New articles: Workflows: January - March 2026 Change: New article.   AI PCAP Analyzer Change: New article.   Cisco Meraki Global Cloud Infrastructure Cisco Meraki Cloud – US, Europe, and Asia-Pacific Regions Cisco Meraki China Region Change: New articles.     SASE: Cisco SASE: Policy Change: Added "Limitation: At this time "Internal Networks" cannot be associated with Meraki Network Tunnel Groups."   Cisco Secure Access Meraki SD-WAN Configuration Guide Change: Added section "Multi-Uplink Active-Active IPsec".     Access Manager: Cisco Access Manager - Architecture And Example Use Cases Change: Updated certificate lookup fields: "Access Manager uses the configured identity field (Subject common name, Subject serial number, subject alternate name: DNS, Subject alternate name: RFC822) specified in the Access Manager CA Certificate configuration to perform a lookup against the Entra ID Username field for their group memberships."   Cisco Access Manager Licensing and Ordering Guide Change: Updated availability: "Cisco Access Manager is available globally except in Canada, China, India regional clouds and the Meraki FedRAMP cloud."; updated license activation time: "Claiming a free trial license or paid license will automatically transition you to the GA experience within 36-48 hours."   Access Manager Change: Updated license activation time: "It may take up to 48 hours after claiming your Access Manager licenses before you see the Access Manager menu item in your organization dashboard."; updated example policies in section "Access Rules".     Workflows: Beginner’s Guide to Workflows Change: Added "4. (Optional) Browse, explore, and install Cisco-validated prebuilt workflows from the Meraki Automation Exchange."; added "9. Explore more about Workflows with these resources."     Security & SD-WAN: Static Multicast Forwarding Change: Added "Admins can configure a maximum of 10 static multicast forwarding rules."   Border Gateway Protocol (BGP) Change: Added table "Well-known BGP Communities".   VPN Full-Tunnel Exclusion (Application and IP/URL Based Local Internet Breakout) Change: Added "From firmware 26.1.X or greater, the source can be defined either as a single IP address, CIDR/subnet, or VLAN."   FAQ: USB Modem Deprecation of Support Change: Added "When will support for USB modems officially end? All support for third-party USB modems on Meraki MX and Z appliances will be deprecated on June 30, 2026."     Switching: Cloud Configuration: Release Versions and Highlights Cloud Management with IOS XE SmartPorts Change: SmartPort Automation now available in Early Access.   Cloud Management with IOS XE Overview Change: Added "Port Profiles" to "Unsupported features on IOS XE 17.15.x with cloud configuration".   IOS XE image upgrades (Cloud Monitoring for Catalyst switches) Change: Added section "High level upgrade flow"; added "Maintenance window of 2-3 hours can be sufficient for upgrading to the target version including switch stacks. Plan additional time for rolling back to the previous version if any issues arise."   Upgrading Cloud-Monitored Switches to Cloud Management with Device Configuration Change: Added "Before proceeding, please review the IOS XE image upgrade documentation for Cloud Monitoring on Catalyst switches, including prerequisites and expected outcomes."; added "To ensure your switch upgrades successfully, verify that sufficient free flash memory is available on the switch. Learn more here."   Switch Stacks Change: Added "Switch stack management IP addressing. For MS model switches, such as the MS130 and MS150 series, each switch in a switch stack requires it's own management IP address. This means that a stack of 8 MS switches require 8 IP management addresses. The only exception to this requirement is the MS390 (see below). For Catalyst model switches, such as C9300, C9200 series switches, and MS390, the switch stack uses one single management IP address. This means that a stack of 8 Catalyst switches only requires a single management IP address."   Enable Cloud Management for Catalyst Switches with Device Configuration Change: Added "Currently RADIUS / TACACS are not supported and the user must be local."     Wireless: Campus Gateway Deployment Guide Change: Added "iPSK without RADIUS".   Wireless Roaming Health/Analytics Change: Added section "Map view for Bad and Suboptimal Roams".   AI-RRM Change: Updated availability "AI-RRM is available in the globally including US, EU, China, Asia, ANZ, Japan and Canada."   Wireless Client Isolation Change: Added "To allow for same subnet Bonjour print services, you will want to add the following MAC addresses to the exception list: IPv4 mDNS multicast address - 01:00:5E:00:00:FB. IPv6 mDNS multicast address - 33:33:00:00:00:FB."     Systems Manager: Deploying OS Updates with Systems Manager Change: Added "If there is a download in progress, the OS Update Status column will show the download percentage progress bar. If the update has completed downloading, it will display 'Downloaded'. If the update is in progress of installing, it will show 'Installing...". Lastly, if an update has completed installing, it is expected to display the date of the last installed OS Update."     Cameras: Meraki Vision Portal Changelog Change: Added release notes for up to v1.26.8.     Platform Management: AI Assistant for Networking Change: Added section "Case summary"; added section "Case submission".   Cisco Meraki Canada Region Cisco Meraki India Region Change: Added sections "Overview", "Dashboard and API Access" and "Data Centers and Redundancy".   Product Firmware Version Restrictions Change: Added CW9171 and CW9174.   Network Move / Network Portability Overview Change: Added section "Licensing Restrictions".   ... View more

  New articles: Meraki IPSec to AutoVPN Secure Access Manual Migration Guide Change: New article.   vMX Setup Guide for Megaport MVE Change: New article.   SASE Change: New category.     Access Manager: Access Manager Change: Added "It may take up to 24 hours after claiming your Access Manager licenses before you see the Access Manager menu item in your organization dashboard."     Secure Connect: Cisco Secure Connect Reserved IP Change: Updated data center name for Tokyo, JP: "NRT2".     Security & SD-WAN: Local DNS Service on MX Change: Updated prerequisite: "'Proxy to Upstream DNS' Enabled for the respective subnet".   Meraki and ThousandEyes Integration Troubleshooting Change: Added section "Account Unlinking".   Meraki MX ThousandEyes Configuration Guide Change: Added section "Unlinking an Account".     Switching: Switch Stacks Switch Cloning Troubleshooting and Replacing a Faulty MS Switch Change: Added "For Catalyst switches (including MS390) on CS firmware, it is required you power down the entire switch stack before adding / replacing a new member to avoid packet forwarding or configuration sync issues. This is only a requirement for stacks on CS firmware and not needed for stacks running IOS-XE firmware."   Cloud Management with Device Configuration Required Modifications Change: Added "All changes to configuration made by Dashboard will be logged in Organization > Monitor > Change Log and associated with the default administrator for the Dashboard organization."   MS210 Series Installation Guide MS225 Series Installation Guide MS450 Series Installation Guide Change: Added "Region-specific power cords are not included in the box. Order the appropriate power cord separately: MA-PWR-CORD-US, MA-PWR-CORD-EU, MA-PWR-CORD-UK, MA-PWR-CORD-CN, MA-PWR-CORD-IN, MA-PWR-CORD-BR, MA-PWR-CORD-TW, MA-PWR-CORD-AU, MA-PWR-CORD-AR, MA-PWR-CORD-JP".   Conversion from CLI-managed IOS XE Catalyst Switches to Cloud Management with Cloud Configuration Change: Added "C9500s cannot be onboarded as a stack. Please remove the StackWise Virtual configuration, reboot the switches, and onboard as standalone switches."   Cloud Monitoring End of Service - Transition to Cloud Management - Configuration Source: Device Enable Cloud Management for Catalyst Switches with Device Configuration Upgrading Cloud-Monitored Switches to Cloud Management with Device Configuration Change: Added "Help us improve your experience. Complete this quick survey to share your feedback on Cloud Monitoring or Configuration Source: Device."   Upgrading Cloud-Monitored Switches to Cloud Management with Device Configuration Change: Added "To onboard Catalyst switches using Cloud Management - Configuration Source: Device, select "Try new version" in the top right corner of the Inventory page to access the new onboarding experience."   Cloud-Managed EVPN Fabric Overview Change: Updated reserved IP address range: "Subnet (172.16.0.0/16) used for underlay, this subnet can be changed during fabric creation in the wizard."     Wireless: Low Power Mode and PoE negotiation Change: Added "Access points that are not operating on MR32.1+ firmware versions will continue to see previously available limited PoE information."; added "Supported APs".   Meraki Local Authentication - MR 802.1X Change: Added "RADIUS Failover and Recovery Logic"; added "Extended Local Auth Caching"; added "Operational Distinctions".   Seamless Meraki Integration with Cisco Spaces Change: Added "Only Meraki Organization administrators with full read and write access can activate the integration, per the Spaces setup documentation. Due to this, SAML dashboard administrators cannot action the integration process."   MR Meraki RADIUS 2.0 Change: Added section "RADIUS Accounting Device Profiling".   Sponsored Guest Change: Updated number of sponsor guest mail domains: "The maximum number of sponsor email domains that can be added at any one time is 50."   Adding Cisco 9800 Wireless Controller and Access Points to Dashboard Change: Added "Existing onboarded access points can be moved to another network only after changing the Access point assignment. Follow the guidelines for access points at Moving Devices between Networks. APs that are moved prior to changing the access point assignment will automatically move back to their original network."   WPA3 Encryption and Configuration Guide Change: Added "If a network has SuiteB - 192 Bit SSID configured on a lower number SSID, Dashboard will show an alert stating Wi-Fi 7 cannot be enabled because the following SSIDs do not meet the security requirements."     Cameras: Video Exports: Overview and Management Change: General article re-write.   Meraki Vision Portal Changelog Change: Added release notes for up to v1.26.7.     Systems Manager: Enrollment and Self-Service Portals for Systems Manager Change: Added "This portal is accessible via enroll.meraki.com to provide a method of manual enrollment."     Platform Management: Returns (RMAs), Warranties and End-of-Life Information Change: Added section "RMA Processing For Outdoor Cameras".   Blocking and Allowing Clients Change: Added "Placing a client on the "Block list" will block both LAN and Internet traffic."   Troubleshooting MTU Issues Change: Added "If your packet is traversing over an IPSec (non-Meraki) VPN, you will need to account for up to 100 bytes of overhead."   Mandarin Support Hotline Change: Added section "2026 Public Holidays for Mainland China".   Dashboard Alerts - Device Health Change: Added "Potential Hardware Fault".   Organization Summary Change: Added note regarding beta participants being transitioned back to the original Organization Summary page.   Clients List and Details Page Overview Change: Added "The same policy can then be applied to all the selected client(s). Note: The tool will default to "Normal" upon first opening as selected clients might have different existing policies applied to them."   Dashboard Alerts - Configuration Issues Change: Added "Bad IPv6 Assignment Configuration".   Manually Integrating Cisco Umbrella and Secure Access with Meraki Networks Change: Included Secure Access.   Clients List and Details Page Overview Change: Added "For cloud-managed C9000 in device configuration mode, client visibility requires a DNA Essentials license. Application visibility requires a DNA Advantage license".   Small-Form Factor Pluggable (SFP) and Stacking Accessories Change: Added "C8455-G2-MX: The compatible SFP modules on the C8455-G2-MX can be found in the Here.   Subscription Feature Tier Update Change: Added "Each API call can update up to 500 Networks." ... View more

