I guess EA means Entra Application? But having an application for each org is kinda clunky and not user friendly.   To my knowledge, it is only possible to give one role per user. So this role needs to be present in all orgs the user should have access to. This role can have different permissions in different orgs.   BUT it seems completly impossible to "build" user permissions based on different roles. For each permission-org requirement, you need to create a new role. This could get complex if you have a lot of orgs and users. The reply url that needs to be configured points to a specific org. In order to work, the role needs to be defined in this org or the access would be denied. But if the user shouldn't have rights in this org you ether need to have a dummy org, containing all roles, or create a dummy network and give permission to it. This feels not like a clean solution. ... View more

Hi,   yes. The organization settings menu gives me another replay url for each organization. ... View more

Does anyone know if this is fixed in a newer version? Or is it safe so "disable" those packets with a firewall rule? Or is there another option to disable it? ... View more

SDWAN -> Routing -> BGP is not enabled. Because of the firmware version / MX Hardware i'm not even able to enable it.     ... View more

But isn't that the BGP traffic by the MX /AutoVPN itself? How does BGP even work then? In the same capture there are no IPv4 BGP packets. ... View more

I'm using 18.107.2 and i want to save the extra traffic those retransmission causes. Do you currently use another version and the issue is gone? ... View more

Thanks for clarifying. I agree that there might be some inconsistencies depending on caches or the exact timespan used but i'm always have a difference by factor 10, no matter if i use "last month" in Dashboard and add daily numbers, or if i only use "last day". Within a whole month, the exact timespan shouldn't matter that much. ... View more

Yes i will open a request for this.   Just one more question, do you have a working example? Or do you know which unit the API returns? The description says bytes, but the values i got from the API are roughly 10 times higher than that, what is presented on the page Organization -> Summary Report -> Select Network and last month.     res = dashboard.appliance.getNetworkApplianceUplinksUsageHistory(netid, t0="2024-08-01T00:00:00", t1="2024-08-31T23:59:59", resolution=86400) #resolution: daily #print (res) mSent = 0 mRecv = 0 for day in res:     for interface in day['byInterface']:         if interface['interface'] == 'wan1':             mSent += int(interface['sent'])             mRecv += int(interface['received']) print(f"Sent: {mSent/1024/1024}, Recv: {mRecv/1024/1024}")   I'm aiming to get a usage over the past month, so i'm using usage history function. But the 10 times difference also appears your function. ... View more

I know its possible for an appliance to get the data, but not for a MG. Additionally traffic between the MX and the MG like ARP and DHCP will count, i guess. ... View more

I have a blank page too. ... View more

Same question, i'm searching for an API that is able to detect master/master, or split brain status. The workaround mentioned does not work for this. ... View more

- Network cloning The mentioned device settings are not preserved when cloning a network. For example we wanted to use the notes field for additional Information for our support crew. We cannot use "network notes" because network notes do not exists when a template is bound to network - Warm-Spare Worth a try and would keep most settings. Sadly not working for non-mx devices   Thanks for your suggestions ... View more

I forgot to mention that it is configured in routed mode. The idea was, if the primary switch fails, WAN1 would fail and thus going over WAN2 and Switch 2. I guess it would work if there were no Port forwarding rule needed. ... View more

So there is no way with only one MX? [I agree that this is still a single point of failure] ... View more

Sadly i have not devices to test right now so i need to ask:   There is a difference between doing to upgrade by clicking "update know" and schedule an upgrade within the dashboard and schedule an upgrade via api?   So you say you did it via API and all of you MX started at the same time and were finished around 10 minutes later? ... View more

In firmware 18.208 release notes, there a few points mentioning cellular connectivity ... View more

  response = dashboard.organizations.getOrganizationConfigurationChanges(ORG_ID, total_pages=1)   does also not contain any port information ... View more