention mode? We can see plenty of Blocked actions in the Security Centre from the vulnerability scanning server but no obvious way to whitelist the server. Everything I have researched indicates that this is not possible but reaching out to the Community to check, or find out if it is on the roadmap? Thank you

Meraki

Community

About pjwhitby

pjwhitby

Community Record

Badges

Re: Changes via Network Templates

Changes via Network Templates

Re: Allowing Rapid7 server to scan remote endpoints

Re: Allowing Rapid7 server to scan remote endpoints

Re: Allowing Rapid7 server to scan remote endpoints

Allowing Rapid7 server to scan remote endpoints