  New articles: FIPS 140-2 Sunsetting Notice Change: New article.   Cloud EVPN Fabric Overview Cloud EVPN Fabric Installation / Lab Guide Change: New article.     Access Manager: Access Manager Change: Added basic troubleshooting details.   Cisco Access Manager Licensing and Ordering Guide Change: Added "Access Manager is not supported with the PDL licensing model."     Workflows: October-December 2025 Change: Added release notes for the "December 16, 2025" release.     Secure Connect: Cisco Secure Connect - Account Setup Troubleshooting Change: Added "Secure Connect is not currently supported in Meraki Dashboards hosted in Canada, India, or China".     Cellular Gateway: MG52/52E Technical Specifications Change: Added "Granite Multi-Carrier sim support"     Security & SD-WAN: Client-Tracking Options Change: Updated availability of Traffic Analytics (AVC) and Client Tracking (Device Tracking): "The following ports don't support Traffic Analytics (AVC) features on MS390 & C9300/L/X-M. 1. Ports with supported max speeds >= 25G. 2. Link Aggregation ports. Client Tracking (Device Tracking) is supported on all speed ports."   BGP routing over IPsec VPN Change: Added "Firewall Rules - TCP port 179 (BGP) allowed on Site-to-site outbound firewall rules under Site-to-site VPN page (if implicit deny is configured)."; added "As of 19.2 multi-hop is no longer required."   MX Security Audit Failed - Recommended Steps Change: Added "Scans typically pick this up because MX devices still respond to such requests, but do so by sending a NO-PROPOSAL-CHOSEN notification message in response, the standard way of indicating that the request has been rejected. There is no way for Meraki Support to modify this behavior, and any indications from security scans under this circumstance are false positives. Refer to https://datatracker.ietf.org/doc/htm...08#section-5.4 for more details."     Switching: Cloud Management with Device Configuration Required Modifications Change: Added "The MERAKI_TA flow monitor will not be attached to interfaces that have existing flow monitor configurations."   VRF Change: Added "A maximum of 20 VRF's are supported within an Organization."   Enable Cloud Management for Catalyst Switches with Device Configuration Change: Added "Catalyst 9500"; added "Minimum Required Software Version".   Templates for Switching Best Practices Change: Added section "Managing Scheduled Firmware Upgrades in Template Deployments".     Wireless: Low Power Mode and PoE negotiation Change: Added "Dashboard will only display data based on first negotiation at boot and does not dynamically update"; added section "Requirements"; added multiple examples of PoE display options.   Manual Channel Selection, Transmit Power Adjustment, and Antenna Configuration Transmit Power and Antenna Configuration Change: Added "Disabling or enabling a radio is considered a major configuration change, which will result in the AP reinitializing and causing brief downtime. Please keep this in mind when making this configuration change."   Cloud Monitoring for Wireless Design Guide Change: Added "17.15.1 and later is required for Cloud CLI and CLI terminal".     Platform Management: Client360 - Cloud Change: Added section "Application Information".   Meraki Assurance Overview Page Change: Added sections "Application Monitoring with Internet Insights" and "Application Monitoring with Active Application Monitoring".   Managing Dashboard Administrators and Permissions (Modernized View) Change: Added requirements for the First and Last Name fields (allowed lenght, invalid characters).   Information for Cisco Meraki for Government users Change: Added "Cisco Secure Client using Custom Server certificate" to "Supported Features"; added "Cisco Secure Client using Auto-generated Server certificate" to "Unsupported Solutions/Features".   FIPS 140 Devices and Firmware for Cisco Meraki Change: Added "Cisco's FIPS 140-2 modules will move to the CMVP NIST Historial list on January 5th 2026."   SNMP Overview and Configuration Change: Added "DES is not supported on switches running IOS XE 17.18.2+."   Energy Management Dashboard Change: Added sections "Before You Begin" and "Device Power Reporting".   Subscription Feature Tier Update Change: Added sections "Key Concepts & Considerations", "Updating Feature Tiers via Meraki Dashboard" and "Updating Feature Tiers via API".   Meraki and Catalyst Center Global Overview Change: Added "Dashboard Organizations with 20,000 total devices is supported. Catalyst Centers with 10,000 total devices managed is supported."; added "Catalyst Center Physical Appliances: Virtual Catalyst Center support coming soon.", added "Customers that would like to connect Catalyst Center to the Meraki Dashboard please fill out the Release Request Access Form here. This SMU enables the connection between Catalyst Center and Meraki Dashboard. The SMU can be installed on 2.3.7.10."; Updated required version: "Catalyst Center must be running 2.3.7.10 a with software maintenance update."   Support Data Bundle (SDB) Change: Added "CS 16+ and IOS-XE Native 17.15+". ... View more

  New articles: AP Zero Touch Deployment Change: New article.   Temporary changes to MFA, SAML, and security settings affecting some users Change: New article.     Security & SD-WAN: Content Filtering Change: Added "Because of maximum firmware restrictions, content filtering no longer functions on several End of Support platforms that cannot run MX17 or greater firmware".   Site-to-Site VPN Settings Change: Updated routing behavior between Auto VPN and IPsec VPN: "An MX Security Appliance can establish tunnels to both Auto VPN and IPsec VPN peers. An MX that builds tunnels to both Auto VPN and IPsec VPN peers will not route traffic between other Auto VPN peers and the IPsec VPN peers. The MX will send traffic to those VPN peers using the principles discussed above and in the MX Routing Behavior Document. However, an MX that builds tunnels to both Auto VPN and IPsec VPN peers, will only route traffic between the IPsec VPN peers and other Auto VPN peers if BGP routing over IPsec VPN is in use."   vMX and Azure vWAN Change: Removed references of "public preview". The feature is now GA.   Threat Protection Change: Updated section "Configuring Intrusion Detection and Prevention".   Static Multicast Forwarding Change: Updated section "Static Multicast API (requires 19.1+ firmware)".   AnyConnect Troubleshooting Guide Change: Added "Wildcard certificates are not supported at this time."     Switching: Cisco Meraki Local Status Page: MS Switches Change: Added "All new networks created after August 1, 2025 will require a password to be explicitly set for Local Status Page access. Click here to learn more."   Cloud Monitoring End of Service - Transition to Cloud Management - Configuration Source: Device Upgrading Cloud-Monitored Switches to Cloud Management with Device Configuration Change: Added "Cloud Monitoring End-of-Service Extended to March 31, 2026 : The end-of-service date for Cloud Monitoring has been extended by two months from January 31, 2026 to March 31, 2026, to allow customers additional time to complete their upgrade process. All other terms remain unchanged. Important note on C9500 series support: Configuration source: device (17.15.3+) does not yet support the C9500 series. Support for this model is planned and coming soon."   Configuring ACLs Change: Added "The maximum number of ACL's that can be configured in a single network is 128."; added "The VLAN field refers to the source VLAN for the traffic being evaluated and is processed on ingress."   Switch ACL Operation Change: Added "The maximum number of ACL's that can be configured in a single network is 128."   Catalyst 9300-M Datasheet Change: Added section "Cisco Optics Compatibility".   Upgrading Cloud-Monitored Switches to Cloud Management with Device Configuration Change: Added "DO NOT claim the device using the Old version of the Inventory page."     Wireless: Auto RF: Wi-Fi Channel and Power Management Change: Added section "Note on Event Log Changes: Transition from AutoRF to Cisco RRM".   OpenRoaming integration with Cisco Spaces Change: Updated prerequisites: "Pending Public Release of Open Roaming New Architecture".   Meraki Local Authentication - MR 802.1X Change: Added "MR31.2.6+ // MR32.1.4++".   Transmit Power and Antenna Configuration Change: Added "Currently this function is performed individually on the respective AP's from the Radio Settings page. At this time, we can not disable AP radios using an RF profile."   Meraki MR License Guide Change: Added "MQTT⁴"; added "AP Port Profiles (USB)⁴"; added "⁴MQTT & AP Port Profile with USB have been moved into the Meraki Advanced and Unified Advantage license tiers. Customers who have already enabled these features in their networks will continue to retain access."; added "²Intelligent capture and AI-RRM are currently at Early Access phase. There is no MR-ADV license required during the Early Access period."   AP Port Profiles Change: Added "USB AP port profiles require MR Advanced license tier.".   MR MQTT Data Streaming Change: Added "MQTT requires MR Advanced license tier."     Platform Management: Meraki Per-Device Licensing Overview Change: Added "If a customer would like to convert back to co-term from PDL, please open a case with Meraki Support to perform the conversion."   Resetting Cisco Meraki Devices to Factory Defaults Change: Added "Resetting the unit will clear the static IP address settings and local configuration of the device." to section "MR Access Points".   Subscription - MR Licensing Change: Added "MT Credits", added "1x MT License".   Subscription - MT Licensing Change: Added "We now offer 1 Free LIC-MT-E License with the purchase of each LIC-MR-A in subscriptions. Please not that this is not yet available for LIC-CW-A or EAs."   Packet Capture Overview Change: Added "Requirements for Cloud Monitoring for Wireless Access Points".   Meraki and Catalyst Center Global Overview Change: Updated Catalyst Center required versions: "Catalyst Center software update: Catalyst Center must be running 2.3.7.9 or 2.3.7.10."   ... View more

