Cisco Secure Connect: Cisco Secure Connect - IdP Okta SAML Configuration Change: General article update with detailed descriptions and screenshots.   Cisco Secure Connect - IdP Azure AD SAML Configuration Change: Added sections "Access the Cisco Umbrella Dashboard" and "Configuring the IdP Integration".   MX: Calculating MX WAN MAC Addresses Change: Added Z4/C.   Firewall Logging Change: Added "Policy (by Firewall)" definitions.   MR: MR MQTT Data Streaming Change: Added note that with Wi-Fi telemetry, the number of MQTT messages sent per cycle, or publish frequency duration, may differ depending on the client type configured with further detailed information.   Wi-Fi Personal Network (WPN) Change: Added note additional note to "Caveats and Limitations", that Wireless devices connected to a WPN-enabled SSID can communicate with wireless devices connected to a different SSID (Non-WPN) if both SSIDs share the same VLAN and further information if wireless client separation between WPN and Non-WPN SSIDs is desired.   CW9163E Datasheet Change: Updated 6GHz radio state when powering the AP with 802.3af to "off".   CW9162 Datasheet Change: Updated antenna gains for all frequency bands.   MT: Common Sensor (MT) Event Log Messages Change: Added "Alert Event", "Ambient Noise", "MT30 Button Press", "IAQ Score", "Probe Cable Connection", "Automation Webhook", "Automation Notification", "Automation Switchport", "Automation Snapshot" and "TVOC".   MT15 FAQ Change: Added additional FAQs: "How high should the sensor be mounted on the wall?", "What is the sensing range for vape detection?", "What can you do to prevent tampering?", "Can I pair the MT5 with a  camera so that I get a snapshot when vape is detected?", "What do you do in response to receiving an alert?" and "How can I test that my MT15 is working for vape detection?".   SM: Single Sign On Extension Payload Change: Added note that the Single Sign On Extension is supported on iOS, iPadOS, and macOS across all applications that support Apple's enterprise single sign-on feature; added references to Microsoft Enterprise and Okta SSO extensions.   Systems Manager Agent Release Notes Change: Added release notes for up to v4.0.   Systems Manager Self-Service Portal Change: Clarified deprecation date for the old Self Service Portal (February 4th 2023).   General Administration: Meraki Event Log Change: Updated MS DHCP log description to "DHCP-related errors (when DHCP is enabled on a L3 interface)".   Small-Form Factor Pluggable (SFP) and Stacking Accessories Change: Added note that Cisco Meraki offers branded SFP modules, and while we do not prevent third-party accessories from functioning, users should conduct their own tests to ensure proper compatibility.   Meraki End-of-Life (EOL) Products and Dates Change: Added E3N-VMX100, EAB-VMX100-3Y and EAB-VMX100-5Y.   Device Uptime Change: Added "Requirements and limitations" for Access Points.   Configuring SAML SSO with Azure AD Change: Added section "Testing the SSO Configuration". ... View more

  MA-WMNTBR-PWR-ADP Installation Guide Change: New article.   Cisco Secure Connect: Cisco Secure Connect - Cloud Firewall Policy Change: Added sub-section "Identity Criteria" to sections "Creating Internet Traffic Rule" and "Creating a Private Application and Network rule".   Cisco Secure Connect Data Center List Change: Secure Connect Complete now fully available in US-Central, US-Midwest and US-Southeast.   Cisco+ Secure Connect - Admin User Management Change: Added note that SAML admins can only access resources such as policies from the Secure Connect Dashboard once the SAML users are synced, which can take up to an hour.   MX: AnyConnect on the MX Appliance Change: Updated max. sessions for MX84 to 100; AnyConnect custom hostname certificates is now General Available beginning from MX 16.11+.   AnyConnect on the MX Appliance AnyConnect Authentication Methods AnyConnect VPN Okta SAML Configuration AnyConnect Onelogin SAML Configuration AnyConnect Azure AD SAML Configuration Change: AnyConnect SAML is now General Available beginning from MX 16.16+ or MX 17.5+.   Meraki MX/Z Security and SD-WAN Licensing Change: Added "IPv6 Support", "Layer 7 (Application) Enforcement powered by NBAR", "Traffic Shaping Enforcement powered by NBAR" and "Trusted Traffic Exclusions powered by NBAR" to Features by License Option table; added note that the new Secure Teleworker License is not be supported by the Z1 and Z3 teleworker gateways.   MS: MS Layer 3 Switching and Routing Change: Added C9300-M.   Configuring ACLs Change: Updated with C9300-M.   Switch Port Profiles Change: Added MS130 and MS130R.   MS Switch Access Policies (802.1X) Change: Added note that Cisco Meraki switches require the Cisco-AVPair "device-traffic-class=voice" attribute pair within the Access-Accept frame to put devices on the voice VLAN for the host mode Multi-Auth.   MR: Client Roaming Analytics Change: Added "Sticky clients".   General Administration: Information for Cisco Meraki for Government users Change: Added "Online" option to contact Support. ... View more

