Dear Organizer. Could you please give me this jacket as a souvenir? I really like this jacket and having it, I can show off to my colleagues and friends that I am a member of the Meraki Network community. I hope the organizer will consider it. Thank you and waiting for the organizer's response.
... View more
>Using network masking to create DNAT rules No. >presence of a transparent proxy Umbrella SIG can do this (and can be done via SecureConnect as well). >Sophos RED has a (permanent) connection to external service providers and it restricts access to SQL database stored in the main office and may only give access to trusted people. Is that a NAT with an ACL? If so, yes. >Can Meraki function fully as a web application firewall? No. > Can Meraki provide Live firewall protocol for problem analysis? Yes, but it is not good at it. https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Firewall_Logging
... View more
C is Meraki's AutoVPN, I've used both RED and AutoVPN for more than five years and they have similarities, I'd say the Meraki AutoVPN is more resilient, easier to use and slightly less configurable. I prefer AutoVPN over RED. D isn't an MX in my experience, a Cisco FirePower device running FTD is closer to an SG for more advanced features like that.
... View more
what access points from does Assa Abloy support? (https://www.assaabloy.com/pl/en/solutions/products/digital-access-solutions/aperio) I cannot access this link and I have to login here. Maybe this is for Meraki internal employees. Can this be shared with us?
... View more
These days NGFW's are essentially fully fledged routers with inspection capabilities. They're typically very flexible with how many and which ports are configured as WAN ports and LAN ports. Some are also modular to add additional ports. They're also much more likely to be able to do policy-based routing for multiple WAN interfaces, along with failover preferences and full IPv6 support.
... View more
Multi-factor Authentication is not included in Secure Connect licensing, we have an open system that can support multiple SAML 2.0 MFA providers. If you would like MFA (highly recommended) you would purchase your MFA solution separately. Secure Client is the new major version of AnyConnect. At AnyConnect version 5.0 (now rebranded as Secure Client) there was a major change that allowed Cisco Endpoint Security Agent to be installed as a single software client with Secure Client (on Windows only). Additional modules have been added to Secure Client such as ThousandEyes and ZTNA. The end goal is to have a single software client and child modules that fit specific use cases. Licenses for Secure Connect are calculated on a per named user basis. We have a user defined also as 20GB of data processed per user per month in aggregate. There are some non-standard scenarios where per-user calculations are challenging (retail, industrial) and we have guidance posted for Cisco internal and partners how to quote for those scenarios.
... View more
Hi RobustMeraki, For this you can go SAML and integrate Duo with Passwordless (if you have the needed requirements for Windows Hello, from hardware and licensing perspectives). Or can you use a phone one button validation (coupled with risk based authentication, to ask for a code only in risky situations). Or you could use DUO with a FIDO2 or U2F device such as yubikey, to validate any auth by simply touching it.
... View more
To that I have one more question. How can the Meraki Devices be disconnected with the cloud for be able to do this configuration offline, so that they work only when the devices are online. I mean when you have no internet you cannot login into the dashboard at all right?
... View more
Sure: RADIUS is the protocol to authenticate users and / or endpoints that is clear-text by nature. Passwords are hashed using a rather old method. Of course, it's not the best choice when this traffic is being transported over the internet. RADSEC is a way to build an encrypted communication channel between your network devices and the Meraki cloud so it strengthens your security posture. https://documentation.meraki.com/MR/Encryption_and_Authentication/MR_RADSec
... View more
As stated above, CDP is a Cisco proprietary protocol while LLDP is an open standard. LLDP is what is used to read information about connected non Meraki/Cisco devices. SNMP is not used for collecting this information.
... View more
Why isn't there a possibility that we allow everyone to install applications using Device owner mode? There is an option to allow it in restrictions and it still doesnt help and provide search results for any apps wished to be installed on the playstore. Isn't there a possiblity without having to sign in again, if the devices are company owned and the company doesnt want users to use their own playstore?
... View more
HI- I am replying to this thread to know how the payment will be carried out when these vouchers are supposed to be delivered. Will the customer come and pay at one place in cash/ card and then get the voucher or ist it possible to generate these vouchers based on payments on the guest wifi portal. I do not mean here to use the Paypal/Credit card type of option, as the Internet users are not using these kind of things.
... View more
Thank you for taking out the time to do this for me. Appreciate your support. These Infos schould definitely help the customer in taking a decision.
... View more
For the first question the answer is yes: You can enable self-registration: For the second Is not, you can't specify the domains that you want alow.
... View more
Hi @BlakeRichardson , Thank you for the input. I do not know which quality cables the customer is using. But they wanted from the beginning to use their own Cables. Wanted to know here if warranty will be covered if problem lies on the Meraki device itself.
... View more
Systems Manager can install either accounts that include contacts (such as Google, Exchange, etc) on Apple Devices, or use Managed app config to configure a suitable app (Gmail, Nine for Enterprise, Outlook, etc) on Android BUT: This uses the standard Apple / Google MDM capability to do so
... View more
I agree with Phillip's post. There's really nothing you can do to fully prevent this from happening. Mitigating the risk by using content filtering/DNS blocking would be the best bet which sounds like you are already doing. Another thing that could be used is some form of sign-up/validation via email/SMS via the splash page to attempt to verify users. Again this can be spoofed via burner email/phone number so doesn't fully protect you. The Importance really is in the T&Cs that you get users to accept before logging on. This would somewhat cover you for the liability of someone doing something bad.
... View more