  New articles: Meraki Systems Manager EOL Migration FAQ: Meraki Systems Manager (SM) End-of-Sale Change: New articles.     Secure Connect: Cisco Secure Connect Sites - Meraki SD-WAN Integration Change: Added "It is important to detach all associated branch sites from a Secure Connect Hub for the automated cleanup process to occur. The Secure Connect Hub networks will be removed automatically after the last associated branch site is unenrolled. Removing Secure Connect Hubs or deleting their networks manually will not initiate the backend cleanup process and can produce unexpected behavior. Please contact support if you have detached all branch sites from a region and the Secure Connect Hub networks are still present. In most cases, simply re-enrolling a site and then detaching the site from the region will trigger the backend cleanup process and remove the region's Secure Connect networks."     Access Manager: Access Manager Change: Added Meraki Minute videos: "Systems Manager for EAP-TLS with Access Manager" and "Apple Configurator for EAP-TLS with Access Manager".     Security & SD-WAN: Border Gateway Protocol (BGP) Change: Added "Communities" to section "BGP Path Selection Attributes".   VPN Full-Tunnel Exclusion (Application and IP/URL Based Local Internet Breakout) Change: Added "Similarly, the source can be defined as a single IP address or CIDR/subnet from firmware 26.1.X or greater."; added "From firmware 26.1.X and greater, NBAR-based applications are supported for exclusion."   Client VPN Overview Change: Added "From 26.1.X firmware and greater, IKEv2 mode is available to support IKEv2 based VPN connections."   Security and SD-WAN (MX,Z) Features Directory Change: Added section "Beta Release- MX 26.1.X Firmware Features".     Switching: Cloud Monitoring for Catalyst Onboarding Change: Added "Catalyst 9300 and 9500 series switches require at least 2.5 GB of free space."   Upgrading Cloud-Monitored Switches to Cloud Management with Device Configuration Change: Added "By default, all eligible switches will be selected for removal after clicking Get Started."     Wireless: Low Power Mode and PoE negotiation Change: Added section "PoE Negotiation".   VusionGroup Electronic Shelf Labels (ESL) Integration with MRs Change: Added support for MR36H, MR76 and CW9162I-MR.   SoluM Electronic Shelf Labels (ESL) Integration with MRs Change: Added Wi-Fi 7 access points.     Cameras: Meraki Display Introduction Change: Updated sections "Getting Started" and "Authentication".   Meraki Vision Portal Changelog Change: Added release notes for up to v1.26.5.     Platform Management: Cisco Access Manager Licensing and Ordering Guide Change: Updated section "Transition from Early Access to General Availability": "Claiming a free trial license or paid license will automatically transition you to the GA experience within 24 hours."   Managing Firmware Upgrades Change: Added section "Reschedule a Firmware Upgrade for a Templated Network".   Organization Alerts and Alert Hub Change: Added "Ensure to utilize the Time Range filter when viewing alerts from the Alert Hub as an active alert may have originated before the Time Range filter currently selected."   Adaptive Policy Telemetry Change: Added "Available on MS390 and C9X00-M platforms" to sections "Adaptive Policy Hit Counters Live Tool" and "Adaptive Policy Custom ACL (SGACL) Logging".   Syslog Server Overview and Configuration Change: Added section "Encrypted Syslog".   Moving Devices between Organizations Change: Added "When moving Switch Stacks between Organizations all stacking information is lost. Therefore it is recommended to split the stack and rebuild it in the new Organization when moving Switch Stacks between Organizations."   Meraki End-of-Life (EOL) Products and Dates Change: Added "Cisco Meraki Systems Manager".   Managing Dashboard Administrators and Permissions (Modernized View) Change: Added "This can be achieved either from the Organization > Administrators OR Network-wide > Administrators page and the steps required will be as follows:"   Meraki Free Trials Change: Added "Trials should not be claimed in a production network. 25 days after the trial expires, trial equipment will be automatically removed from the claimed network. Cisco is not be responsible for any network interruptions or outages caused by using trial equipment in a production environment."; added "A trial will automatically be removed from your network 25 days after the trial has ended. Make sure to you either have contactedyour Sales Rep to buy the trial or have gone through the process to return by the free trial expiration date." ... View more

  New articles: Meraki and Catalyst Center Global Overview Change: New article.   Cisco Meraki Local Status Page: Overview Cisco Meraki Local Status Page: Security and SD-WAN Cisco Meraki Local Status Page: MG Cellular Gateways Cisco Meraki Local Status Page: Catalyst IOS XE Switches Cisco Meraki Local Status Page: MS Switches Cisco Meraki Local Status Page: MR Wireless Cisco Meraki Local Status Page: Campus Gateway Change: New articles.     Security & SD-WAN: Meraki and ThousandEyes Integration Troubleshooting Change: Added troubleshooting use case: "The Meraki Administrator account was deleted and the integration is non-functional".   MX Cold Swap - Replacing an Existing MX with a Different MX Change: Added "Adding or replacing an online/offline spare MX in the dashboard network will cause a brief connectivity loss on the primary MX due to the initialization of the HA configuration."     Switching: MS Switch Access Policies (802.1X) Change: Added "RADIUS defaults are: RADIUS authentication attempt = 3 times. RADIUS authentication timeout = 5 seconds. Please note that those values cannot be modified."   Cloud Configuration: Release Versions and Highlights Change: Added "UAC Automatic Fallback to Preferred Uplink (new with 17.15.4.1+)".   VRF Change: When running a traceroute to an IP address within a VRF, you must specify the VRF or else the traceroute will fail. Sourcing traceroute from a specific VRF can be done under the Switch Details, Tools page.   SecurePort Change: Added "As a best practice, MRs and MS should belong to the same network. If your APs and switches must belong to different networks please contact meraki support."   Enable Cloud Management for Catalyst Switches with Device Configuration Change: Added section "Prerequisites".   IOS XE image upgrades (Cloud Monitoring for Catalyst switches) Change: Updated Caveats/known issues: "Image upgrade is currently only supported on the following target versions of IOS XE:17.9.4a, IOS XE 17.9.5 or IOS XE 17.12.3, 17.15.3 and 17.15.4."   Cloud Monitoring Overview and FAQ Change: Added "Switches operating in "Configuration Source: Device" mode are not supported for cloud-initiated firmware upgrades".   VLAN Profiles Change: Added sections "Configuring the VLAN Database from the Local Status Page" and "Modify the active VLANs from the Local Status Page".     Wireless: Splash Page Details for Meraki MR Change: Added "25 Free SMS text messages. This feature is currently only available in the United States. If you are in a different country, SMS authentication is still a beta feature, and we cannot guarantee its reliability."   RF Profiles Change: Added "APs (like CW9166I and CW9178I) that have a flex radio that supports 5 + 6 GHz and are deployed in a regulatory domain that does not support 6 GHz the Flex radio will use 5 GHz and defaulting to Dual 5 GHz operation. The Flex radio settings will not be present in the RF profile when deployed in a regulatory domain that does not support 6 GHz. This will lock each AP and 5 GHz radio into a 5-hi and 5-lo mode of operation where only specific UNII bands and channels are allowed per radio."; added section "802.11ax".     Cameras: Meraki Vision Portal Changelog Change: Added release notes for up to v1.26.4.     Platform Management: Meraki Hardware and Software Onboarding Guide Change: Added section "How to Locate the Order Claim Key".   LLDP Support on Cisco Meraki Products Change: Added "Note that, while it's possible for multiple CDP or LLDP enabled devices to be connected to a single switch port, only a single CDP or LLDP entry is supported for display on the client info for a switchport, both in the Dashboard UI or via the API."   Organization Settings Change: Added "If two-factor authentication is enabled, users will need to contact support to assist in disabling 2FA." ... View more