  China Region Cloud Maintenance New IP Ranges 2023 FAQ Change: New article.   Cisco+ Secure Connect - Creating Access Policies for Private Applications and Network (Legacy) Change: Added note that this article shows the legacy method of updating firewall policies in Umbrella Dashboard. The Cloud Firewall configuration is now part of the Secure Connect dashboard.   Cisco+ Secure Connect - Defining Private Applications Change: Added notes to create an application as a object which can be used to control access from RAVPN and branch users / external browser-only users.   Cisco+ Secure Connect - Private Applications and Network Access Policies Change: Major article update.   Meraki MX ThousandEyes Configuration Guide Change: Added license tier capabilities table; added sections "ThousandEyes Enterprise Agent Routing Considerations"; updated chapter "Enabling ThousandEyes Monitoring on the MX Platform".   Meraki MX Subscription Licensing Change: The features "ThousandEyes Agent Integration", "Internet Outages", "Web App Health", "WAN Health" and "VoIP Health" are now available with the Advantage tier.   MX85 Series Hardware Installation Guide MX85 Datasheet MX95/MX105 Series Hardware Installation Guide MX95/105 Datasheet Change: Added note, that MX85/95/105 supports PoE+ on GbE Port 4.   MX Load Balancing and Flow Preferences SD-WAN and Traffic Shaping Change: Added note that a flow preference can be configured to send that traffic over the non-primary WAN, if needing to access a local management page of an upstream device located over the non-primary WAN.   Trusted Traffic Exclusions Change: Added note that configuration changes for Trusted Traffic Exclusions are organization-wide, so changes will affect all networks within your organization.   Content Filtering Change: Updated section "Patterns for Blocking or Allow Listing Specific URLs".   IPv6 Support on MX Security & SD-WAN Platforms - WAN Change: Added note that there is no option to disable IPv6 on MX WAN ports.   vMX Setup Guide for Microsoft Azure Change: Added note to choose availability zone as “none”, Client VPN will be used on the vMX in order for the managed application to be given a basic SKU which will allow users to Client VPN into the vMX.   MI WAN Health Change: Updated for new MI WAN Health features.   MS130 Datasheet Change: Added PoE related information.   MS Layer 3 Switching and Routing Change: Added note that MS Switches are unable to ping their own Layer 3 Interface; updated warning that t.he management IP for a switch (stack) performing L3 routing cannot have the gateway pointed to one of its own L3 interfaces.   MS and CS Firmware Features Directory Change: Added MS130-8(P/X), MS130-12X, MS130-24(P/X), MS130-48(P/X) to MS100 series family.   Google Sign-In Change: Added information about a new pre-splash info page.   CW9166 Installation Guide Change: Added note that CW9166 APs use device to cloud connectivity method and will require TCP port 443 to be open on any upstream firewalls; added advise to refrain from using a proxy server for 443 sessions as it could cause potential cloud connectivity issues and break the firmware upgrade process.   Second Generation MV Cameras: Overview and Specifications Change: Added MA-MNT-MV-21 to list of accessories.   Supported Operating Systems with Meraki SM Change: Added Android version 14.x to list of supported versions.   Device posture tracking using certificates with Cisco ISE and Meraki Systems Manager Change: Added section "Manually create ISE EAP-TLS Wi-Fi Profile in SM".   Restricting Access to Cameras Change: Added section "Local Camera and Sensor Admins on Network Level".   Dashboard Alerts - Connectivity Issues Change: Added troubleshooting steps for "Unreachable device(s)".   