A year and a half later and I still get these alerts almost daily. ... View more

Similar setup to @ChristophW. We're trying to make sure that only internet-bound traffic is subject to content inspection and traffic going across the autovpn tunnel is ignored. I just wanted to confirm that this is the possible. Thank you.  ... View more

Usually for normal endpoints the typical 300s/5minute timeout is perfect and should never be changed. However routers usually talk to other routers and those connections are supposed to be rock solid so that is why Cisco routers use a much longer timeout on ARP entries. ... View more

agree , it really doesn't make much sense , please report this to your meraki reps so they fix in future releases. in the meantime , i will try to allow 53 / tcp for dns requests. before the deny all / allowed fqdns for layer3 rule in a group policy, to see if that helps. ... View more

I forgot to update my comment. It did not work for my native vlan. Had to add it too. It was a mistake from my side. ... View more

I think there is nothing new here. We gave up on a solution for the terminal-server. Our customer created a new vlan for different group-policies. How they want to handle it on the terminal-server i do not know that. Maybe a second port with the different ips or something. ... View more

The only way do deal with silent devices is by either configure the device to use DHCP or to set the access VLAN to the VLAN the device should be in, and make sure that control direction is only out in the access-policy. This way the traffic should be able to reach the device, and the return traffic should trikker authentication. ... View more