  New articles: Client-Tracking in IOS-XE Change: New article.     Workflows: October-December 2025 Change: Added release notes for the "November 19, 2025" release.     Security & SD-WAN: SD-WAN Internet Policies (SD-Internet) Change: Added "SD-WAN Internet policies are processed in a top-down manner based on their configured order."   Content Filtering Change: Updated behavior on QUIC: "Content Filtering cannot inspect and block QUIC connections The payload of a packet is protected so the MXs cannot analyze the traffic to see the attributes that are normally used to filter traffic on an application level. Content filtering will not work for sites using the QUIC protocol. We recommend blocking UDP ports 80 and 443 using the Layer 3 firewall to force the use of TCP."     Switching: Cloud Management with IOS XE Overview Change: Added section "Before You Upgrade or Migrate: Key Considerations"; added section "UAC Automatic Fallback to Preferred Uplink"; added section "UAC Manual Fallback to Preferred Uplink".   MS Firmware Upgrades Change: Added section "Firmware Upgrade Visibility for Cloud-Managed IOS XE Switches".   IOS XE image upgrades (Cloud Monitoring for Catalyst switches) Change: Added "Switches operating in "Configuration Source: Device" mode are not supported for cloud-initiated firmware upgrades".   Conversion from CLI-managed IOS XE Catalyst Switches to Cloud Management with Cloud Configuration Change: Added "Full encryption IOS-XE is required for migration. No Payload Encryption (NPE) versions are not supported for this purpose. For example, the NPE version of cat9k_lite_iosxe.17.15.3.SPA.bin is unsupported. Furthermore, install mode is required, attempting to migrate using bundle mode will result in an error."   Cloud Management with IOS XE Overview Change: Added note regarding CS to IOS-XE pre-check alert: "Highly recommended: ICMP pings blocked".     Wireless: Microsoft Entra ID Integration with Splash Page Change: Added "The "Modern" splash theme is required for Microsoft Entra ID splash page integrations."   Regulatory Domains for MR, MX, and Z-Series (Legacy Version) Change: Updated behavior on manual overrides for MX and Z products: "To perform a manual override of the regulatory domain on MX and Z-Series products, the network will need to be an appliance-only network."   Cloud Monitoring for Wireless Requirements Change: Added section "Network Assurance and Device Classification Enablement".   Cisco Meraki Hosted Splash Page Variables Change: Added "In addition, a variable such as $MERAKI:NETWORK_NAME$ which is intended to return the value of the attached SSID, will only do so if splash for this client is assigned to a specific SSID, and not a VLAN on an MX (which can have multiple associated SSIDs). If the splash page is assigned to a specific SSID, this variable is substituted for said SSID as documented below."     Platform Management: Organization Alerts and Alert Hub Change: Updated section "Alert Severity".   VLAN Profiles Change: Added "VLAN Databse is an Early Access feature which requires enabling at Organization > Configure > Early Access."   Manually Integrating Cisco Umbrella with Meraki Networks Change: Added "Follow the same steps when integrating with Secure Access. The only difference is the scope of the API key. For Secure Access DNS integration create secure Access API key with scope of: Admin/Organizations : Read/Write  AND  Deployments/ Network Devices: Read/Write."   Moving Devices between Organizations Change: Added "Removing a camera from a network permanently deletes all footage from the device."   Meraki Co-Termination Licensing Overview Change: Added "This will need to be requested by either a full organization administrator or the shipping contact on the order."   Managing Dashboard Administrators and Permissions Change: Added "Additionally, administrator account emails are automatically converted to lowercase, regardless of how they were entered during sign-up."   Resetting Cisco Meraki Devices to Factory Defaults Change: Added "This behavior is specific to CW917x Access points".   Role-Based Access Control Custom Roles Beta Change: Article re-write.   Clients List and Details Page Overview Change: Added "Client tracking is not available for Configuration Source: Device C9300s without a DNA Advantage license."   Meraki Free Trials Change: Added "You can only claim a trial on the new Inventory page (Organization > Configure > Inventory). If you use the old page, you will see an error. To switch to the new page, click "Try New Version" at the top right. If you are not an organization admin, claim trials on the new Add Devices page."   Contacts for Webinar and CMNA, ECMS Equipment Change: Added "As of February 28, 2025, the CMNA promo renewal has been retired and automatic renewals will no longer occur."   Managing Firmware Upgrades Change: Added section "Staggered Upgrades".   Setting Custom DHCP Options Change: Added "Note that some DHCP options (like options 3 and 15 for default router and FQDN/domain name) cannot always be configured using the custom DHCP options field, but are available with a dedicated option on the page. Small variations exist depending on the variation of switch model and firmware."; added "Options 3 (default router) and 15 (domain-name) are available for Catalyst based switches running IOS XE 17.15.4 and later."     Cameras: MV13 Datasheet MV23 Series Datasheet MV33 Datasheet MV63 Series Datasheet MV73 Series Datasheet MV93 Series Datasheet Change: Added "WPA3-Personal (PSK / SAE)".     Sensors: MT30 Datasheet - Smart Automation Button Change: Added "While we aim for reliable operation, the performance characteristics of any connected system may be influenced by various environmental and network factors. We recommend customers use their best judgment, thoroughly evaluate the MT30's suitability for their specific operational requirements and conduct comprehensive testing to ensure it meets their desired outcomes, especially in time-critical use cases." ... View more

  New articles: Cisco 8000 Series Secure Routers Frequently Asked Questions (FAQ) Change: New article.   Changing the Theme in the Meraki Dashboard Change: New article.   Cisco Access Manager Licensing and Ordering Guide Change: New article.   Unified Branch Change: New article.     Secure Connect: Remote Access - VPN Access Posture Change: Added "Besides specific software versions we also can configure Latest. Selecting this option automatically allows for the latest version released of OS."     Access Manager: Access Manager Change: Complete article refresh.     Security & SD-WAN: C8455-G2-MX Installation Guide Change: Added "From factory only Port 11 (WAN 1) works for connectivity to the Dashboard. Once the device has connected to the Dashboard and downloaded its configuration both ports 10 and 11 will be operational."; updated note "Serial number/Cloud ID of the C8455-G2-MX is located on the product label on the bottom of the device or on the pullout tab located on the front of the device."   AnyConnect Load Sharing Change: Updated backup behavior: "When a Primary Server fails, AnyConnect client(s) that are currently connected to the Primary Server will be disconnected. In order to maintain redundancy, the next time a connection is made, the AnyConnect client(s) will automatically connect to the Backup Server."   SD-WAN and Traffic Shaping Change: Added "Multi-Uplink AutoVPN is not supported with Secure Connect and will result in Asymmetric traffic."     Switching: Using the Cable Test Live tool Change: Updated warning: "Use of this test may disrupt traffic on the port".   Unidirectional Link Detection (UDLD) Change: Added "Supported Cloud-Manged Catalyst Switches: C9300/L/X/LM, C9200/L, C9200CX, C9500, C9350 (all Cisco Catalyst inclusive of MS390)"; added "UDLD is supported on Catalyst Switching running CS15+"; added "UDLD Agressive mode is supported on Catalyst Switches running IOS-XE 17.15+"; added "Starting with Cloud-Native IOS XE 17.15+ Catalyst switches will implement UDLD agressive modes (Agressive-Alert, Agressive-Enforce) on fiber-only ports. UDLD will not be enabled for copper ports."; added "Prevents port-flapping and generally a best-practice for fiber links".   Upgrading Cloud-Monitored Switches to Cloud Management with Device Configuration Change: Complete article refresh.   Layer 3 Multicast and Troubleshooting Change: Added "Join/Prune messages are sent only if the next hop neighbor is a PIM neighbor."   Enable Cloud Management for Catalyst Switches with Device Configuration Change: Added "Uplink connectivity (from the switch to the cloud and not connectivity to the computer being used) must be via a front-panel port (not the management interface)."   Catalyst 9300L-M Datasheet Change: Added "Switching Capacity with Stacking".     Wireless: CW9176I / CW9176D1 Datasheet Change: Updated PoE information: "42.5 - 57 V 802.3bt / 802.3at (Low Power Mode) / 802.3af compliant (Low Power Mode)"; added "CW9176 models need 802.3bt, Class 6 that can supply 60W of power for full operation."   Microsoft Entra ID Integration with Splash Page Change: Added section "Client Roaming Behavior".   Campus Gateway Deployment Guide Change: Added "For CoA, ensure the RADIUS server is configured to use UDP port 1700 as the Campus Gateway expects the CoA packets to come on UDP port 1700. CoA requests will be dropped if the packets are received on a different port."     General Administration / Platform Management: Meraki End-of-Life (EOL) Products and Dates Change: Added MS210 and MS225.   Meraki Mobile App Beta - FAQ Change: Added FAQ "Can I manage my switches in the Mobile App and are there any differences from using the web browser?"   SNMP Overview and Configuration Meraki Device Reporting - Syslog, SNMP, and API Change: Added security recommendations regarding different SNMP versions.   FIPS 140 Configuration Guide for Cisco Meraki Change: Added "The FIPS 104-2 program with NIST is Sunsetting in September of 2026. We recommend that you update your networks to FIPS 140-3 compliant configuration settings before this date."   Dashboard Data Availability Change: Added "The data retention does not always coincide to a configurable view in the dashboard. For example, switch port usage is retained by Meraki for 2 months, whereas there is no option to view it in the dashboard past 1 month."; updated retention period for "Loacation Heatmap".   Enterprise Agreements Change: Added "Access Manager".   Using the Cisco Meraki Device Local Status Page Change: Added sections "MR32+" and "Sitey Survey".   Role-Based Access Control Custom Roles Beta Change: Added "This program is closed and no longer accepts applications." ... View more