Alerts and Notifications Change: Added note that the alert "Clients connect or disconnect from the LAN" is not available on MX security appliance networks that are set to track clients by IP address; added note that the alert "VLAN prefix shortage detected" is only available for MXs that can run IPv6".   Packet Capture Overview Change: Added section "MR Tx Captures (Beta only)".   Best Practices for Meraki Firmware Change: Updated section "Meraki Firmware Conventions".   Cisco Meraki Firmware FAQ Change: Added FAQ "How do I know which firmware version to upgrade to?".   Managed Service Providers (MSPs) Change: Added section "Recommended Dashboard Structures"; updated section "MSP Features and Tools". ... View more

    Hi Community,   Below are the most important changes to our documentation between June 17th and June 30th:   Port Profiles Change: New article.   Third Generation MV Cameras: Overview and Specifications Change: New article.   Device Terminology Changes to Improve Unified Experience in Meraki Dashboard Change: New article.   Cisco+ Secure Connect Account Setup FAQ Change: New article.   Cisco+ Secure Connect - Account Setup Troubleshooting Change: New article.   Cisco+ Secure Connect - Admin User Management Change: Added sections "Sign-On Once", "Admin Sync" and "Admin User Experience FAQ".   Setting Up Your Cisco+ Secure Connect Account Change: Added sections "Setup Instructions" and "Administrative User Setup".   Manually Integrating Cisco Umbrella with Meraki Networks Change: Added section "Best Practices".   Configuring VLANs on the MX Security Appliance Change: Added note that configuring more than 100 VLANs per network is not recommended.   Port Schedules Change: Added section "Muting Email Notifications".   Switch Stacks Change: Added note about MS AutoStacking.   Bonjour Forwarding Change: Added section "New Behavior in MR 30.X+ Firmware".   Wireless Client Isolation Change: Edited note that Bonjour Forwarding will function even when the Layer 2 isolation is enabled on the same SSID with MR 30.X.   Configuring RADSec (MR) Change: Added note that RADSec support was introduced in MR firmware 30.X.   Air Marshal Change: Added API GET endpoint to retrieve scan results.   Meraki Vision Changelog Change: Added release notes for up to v1.9.1.   Motion Alerts Change: Added note that "Alert Only on People Events" is only available on second generation MV and newer.   Sensor Alert Profiles Change: Added alert metrics for MT40.   Web Clips in Systems Manager Change: Added instructions to add a web app.   Adaptive Policy Overview Change: Added C9300-M.   Dashboard Alerts - Insight Change: Added section "MAC Flap Anomaly Alert".   Using Google OAuth Splash with a Walled Garden Change: Added reference to Google's Firewall Settings page for Walled Garden URLs.   Resetting Cisco Meraki Devices to Factory Defaults Change: Added instructions on how to reach the Reset button on MV52.   Creating and Deleting Dashboard Networks Change: Added note that networks cannot be deleted, if billing has been enabled.   Managing Dashboard Administrators and Permissions Contacting Support Obtaining Packet Captures For A Support Case Regarding Wireless Client Issues Packet Capture Overview Packet Captures and Port Mirroring on the MS Switch Using the Cable Test Live tool Using the Ping Live Tool Using the MX Live tools Using the MS Live Tools Using the MR Live Tools Meraki MR License Guide Meraki Dashboard Organizational Structure Licensing Product Firmware Version Restrictions Meraki Firmware Release Process Firmware Upgrades Meraki Per-Device Licensing - Configuration The Science behind Per-Device Licensing Inventory and Devices Getting Started Checklist Meraki Cloud Architecture Manage Tags Monitoring and Reporting SNMP Overview and Configuration Organization Change Log Meraki Event Log Login Attempts Summary Report Overview Alerts Scanning API for Location Analytics Solutions Creating and Applying Group Policies Adding and Removing Devices from Dashboard Networks Using the Organization Inventory Meraki Mobile App Beta - FAQ Change: Added reference to free online training courses. ... View more

