Are you referring to the SAML auth for SSIDs feature, or the EAP-TLS feature? ... View more

in VPN concentrator mode, how vMX forwards the traffic to Azure LAN ? it will just passthrough traffic to next hop  in cloud ? Is it safe to keep "passthrough (Layer 2 Hub kind of) device" with Public IP at perimeter ? ... View more

No.  The static route knows nothing about the state of the Azure VPN gateway and will always be up.   I have not used this, but there is a guide that shows setting up a VMX using BGP.  That is more likely to work. https://github.com/MitchellGulledge/Azure_Route_Server_Meraki_vMX    BUT - how will the third party know which return path to use?   I think the only bullet proof method would be to put your own MX (in VPN concentrator mode) into the 3rd party DC, so you can run AutoVPN end to end.  You would no longer use either the AWS or Azure VPN gateways in this scenario. ... View more

>How will "SM Sentry" determine that Machine is not non-corporate when it enrolls for the first time ? By checking first with Azure AD ?   Depends on how you configure it.  But if you have it setup for a user to authenticate against Azure AD, then that authentication will need to be completed before the client can finish enrolling.   >System Manager license is 80$/MR for 3 years, does it mean we can enroll as many Windows Device as possible ?   The Systems Manager price is per managed device, not per MR.  So if you have 100 Windows machines, you'll need 100 licences.     You could request a trial of Systems Manager to see it working for yourself. https://meraki.cisco.com/form/trial/  ... View more

Our MS355-48Xs with both PSUs installed are all okay after two months.  The rear rails have now arrived, but aren't yet installed... 🤞 ... View more