  📣Announcement: Meraki support is currently reorganizing the documentation site to improve navigation. You may notice some changes to content topics and the home page. Existing URLs and bookmarks will automatically redirect to their new locations.     New articles: Control Mode of Unified Suites Change: New article.   Bringing MX and Zs Online That Have Been in Storage for a Long Time Change: New article.   Traffic Mirroring Change: New article.     Workflows: October-December 2025 Change: Added release notes for the "October 20, 2025" release.     Secure Connect: Cisco Secure Connect - ZTNA Network Prerequisites & Troubleshooting Change: Added section "Manage Your ZTNA Logs".   Cisco Secure Connect - Cloud Firewall Policy Change: Added section "Removing User Groups and Policy".     Security & SD-WAN: VPN Full-Tunnel Exclusion (Application and IP/URL Based Local Internet Breakout) Change: Added "As long as the FQDN matches what is configured in VPN Exclusions, the MX will exclude the traffic accordingly, regardless of whether the resolved IP is public or private."   AnyConnect Authentication Methods Change: Added "Wildcard certificates are not supported."   Unable to Connect to Client VPN from Some Devices Change: Added "Misconfigured VPN settings".   vMX Setup Guide for Microsoft Azure Change: Added "Password: A password required for Azure deployment. This is required for the managed app on Azure as a mandatory input variable, the vMX firmware doesn't use this password and is ignored. Please, feel free to use any default value, ex: MerakivMX1234!@"   Content Filtering Change: Added "Content Filtering cannot inspect and block QUIC connections. We recommend blocking UDP ports 80 and 443 using the Layer 3 firewall."   VPN Full-Tunnel Exclusion (Application and IP/URL Based Local Internet Breakout) Change: Added "The option to configure an exclusion rule is not available if a default route is learned over a Non-Meraki VPN tunnel with a BGP peering."; added "To set a wildcard that includes all subdomains of a domain, for example, all subdomains of 'google.com,' simply enter 'google.com' in the DNS Hostname text box. If you want to exclude a specific subdomain, enter only that specific subdomain, such as 'mail.google.com.'"   AnyConnect on the MX Appliance Change: Added section "Note on Certificates".   MX Routing Behavior Change: Added section "AnyConnect VPN".     Switching: Getting started: Cisco Catalyst 9300 Management with Meraki Dashboard Change: Added "Due to hardware limitations some C9300 models are unable to run firmware lower than CS16.9."   MS Switch Access Policies (802.1X) Change: Added section "Voice Auth"; updated "Disable port bounce".   Switch Stacks Change: Added section "Replacing a Stack Member for Device Configuration Source".   MS130 Datasheet MS130 Series Installation Guide Change: Added note that rackmount screws are included with the MS130-24, 24P. 24X, 48, 48P, 48X models.   MS Layer 3 Switching and Routing Change: Added "The configuration of routed ports is only available on the New Version of the UI".     Wireless: Hanshow Electronic Shelf Labels (ESL) Integration with MRs Change: Added Wi-Fi 7 access points.   Using the MR Live Tools Change: Added "Splash Pages".   AP Auto Locate Change: Added section "Ultra Wide Band Enhancements".   Meraki Local Authentication - MR 802.1X Change: Added "Local Auth is not currently supported with WPA3".   802.11k and 802.11r Overview Change: Added "MR 30 firmware has added support for 802.11r (excluding 802.11r Adaptive mode) to work with most WPA3 encryption options. Network administrators can now configure fast roaming on the network by navigating to Wireless > Configure > Access control > WPA encryption. Cisco Meraki supports Fast Transition with the following WPA3 modes: WPA3 Personal: WPA3 only. WPA3 Transition Mode: WPA3 Enterprise, WPA3 only."     General Administration: Managing Firmware Upgrades Change: Added FAQ "How would I bring my MXs and/or Zs that have been sitting on the shelf since we bought them years ago?"   Summary Report Overview Change: Added "'Usage over time' and 'Clients per day”'will display data according to the timeframe specified unless Network-Wide > Configure > General > Client privacy has been configured for a shorter timeframe. The Client Privacy feature is only available for organizations hosted in the Europe region of Meraki Cloud."   Troubleshooting MTU Issues Change: Added "If a peer has a reduced MTU, the AutoVPN MTU will automatically propagate across the AutoVPN environment and adjust to match the lowest detected value among all peers. Some examples of possible reasons for a reduced MTU include: Primary cellular uplink, PPPoE connection, ISP-assigned DHCP MTU."   Information for Cisco Meraki for Government users Change: Added "Workflows" to "Unsupported Solutions/Features".   AI Assistant for Networking Change: Added section "Automated Workflows".   AI Assistant for Networking - Product Updates Change: Added release notes for the "Oct 22, 2025" release.   Configuring DHCP Services on the MX and MS Change: Added "MX acts as a NTP Server on each one of its VLAN Interfaces."   Enterprise Agreements Change: Added "Systems Manager and vMX licenses can be configured in Dashboard if you have the appropriate suite." ... View more

  New articles: FAQ: Scheduled Maintenance Impacting Order and Device Claiming on the Meraki Dashboard Change: New article.     Access Manager: Access Manager Change: Added sections "Early Access", "Licensing", "Documentation", "Demos", "Configuration", "Access Rules", and Scale".     Secure Connect: Organization-wide Group Policy Change: Updated availability: "We are making improvements to this beta feature based on your feedback. During this time, no updates or changes will be available. The feature will return soon and be available as part of the MX 26.1+ (formerly 20.1) release going forward.​​​​​"     Cellular Gateway: MG52/52E Technical Specifications Change: Added Spark NZ to the list of Certifified Carriers; added Orange(France) to the list of Carrier Certification in Progress.     Switching: Cloud Management with IOS XE Change: Added "NEW! Experience the power of IOS XE 17.18.1 (beta) for Cloud Management with Cloud Configuration. This release expands more C9000 switching platform support (such as C9200/CX, C9300LM, and selected C9500H) and packs with power capabilities."; added "Requires IOS XE 17.18.1 +: C9200/CX, additional C9300, and C9500H".   Cloud Management with IOS XE Onboarding Cloud-Managed Catalyst switches to the Meraki Dashboard Change: Added reference to a free online training course.     General Administration: AI Assistant for Networking - Public Beta Change: Moved "Canada" from "Planned" to "Available Now"; updated reference to the "Cisco AI Assistant Offer Disclosure".   Splash Page Frequency Change: Updated splash behavior frequency: "If the attribute is not set, the SSID’s configured Splash behavior frequency is used as the default. There is a 90-day upper limit on the splash frequency." ... View more

  New articles: Overview and FAQ: Cisco Meraki SMS MFA Deprecation Change: New article.   FAQ: USB Modem Deprecation of Support Change: New article.     Security & SD-WAN: Threat Protection Change: Added "MX64 and MX65 devices on firmware releases prior to MX 18.1.7.13, and all other MX devices on firmware prior to MX 17.6 run versions of Snort 2 that will stop receiving updates after December 18, 2025. To ensure that such devices continue to receive updated rule sets, please ensure they have been upgraded to MX 18.1.7.13 or any higher major revision before then. In addition, any devices that reached their End of Support dates prior to Dec 18, 2025 will no longer receive further ruleset updates after this date. For more information, please refer to this Snort blog post."   Using Site-to-site VPN Translation Change: Added "1:Many VPN NAT cannot be configured for the AnyConnect Client VPN subnet."   MX Sizing Guide & Principles Change: Added "Maximum Routes".     Switching: Cloud Configuration: Release Versions and Highlights Change: Added "Firmware Upgrade Advisory for C9300L: Due to a known issue, 9300L switches will not upgrade when a network upgrades to IOS XE 17.15.4. If your network is scheduled for an upgrade from a CS firmware version to IOS XE 17.15.4 version, all other devices will upgrade as planned and C9300L models will remain on the current CS firmware version.  This measure is in place to prevent an issue where 9300L may experience a problem upgrading to 17.15.4, attempt to roll back to the original software image, and then fail to properly boot. Once this issue has been patched, the switches will upgraded normally."   Switch Ports Change: Added "This is NOT a supported configuration. For LAG to work properly, both devices should be configured to use LACP negotiation.".   Multicast Overview, Configurations, and Best Practices Change: Added "MS (and Dashboard-managed CS) switches do not currently support Fast Leave on IGMPv2."     Wireless: OpenRoaming integration with Cisco Spaces Change: Added section "Frequently Asked Questions".   CW9172I Installation Guide Change: Updated power consumption: "25.5W (802.3at required) for full operation of AP." and "The CW9172I needs 802.3at, (up to 30W from the switch, or 25.5W at the AP) for full operation of AP."     Cameras: Meraki Vision Portal Changelog Change: Added release notes for up to v1.26.0.     General Administration: Meraki End-of-Life (EOL) Products and Dates Change: Added "MV Gen 2 Cameras".   Organization Settings Change: Added "When an OAuth 2.0 integration is explicitly authorized, it operates independently of the login IP range restrictions. This means that applications using OAuth 2.0 tokens can access permitted resources from any IP address, regardless of the IP range controls you have configured for standard logins or API key usage. OAuth 2.0 integrations can be revoked at any time through the integrations page: Organization > Integrations > My Integrations."   AI Assistant for Networking Product Updates Change: Added "Sep 22, 2025" updates.   Cisco Meraki Canada Region Change: Updated feature availability: "Per-Device and Subscription Licensing, and Cloud Management for Cloud/Device Config/Hybrid Operating modes are currently not supported in the Meraki Canada Region."   Subscription - Licensing SKUs Change: Added LIC-MT-E. ... View more