    Hi Community,   Below are the most important changes to our documentation between June 3rd and June 16th:   Cisco+ Secure Connect - Cloud Access Security Broker (CASB) Cisco+ Secure Connect - Defining Private Applications Change: Added note about Public Application Discovery being available through the Early Access Page.   Cloud Monitoring Overview and FAQ Cloud Monitoring for Catalyst Onboarding Change: Added support for IOS-XE 17.9.3.   Client VPN Overview Change: Added note that Dashboard Administrators will automatically populate as Client VPN users.   Site-to-Site VPN Settings Change: Added note about Default Routing behavior for subnets that have "In VPN" or VPN mode enabled / disabled.   Primary Uplink Status and Ethernet Port Carrier Change Events Change: Added note that Ethernet ports may be referenced with the 'port' format as well as the 'lan' format.   Port Forwarding and NAT Rules on the MX Change: Added description on the behavior of outgoing NAT address if 1:1 or 1:Many NAT is being used.   Layer 3 and 7 Firewall Processing Order Change: Added note that MX VLAN interfaces, themselves, are not considered in Allow or Deny rules.   Adaptive Policy and Cisco ISE Change: Added native sync between ISE and Meraki starting with ISE version 3.2 patch 1 and the switche's attempt to assign an SGT tag, if the RADIUS doesn't respond with a tag.   Dynamic ARP Inspection Change: Added note that DAI will block static IP Addresses configured directly on devices. This is expected behavior as this is tracked with DHCP Tracker.   Configuring ACLs Change: Added section "Monitoring ACLs".   Using the Cable Test Live tool Change: Added note that use of this test can disrupt traffic on 10 or 100 Mbps links - gigabit links will not be affected.   IPSK Authentication without RADIUS Change: Added note that it might be necessary to reboot your APs to clear Group Policies inherited from respective iPSKs after changing the SSID authentication type from iPSK without RADIUS to a different authentication method.   IPSK with RADIUS Authentication Change: Added section "Microsoft NPS Configuration".   Dynamic Frequency Selection (DFS) Change: Added note that DFS events can cause an Access Point to use a channel, temporarily, even though that channel has been excluded from use in the Dashboard. Please contact Support, if this behavior should prove problematic.   MV Smart Camera FAQ Change: Added additional question "Does my SSL certificates renew automatically?"   MT40 Datasheet - Smart Power Controller Change: Added Power Consumption.   MDM Settings Change: Added note on how to renew your Self Signed SCEP CA Certificate.   Best Practices for Meraki Firmware Change: Added note about Major, Minor and Point Releases for MX Firmware.   Alerts and Notifications Change: Added note that SAML users cannot receive alerts.   Meraki Per-Device Licensing - Configuration Change: Added note that when a device with an associated license is moved back into the Organization Inventory, the license becomes unassigned and can be reused for a different device.   Using the Cisco Meraki Device Local Status Page Change: Added note that Meraki device react on specific URLs to access the LSP. Therefore, UDP port 53 is enabled on Meraki devices and will be detected as open by any scanning tool.   MX100 Scheduled Firmware Upgrade Cancellation - 4/27/2023 Change: Updating firmware versions with the fix for the issue. ... View more

    Hi Community,   Below are the most important changes to our documentation between April 15th and April 21st:   Supported Catalyst 9000 Series Switches (Cloud Monitoring) Change: Added several C9300LM models.   MG41/41E Technical Specifications Change: Added "Telus (CA), Vodafone (NZ), DoCoMo (Japan)" to list of Certified Carriers.   MG51/51E Technical Specifications Change: Added "Vodafone (NZ, UK, Germany, Ireland)" to list of Carrier Certification in Progress.   Automatic NAT Traversal for Auto VPN Tunneling between Cisco Meraki Peers Upstream Firewall Rules for Cloud Connectivity SSID Tunneling and Layer 3 Roaming - VPN Concentration Configuration Guide Meraki Campus LAN; Planning, Design Guidelines and Best Practices Troubleshooting failed connections to the Virtual VPN Concentrator Change: Updated ports used for VPN Registry.   MS Firmware Upgrades Change: Added note that Staged Upgrades are not supported for networks assigned to a configuration template.   Packet Captures and Port Mirroring on the MS Switch Change: Added note that MS switch supports utilizing aggregate ports as a source port only (not as a destination port).   MS225 Overview and Specifications Change: Added Stacking Bandwidth to "Throughput and Capabilities" table.   Conducting Site Surveys with MR Access Points Change: Added section "Configuring 6 GHz Site Survey".   