  New articles: Cisco C9350 Smart Switch Onboarding Guide Change: New article.     Secure Connect: Cisco Secure Connect Reserved IP Change: Added "Cisco Meraki" to "Select domains from the following services".     SD-WAN & Security: Content Filtering Change: Updated availability: "The feature is still visible on the Meraki Dashboard for devices configured to run earlier firmware versions, but it is based on an older, 3rd-party classification system that no longer functions as of January 1, 2025."     Switching: Layer 2 Multicast and Troubleshooting Using the MS Live Tools MS and CS Firmware Features Directory Change: Added new live tool: Layer 2 Multicast Table.   Catalyst 9200L-M Datasheet Change: Added "**Stacking Limit for C9200L(-M): C9200L series models running Cloud Management with IOS XE 17.15+ support stacking configurations of up to 5 members. Please ensure your stacks for these models adhere to this limit. Exceeding 5 members may lead to unexpected behavior. This will be resolved in a future release."     Wireless: CW9172I Datasheet Change: Added "Idle power consumption"; added "Typical power consumption"; added note about actual power consumption may vary depending on AP usage.   WPA3 Encryption and Configuration Guide Change: Added "With MR 31.1.7, Wi-Fi 6E Access Points configured with WPA3 Transition mode will enable the 6 GHz radio."   OpenRoaming integration with Cisco Spaces Change: Added sections "Common Deployment Scenarios", "Architecture for OpenRoaming - New!", "Pre-requisites for Configuring Meraki OpenRoaming" and "Configuration Prerequisites on Meraki Dashboard".   Hanshow Electronic Shelf Labels (ESL) Integration with MRs Change: Updated supported USB ESL gateways: "Hanshow HS_C09978 and HS_C09979 gateways are supported with this integration."   MR LLDP/CDP field Change: Added "If an AP receives 4 CDP entries with higher priority (determined by the lower MAC address), LLDP entries will not be stored, resulting in no LLDP information being shown on the AP. If you do not see LLDP info on the AP, configure the switch to stop forwarding CDP packets and check if this resolves the issue."   Campus Gateway Deployment Guide Change: Added "Adding CGs to a network using the Meraki app is currently not supported."     Cameras: External RTSP Change: Added MV23, MV33, MV53 MV63, MV73, MV93 and MV84; added "MV84X can support 1 stream per imager."     General Administration: Best Practices for Meraki Firmware Change: Added "Firmware lock, is a temporary measure to be used mainly for testing purposes,  It is not meant for long-term usage/remain on the device outside the troubleshooting session."   Troubleshooting MTU Issues Change: Added "Contact Cisco Meraki support to adjust the MTU for Non-Meraki VPN and Client VPN tunnels, this requires MX19.1.11 or higher firmware."   Ways to Contact Meraki Support Change: Added section "Submit a Case through Help Center" and "Contact Support by Chat". ... View more

New articles: Pre-download with Local Firmware Fetch Change: New article.   Meraki Authentication Server Certificate Rotation - July 2025 Change: New article.   Assa Abloy Door Lock Integration with MRs Change: New article.   Client360 - Cloud Change: New article.   Table Summarization - Public Beta Change: New article.   AI Assistant for Networking Product Updates Change: New article.     Security & SD-WAN: Content Filtering Change: Added sections "Using the Catch-All Wildcard (*) in URLs" and "Patterns for Blocking or Allow Listing Specific URLs".   NAT Exceptions with Manual Inbound Firewall on MX Security Appliances Change: Added "The inbound firewall also affects services such as Client VPN (AnyConnect or IPSec) and rules must be configured towards the MX's uplink IP (or virtual IP, if in a warm-spare configuration using one) in order for those connections to be allowed."     Switching: FAQs: Migrate to Meraki management mode Change: Added "Please note, when migrating cloud born (-M) models, such as C9300-M, to CLI/DNA management, the Switch must have a valid Meraki license and a Purchase Order for a 3Y or greater DNA license must be opened. If SmartNet support contract is desired after migrating -M to CLI/DNA management, please open a support case to request a PID change."     Wireless: Cloud-Managed Hybrid Operating Mode for Catalyst Wireless LAN Controllers - What's New Change: Added CW9800H1, CW9800H2 and CW9800M and Cisco Wireless 9178I, Cisco Wireless 9176I/D1 and Cisco Wireless 9172I/H.   Cloud-Managed Hybrid Operating Mode for Catalyst Wireless LAN Controllers Design Guide Cloud-Managed Hybrid Operating Mode for Catalyst Wireless LAN Controllers FAQ Cloud-Managed Hybrid Operating Mode for Wireless Controllers LAN Controllers Requirements Change: Added CW9800H1, CW9800H2 and CW9800M.   Extending the LAN with a Wireless Mesh Link Mesh Deployment Guide Change: Added "Multicast protocols, including CDP, LLDP, VTP, etc., are not supported over a wireless mesh link."   Adding Catalyst 9800 Wireless Controller and Access Points to Dashboard Change: Added "If your organization is using per-device licensing you must use the Network-wide > Configure > Add Devices page to add IOS XE devices to an existing network."   Auto RF: Wi-Fi Channel and Power Management Change: Added section "6 GHz Channel Selection"; added section "AFC".   AI-RRM Change: Added "AI-RRM provides the best performance in the 6 GHz band, including dynamic channel width up to 320 MHz, and AFC SP (Standard Power) Transmit Power Control with extended power budget. In 5 GHz, AI-RRM can support channel width up to 160 MHz where the device is capable."     Cameras: Meraki Vision Portal Changelog Change: Added release notes for up to v1.25.3.   MV Smart Camera FAQ Change: Added "How do I opt in to Intelligence Training?"; added "How do I opt out to Intelligence Training?"; added "What is changing about Camera Intelligence Training?".     General Administration: Meraki End-of-Life (EOL) Products and Dates Change: Added "MS350-24-HW" and "MS350-48LP-HW".   Information for Cisco Meraki for Government users Change: Added "Campus Gateway" to the list of unsupported devices.   AI Assistant for Networking - Public Beta Change: Added "Cisco handles your data responsibly. See the Privacy Data Sheet."   ... View more

  New articles: AI Assistant for Networking - Public Beta Change: New article.   Quick Walls Change: New article.     Security Appliance: Z4 Datasheet Change: Updated Security Throughput to 500 Mbps.   MX95/105 Datasheet Change: Updated Stateful firewall throughput for MX95 to 3 Gbps; updated Maximum VPN throughput for MX105 to 3.5 Gbps.   MX250 Datasheet Change: Updated multiple throughput values for both MX250 and MX450.   vMX Comparison Datasheet Change: Added NAT Throughput and NGFW Throughput.   MX Sizing Guide & Principles Change: Updated / added multiple throughput values.   Using Layer 3 Firewall Rules Change: Added "Layer 3 Firewall rules do not apply to traffic destined for locations across both AutoVPN and Non-Meraki VPN. To configure Layer 3 Firewall rules for VPN destined traffic, refer to this KB."     Switching: Catalyst 9300-M Datasheet Change: Added "Contact your Meraki partner or reseller to confirm if a power cord is included with your order."   SmartPorts Changes: Added section "Removing a Port Profile".     Wireless: Campus Gateway Datasheet Campus Gateway and MR - Wireless LAN Change: Added references to free online training courses on the Meraki Learning Hub.   Wireless (MR) Firmware Features Directory Change: Added Wi-Fi 7 access points.   Meraki Auto RF: Wi-Fi Channel and Power Management Change: Added "Reason value 6 will be displayed for any changes triggered with AutoChannel."   Meraki MR License Guide Change: Added "Cisco Meraki deprecated the ability for customers to automatically integrate Cisco Umbrella (Umbrella) with their Meraki organizations on April 26, 2025. Therefore, this functionality is no longer included in the MR Upgrade and MR Advanced license types."   RADIUS Proxy for WPA2-Enterprise SSIDs Change: Added "RADIUS CoA support is disabled. If enabled, then Dashboard RADIUS proxy cannot be configured."     Cameras: MV Cloud Connectivity and Firewall Requirements Change: Added sections "Example Firewall Info" and "Exposed interfaces at Factory Default State".     Sensors: MT Automation Builder Change: Added "When adding SMS Recipients you must add the '+' sign and country code, then followed by the rest of the number (for example, +61123456789)."     General Administration: Getting started on Packet Captures with Wireshark Change: Added "IPsec VPN - Captures all of the Non-Meraki VPN traffic."   Meraki End-of-Life (EOL) Products and Dates Change: Added MG51 and MG51E; updated end-of-sale date for MS350.   Throughput test to the Cisco Meraki Dashboard Change: Added note if a throughput test result is 0 Mbps.   Creating and Deleting Dashboard Networks Managing Multiple Networks with Configuration Templates Change: Added "To enhance the security of customer networks, the encryption settings for the default SSID (enabled by default) have been updated starting Jun 10, 2025. When a Meraki administrator creates a new combined or wireless-only network, the default SSID's encryption setting will now use Password (WPA2 only) instead of Open (no encryption)."   Product Firmware Version Restrictions Change: Added "Review the release notes under the Legacy products notice section to find the firmware version your network is using. Compare the current firmware version against the older firmware these nodes will run. For example, an MX84 appliance configured to run MX 18.211.6 will instead run MX 18.107.13."   Meraki Free Trials Change: Added "Trials cannot be claimed on organizations using Subscription Licensing. For more information, see the Subscription - Licensing Overview article."   Meraki Licensing FAQs Change: Added "The Science behind Licensing Co-Termination FAQs". ... View more