Client Roaming Analytics Change: Added statement about firmware version requirement.   Troubleshooting MV Image Quality Change: Added warning about recommended materials to clean the dome correctly.   Video Streaming Change: Added note that Meraki Display does not support Low Latency HLS (LLHLS) streaming currently.   Deploying Store Apps for iOS/macOS and Android Change: Added note about Region Restriction Applications for Android.   Device posture tracking using certificates with Cisco ISE and Meraki Systems Manager Change: Section "Create the Cisco ISE enabled EAP-TLS Wi-Fi profile" rewritten.   Service Provider Dashboard Roles Change: Added "Client VPN page" and "Manage staged firmware upgrades (Switching)" to table "Enterprise vs. Organization Admin" table. ... View more

    Hi Community,   Below are the most important changes to our documentation between February 25th and March 31st:   FAQ: Meraki Authentication to Require TLS 1.2 or Later Version Change: New article.   MG51/51E Technical Specifications MG51/E Installation Guide Change: New articles.   MG IP Passthrough Change: New article.   Switching Overview - MS Health Change: New article.   Motion Based Retention Change: New article.   Client Roaming Analytics Change: New article.   Network Service Health Change: New article.   Cisco Security Applications with Systems Manager for Hybrid Home Office Work Deployments Change: New article.   Cisco+ Secure Connect - Policy Import Change: New article. Event Search on Vision Portal (BETA) Change: New article.   Cisco+ Secure Connect - IdP Meraki Cloud Authentication Change: Added section "Deployment".   Cisco+ Secure Connect - Existing Meraki Customer Cisco+ Secure Connect - Customers without Meraki and Umbrella deployments Change: Added sections "Using Automatic Key Exchange to Link Accounts" and "Manually Linking Accounts".   Cisco+ Secure Connect - Manage DNS Policies Cisco+ Secure Connect - Manage Web Policies Change: Added sections "Overview" and "Adding policies". Manually Integrating Cisco Umbrella with Meraki Networks Change: Added sections "Firmware Requirements" and "Licensing Requirements", as well as added note that Manual Integration is mutually exclusion with Automatic Integration on MR.   VPN Full-Tunnel Exclusion (Application and IP/URL Based Local Internet Breakout) Change: Added note, that Non-Meraki VPN exclusions is not supported with templates at this time.   Using OSPF to Advertise Remote VPN Subnets Change: Added note, that MX appliances will now properly validate that DBD packets conform to the appropriate MTU size.   Device Utilization Change: Added note about Performance API behavior.   MG Wireless WAN Dashboard Settings MG Templates Best Practices Change: Added notes, that MG templates don't support DHCP Reserved IP Ranges or Fixed IP Assignments.   MG41E and MG51E Cellular Dipole Antenna Datasheet MG41E and MG51E Cellular Patch Antenna Datasheet Change: Added MG51E.   MG41 and MG51 Troubleshooting Guide Change: Added notes that MG51 does not support 3G and to look at the LSP for signal status, if MG51/E does not connect to Dashboard.   MV Mounting Options and Guidelines Change: Added diagrams with mounting options.   MV Cloud Archive Change: Added note, that Cloud Archive licenses cannot be combined or stacked.   Meraki Vision Changelog Change: Added release notes for up to v1.7.7.   Switch Deployment and Staging Switch Stacks Using Tags to Manage Switches Assigning a Static IP Address Switch Ports Configuring Multiple Switch Ports on the Same VLAN PoE Support on MS Switches Configuring PoE on MS switches Determining the RSTP/STP Root Bridge on an MS Switch Network Spanning Tree Protocol (STP) Overview Configuring Spanning Tree on Meraki Switches (MS) Comparing Layer 3 and Layer 2 Switches MS Layer 3 Switching and Routing Layer 3 Switch Example MS OSPF Overview Port Schedules Configuring ACLs Viewing Your Switches Network Topology Switch Traffic Analytics Switch Port View Using the Cable Test Live tool Dashboard Alerts - Device Health VLAN Mismatch Alerts for Meraki Switches Loop and MAC Flap Detection on MS MS DHCP Servers Troubleshooting and Replacing a Faulty MS Switch Change: Added references to free online training courses on the Meraki Learning Hub.   Switch Stacks Change: Added section "Viewing Switch Stack Role info".   Unidirectional Link Detection (UDLD) Change: Added note that MS390 support UDLD running MS 15.0 and above.   