  New articles: Campus Gateway and MR - Wireless LAN Campus Gateway Datasheet Campus Gateway Installation Guide Campus Gateway Deployment Guide Change: New articles.   MT40 Energy Usage Report Change: New article.     Secure Connect: Cisco Secure Connect - Account Setup Troubleshooting Change: Added section "Organization with EA licensing has Secure Connect Region networks with warning about 'Grace Period' and 'Disabled in ## days'".     MX: MX Warm Spare - High-Availability Pair Change: Added "While DDNS is enabled, if all Primary MX WAN links fail but cellular is still active, DDNS will resolve to the Primary MX cellular uplink IP. It is recommended that you perform a swap of the Secondary MX to the Primary to prevent any issues with DDNS updates while the original primary MX WAN links are offline."   Meraki MX/Z Security and SD-WAN Licensing Change: Added "The vMX only supports Essentials and does not support the Advantage tier. Essentials tier will support all the Advanced Security features noted here."     MR: AP Auto Locate Change: Added "CW9172I (GPS capable)".   Configuring RADIUS Authentication with WPA2-Enterprise Change: Added section "Enabling Client Exclusion Policies (MR 32.1.X Enhancement)".   Change of Authorization with RADIUS (CoA) on MR Access Points Change: Added section "MR 32.1.X (802.11r) Fast Roaming + CoA Support".     MV: MV Smart Camera FAQ Change: Added "MV People Detection FAQs", "MV Object Detection FAQs", "External RTSP" and "Configuring Camera FOVs on a Floor Plan FAQs". ... View more

  New articles: Local DNS Service on MX Change: New article.     Secure Connect: How to Contact Cisco Secure Connect Support Change: Added "For the Secure Connect Support button to appear in Umbrella, you must begin your journey in the Meraki dashboard. If you log in directly to Umbrella dashboard, this button will not appear."     MX: Configuring RADIUS Authentication with Client VPN IPsec Change: Added "If utilizing Microsoft RADIUS Authentication with Azure MFA, it is advisable to adjust the RADIUS timeout value on the AD server to 300 seconds. Timeouts related to this issue will present a reason code 9 in the Windows event log." Security Center Change: Added "You can toggle a rule to be Whitelisted here. This will apply to all Networks in the Organization."     MS: SmartPorts Change: Updated "Requirements, Guidelines, and Limitations": "Automations and Organization-wide Profiles do not support Network-level configuration components such as Access policies."   MS Switch Access Policies (802.1X) Change: Added "RADIUS Testing should be enabled for RADIUS Monitoring to work."     MR: MR Meraki RADIUS 2.0 Change: Added "Adding or removing tags to an AP will cause the RADIUS SSID(s) to restart, resulting in wireless clients being disconnected."     MV: Meraki MV Cameras - Introduction and Features Change: Updated HDR availability: "Meraki MV cameras use HDR in the generation 2 (MV12, introduced 2018) and later cameras, excluding MV2 model."   MV Smart Camera FAQ Change: Added "Vision Portal: Event Search FAQs"; added "Third Generation MV Cameras: Overview and Specifications FAQs".   Meraki Vision Portal Changelog Change: Added release notes for up to v1.24.5   MV Cloud Archive Change: Added "The Meraki Cloud connects with AWS to authenticate MV cameras for cloud archiving. It sends a pre-signed, secure URL to the cameras through an encrypted tunnel. The cameras use this URL to upload video directly to AWS over a TLS connection for backup:"     General Administration: Meraki Co-Termination Licensing Overview MS130 Datasheet Change: Updated availability for the MS130 Advanced License: "MS130 Advanced is not available in a 7 and 10 year term."   Dashboard Data Availability Change: Updated "Environmental Telemetry" to 2 years.   Resetting Cisco Meraki Devices to Factory Defaults Change: Added section "Catalyst Series Switches (MS390, C9300/X/L)".   Meraki End-of-Life (EOL) Products and Dates Change: Updated the End-of-Sale Date and End-of-Support Date for MG21-HW-WW and MG21-HW-NA.   Product Firmware Version Restrictions Change: Added CW91721, CW9176I, CW9176D1 and CW9178I.   Information for Cisco Meraki for Government users Change: Added "Simple Network Management Protocol (SNMP)" to section "Unsupported Solutions/Features".   Configuring SAML Single Sign-on for Dashboard Change: Added "Appending any arbitrary string such as '/SSO' to an email address can be used to ensure that SAML users have unique usernames that do not conflict with existing Dashboard administrator or Meraki Authentication accounts."   ... View more

  Secure Connect: Cisco Secure Connect Reserved IP Change: Added additional guideline #5.   Cisco Secure Connect - Cloud Firewall Policy Change: Added "IPS service does not inspect traffic matched by the private rules."     MG: IPv6 Support on MG Change: Added MG52 and MG52E.     MX: Threat Protection Change: Added "Allow list URLs entries support trailing wildcards (e.g., http://meraki.cisco.com/*)."   Meraki and ThousandEyes Integration Troubleshooting Change: Updated workaround for issue "The MX sends test traffic sourced from the 6.0.0.0/0 IP Address range": "Change the MX mode to NAT and add a VPN-enabled VLAN."   Cisco XDR FAQ Change: Added FAQ "Which models MX/Z support this integration?"   IPv6 Support on MX Security & SD-WAN Platforms - Core Fundamentals Change: Added Z4 and Z4C.   Troubleshooting MTU Issues Change: Added "MTU adjustments do not affect Non-Meraki VPN and Client VPN tunnels."   Site-to-Site VPN Settings Change: Added "MX-Z appliances in Passthrough or VPN Concentrator mode cannot be used to initiate interesting traffic into the tunnel. Interesting traffic would need to be initiated from a client behind the Passthrough appliance."     MS: Cloud-Native IOS XE Connect Hybrid Operating Mode Catalyst Switch to Dashboard Hybrid Operating Mode for Catalyst Cloud-Managed Switches - Overview Change: Added "If you do not yet see a notification in Dashboard announcing the availability of hybrid and cloud operating modes, your organization is not yet enabled. Any devices added to your organization via Dashboard will be fully cloud-managed (cloud operating mode)."   Connect Hybrid Operating Mode Catalyst Switch to Dashboard Change: Added "Organizations using per-device licensing must use the network-wide add devices page."; added "Only the new version of the Inventory page is supported. If you see the option to Try New Version, you must select this to continue."   Dynamic ARP Inspection Change: Added note "The Allow listed snoop entries is expected to be empty on normal operation. The IP-to-MAC bindings learned via the DHCP Snooping table will not appear. Once a client has been manually moved or added it will populate."   MS NetFlow and Encrypted Traffic Analytics Change: Added "SNMP polling is enabled by default in the latest Cisco's Secure Network Analytics (SNA) version. SNMP polling on SVIs is not supported on Catalyst based (MS390/9300) switches running CS-based firmware."   MS Device Health Change: Updated specific devices models.   Switch Stacks Change: Added "We strongly recommend you power down the entire switch stack before adding a new member to avoid packet forwarding issues. Power on all members simultaneously once the stack is rebuilt"     MR: Low Power Mode on Cisco Switches Change: Added "For Low Power Mode situations seen on APs connected to Cisco Catalyst switches, ensure LLDP is enabled on the switch. For instructions, you can consult the section How to enable LLDP in a Cisco Catalyst Switch."   Meraki Health - MR Access Point Details Change: Added "Both Onboarding and Performance metrics are calculated based on the past 2 hours, regardless of the timeframe selected in the dropdown menu."   RF Spectrum Page Overview Change: Updated based on the new version of the page.   Wi-Fi Personal Network (WPN) Change: Added Wi-Fi 7 access points.   Cloud-Managed Hybrid Operating Mode for Catalyst Wireless LAN Controllers Cloud-Managed Hybrid Operating Mode for Wireless Controllers LAN Controllers Requirements Cloud-Managed Hybrid Operating Mode for Catalyst Wireless LAN Controllers Dashboard Provisioned Configurations Cloud-Managed Hybrid Operating Mode for Catalyst Wireless LAN Controllers FAQ Cloud-Managed Hybrid Operating Mode for Catalyst Wireless LAN Controllers Design Guide Quick Start Guide: Cloud-Managed Hybrid Operating Mode for Catalyst Wireless LAN Controllers Change: Renamed from "Cloud Monitoring for Catalyst Wireless".   Cloud-Managed Hybrid Operating Mode for Wireless Controllers LAN Controllers Requirements Change: Added minimum required software releases.     MV: Meraki Vision Portal Changelog Change: Added release notes for up to v1.24.4.   Video Retention Change: Added "MV84X cameras do not support standard retention and default to Smart Retention."; added MV53X.   Restricting Access to Cameras Camera and sensor-only admin (IoT Admin) Change: Added "Camera and Sensor role name(s) created do not need to be created under Organization > Configure > Administrators > SAML administrator roles."     General Administration: Ways to Contact Meraki Support Change: Added section "Legacy Version of Case Submission in Support Center".   Support Center Case Submission Understanding Case Severity Levels Change: Updated information about the availability of the new case submission experience.   Meraki Dashboard Organizational Structure Creating and Deleting Dashboard Networks Change: Added "Network Scope General Recommendation: One network per physical location or branch".   Packet Capture Overview Change: Added "IOS XE 17.15" for Intelligent Capture; added "Intelligent Captures are enabled by default for networks that are matching the requirements."   SNMP Overview and Configuration Change: Added section "SNMP Timeouts"; added "There are two distinct places to configure this in your Meraki dashboard. These settings operate independently from each other and can be enabled and disabled separately if desired." incl. the locations to configure them.   Returns (RMAs), Warranties and End-of-Life Information Change: Added "Please note some Cisco Meraki devices do not need to be returned and can be e-wasted. When looking at the RMA in PRR, if there is no 'Return' tab, the device does not need to be returned. Cisco Meraki Support can confirm this for you if you cannot view the RMA in PRR. You can engage the Cisco "Takeback and Reuse" program. Please note you will need to log in with your CCO ID."; added "After you submit the RMA, you will receive an RMA number and be directed to Cisco’s Product Online Web Returns (POWR) tool to schedule carrier pick up or print a pre-paid return label to return the trial."   Subscription - MX Licensing Change: Added "IPv6 Support", "Layer 7 (Application) Enforcement powered by NBAR", "Traffic Shaping Enforcement powered by NBAR", "Catalyst + Meraki SD-WAN Interconnect  (eBGP over IPsec)", "IPsec SSE tunnel monitoring, redundancy, and DIA", "Cisco XDR Integration", "SD-AVC Integration - Smart Application Updates Delivered via the Cloud", "DH15 and DH21 support in IPsec" and "Trusted Traffic Exclusions powered by NBAR".   Meraki MX/Z Security and SD-WAN Licensing Change: Added "Catalyst + Meraki SD-WAN Interconnect  (eBGP over IPsec)", "IPsec SSE tunnel monitoring, redundancy, and DIA", "Cisco XDR Integration", "SD-AVC Integration - Smart Application Updates Delivered via the Cloud" and "DH15 and DH21 support in IPsec".   Information for Cisco Meraki for Government users Change: Added sections "Support Coverage & Hours" and "Severity Levels".   Client Details Page Overview Change: Updated OS classification: "OS - Windows, Mac OS X, Android, iOS, etc (this is based on HTTP user agent strings and DHCP)".   Organization Settings Authentication Enhancements and New Dashboard Security Features Change: Added "There is also a setting to increase the minimum password length to 12 characters instead of the default minimum of 8 characters."   Information for Cisco Meraki for Government users Change: Added "Email alert notifications via SMS text message". ... View more