MS Firmware Upgrades Change: Added note about expected behavior if monitor-mode Catalyst switches are in the same network.   Cloud Monitoring for Catalyst Eligibility and Requirements for Onboarding Supported Catalyst 9000 Series Switches (Cloud Monitoring) Cloud Monitoring for Catalyst Onboarding Change: Added 9200CX as eligible models for Cloud Monitoring.   Support Data Bundle (SDB) Change: Renamed Out-of-Band Log Fetching (OOB) to Support Data Bundle (SDB).   Creating and Deleting Dashboard Networks Change: Added statement that local device config (eg. static IP address) will not be copied, if new network is cloned from existing network.   Adding and Removing Devices from Dashboard Networks Change: Added note, that it'll take up to 2 minutes for footage to be deleted, when MV is removed from a network. ... View more

    Hi Community,   Below are the most important changes to our documentation between December 3rd and December 23rd:   Authentication Enhancements and New Dashboard Security Features  Change: New article.     Meraki Authentication Server Certificate Rotation - Feb 2023  Change: New article.  MV93 Series Installation Guide  MV63 Series Installation Guide  Gen3 Meraki MV Mounting Options and Guidelines  Change: New articles.     Cloud Monitoring Required Configuration  Cloud Monitoring Detailed Device Configurations  Change: New articles.     Cloud Monitoring for Catalyst Onboarding  Change: Added details about cleanup script, when removing a Cloud monitored Catalyst switch from Dashboard.     MV Cloud Archive  Change: Added newer models to Archive Specification table.     Meraki Vision Changelog  Change: Added release notes for up to v1.6.20.     MT14 Datasheet - Indoor Air Quality Monitor  Change: Corrected Ambient Noise sampling interval to 5 minutes.     Uninstalling Systems Manager and Removing Managed Devices  Change: Added new section about "Deprovisioning ChromeOS Devices".     SM Enrollment Authentication  Change: Updated "Azure as IdP" section.     Finding Logs for Android Troubleshooting  Change: Updated steps to access USB debug logs using ADB.     Android Enterprise Deployment Guide  Change: Added warning, that changing the email address used to bind the work domain, will require all Android devices to be re-enrolled.     Migrating from another Management Solution to Meraki Systems Manager  Change: Added note, that Apple does not support a way to sync iCloud after the initial setup to the section "After the Migration".     Using OSPF to Advertise Remote VPN Subnets  Change: Added notes about OSPF route advertisement and how to achieve symmetrical routing.     Splash Page  Change: Added simultaneous logins and self-registration options to Advanced Splash settings.     VLAN Tagging on MR Access Points  Change: Added section "Management Interface of Meraki APs" and adapted wording to match new Access Control page flow.     Enabling WPA2-Enterprise in Windows  Change: Added steps for Windows 10.     High Density Wi-Fi Deployments  Change: Added data rates and throughputs for 802.1ax.     Using the MS Live Tools  Change: Added new sections for Cycle Port and MTR.     MS Mid-Mount Mounting Brackets  Change: Added MS125 and MS210/225/250 to the list of compatible switches, as well as the SKU.     Multicast support  Change: Added notes, that Immediates Leaves are supported and default for MS.     OpenRoaming integration with Cisco Spaces  Change: Added section "Basic Troubleshooting".     Calculating BTU Consumption for Cisco Meraki Products  Change: Added MG.     Blocking or Rate Limiting iOS Updates  Change: Added new Apple URL to the blocking list.     Upstream Firewall Rules for Cloud Connectivity  Change: Added section "Upstream Firewall Rules for Cisco Threat Grid".     Meraki End-of-Life (EOL) Products and Dates  Change: Added MR20, MA-MNT-MR-H1 and MA-MNT-MR-H3 to EOL products.     Meraki Co-Termination Licensing Overview  Moving Devices between Organizations  Change: Edited sections for license movement, to reflect new license move tool for co-term.     License has already been claimed  Change: Added warning, that Meraki Support cannot disclose the license owner and current location, if requester is not an admin of the organization in which it is claimed.     Cisco+ Secure Connect - Sign on Once  Change: Added section "Admin Sync".     Mandarin Support Hotline  Change: Adapted for 2023 holidays. ... View more