  New articles: CW9172H Installation Guide Change: New article.   MV84X Installation Guide MV84X Mounting Options and Guidelines Change: New articles.     MX: AnyConnect on the MX Appliance Change: Updated reset / replacement behavior regarding certificates: "A factory reset or device replacement (RMA) will generate a new private key for that MX. As such, a new CSR will need to be generated, signed and the resulting certificates will need to be re-added under Security & SD-WAN > Configure  > Client VPN  > AnyConnect."   MX Firewall Settings Change: Added "Firewall rules only apply to traffic passing through the firewall. They don't affect traffic originating from, or terminating at, the firewall itself. For example, LDAP binds and client VPN connections are not affected by firewall rules. Also, MX VLAN interfaces and MX WAN IP addresses are not considered when the firewall evaluates Allow or Deny rules."     MS: Connect Hybrid Operating Mode Catalyst Switch to Dashboard Change: Added "This rollout happens in phases, and availability may vary. If the hybrid operating mode option is not visible when adding switches, it will be available soon. We are working to bring this feature to all eligible organizations."; added "When adding stacked switches, only the active member of the stack should be selected to add to network."   Switch ACL Operation Change: Added C9300-M: "The VLAN qualifier is not supported on the MS390 and the C9300-M."   Catalyst 9300X-M Datasheet Change: Updated 40 Gbps SFP modules.   Packet Captures and Port Mirroring on the MS Switch Change: Added "Meraki managed and monitored Catalyst switches".     MR: Cloud-native IOS XE Wireless Controllers Design Guide Change: Added "After the WLC and APs are added to the network, you can review the access point assignation that was originally selected by navigating to Organization > Monitor > Change log. You can filter the change log using the WLC's cloud ID and the label 'claim devices'."   Using Tags to Manage MR Access Points Change: Added "Adding or removing a tag from an AP that is broadcasting SSIDs configured to use 802.1X with my RADIUS causes the SSIDs to restart on that AP and clients will be disconnected. Non-802.1X SSIDs remain unaffected."     MV: Video Walls Change: Added MV23 and MV73.   Smart Retention Change: Added MV84X; added "MV84X only supports Smart Retention operation."     General Administration: Configuring DHCP Services on the MX and MS Change: Updated behavior for mandatory DHCP: "If you have mandatory DHCP enabled, fixed IP assignments may not function properly. If the WAN appliance is rebooted, those clients won't be able to pass traffic until a new full DORA transaction is detected."   Organization Summary Change: Added "Only dashboard connectivity-related alerts are reflected on this page, such as Device(s) VLAN Mismatch, Misconfigured DNS and Bad IP Assignment Configuration, offline devices etc. In comparison, the Organization > Alert's page, provides more granular view - Organization Alerts and Alert Hub."   MT - Sensors MV - Smart Cameras Best Practices in Viewing MV Video Video Walls Vision Portal: Introduction Vision Portal: Event Search Vision Portal: Attribute Search Change: Added references to free online training courses on the Meraki Learning Hub. ... View more

  New articles: Cisco Secure Access Meraki BGP Configuration Guide Change: New article.   Onboarding Cloud-Managed Catalyst switches to the Meraki Dashboard Change: New article.   Cloud CLI for Cloud-Native IOS XE Change: New article.   Operating mode claim to network API endpoint Change: New article.   Hybrid Operating Mode for Catalyst Cloud-Managed Switches - Overview Connect Hybrid Operating Mode Catalyst Switch to Dashboard Upgrading Cloud-Monitored Switches to Hybrid Operating Mode Hybrid Operating Mode Switches Configuration Hybrid Operating Mode for Cloud-Managed Catalyst Switches FAQs Terms and Conditions for Hybrid Operating Mode on Cloud-Managed Change: New articles.   Meraki SD-WAN Secure Access Design Guide Change: New article.   vMX X-Large Relaunch FAQ Change: New article.     Secure Connect: Cisco Secure Connect - Cloud Firewall Policy Change: Added "Active Directory user groups are not supported to be used as an source identity."   Meraki Cloud Authentication (Cisco Secure Connect Embedded) Change: Added deployment steps 14 and 15.     MX: Configuring VLANs on the MX Security Appliance MX Layer 2 Functionality Change: Added "Modifying the enabled/disabled status of any LAN interface will reset the WAN interfaces, resulting in a connectivity loss on both Internet uplinks for up to 2 minutes. To minimize disruption, follow best practice and only make changes during a planned maintenance window."   MX Warm Spare - High-Availability Pair Change: Added "For WAN2, the last octet of the virtual MAC will increment by 1."; added "If WAN interfaces are configured to use virtual uplink IPs, this will be the same as the WAN1 virtual MAC."   vMX NAT Mode Use Cases and FAQ Change: Complete article update.   AnyConnect on the MX Appliance Change: Added "A factory reset or device replacement (RMA) will need the custom certifications to be re-added under Security & SD-WAN > Configure  > Client VPN  > AnyConnect."     MS: Catalyst 9300X-M Datasheet Change: Added "The C9300X-NM-2C-M modules will operate at 40Gbps with software support in CS17 firmware. For 100G operation, IOS-XE 17.15+ is required."   Catalyst 9300-M Datasheet Change: Added "The SFP28/QSFP28 modules will be orderable March 2024 with software support in CS16.7. 25Gbps Dashboard support is slated for CS17 firmware. 25Gbps optics can be used in CS16.8, but should be considered 'Beta'."   Cloud Operating Mode for Catalyst Cloud-Managed Switches Overview Change: Added sections "Key highlights" and "Available Firmware and Migration Paths"; updated sections "Prerequisites" and "Unsupported features on IOS XE 17.15.3"; added "9200L stacks of 5 or more switches running IOS XE 17.15.3 or earlier versions may encounter an issue migrating to cloud operating mode or upgrading firmware. For stacks of 5 or more 9200L switches, it is recommended to wait for IOS XE 17.15.4."   Cloud-Native IOS XE Change: Added sections "Cloud Operating Mode", "Hybrid Operating Mode" and "Cloud CLI".   MS250 Overview and Specifications Change: Updated "Power Load (idle/max)" for MS250-48LP: "25 / 480 W".     MR: Wireless VoIP QoS Best Practices Change: Added section "Service Provider WiFi".   Cloud-native IOS XE Wireless Controllers Requirements Change: Added "17.15.1 and later is required for Cloud CLI and CLI terminal."   Adding Catalyst 9800 Wireless Controller and Access Points to Dashboard Change: Added "Cisco Catalyst Wireless LAN Controller can register with your Meraki Dashboard since firmware version IOS XE 17.12.3 or 17.15.1 or later."; added "By default, all access points joined to the wireless controller when adding the wireless controller to a Network will be added to the same network as the wireless controller."; added section "Access point network assignment".   Cloud-native IOS XE Wireless Controllers Change: Added section "Cloud CLI".   Meraki Dashboard Catalyst Wireless - What's New Change: Added "Simplified onboarding and AP network assignment"; added "Cloud CLI".   Change of Authorization with RADIUS (CoA) on MR Access Points Change: Added "If your deployment uses CoA ensure you enable Cisco ISE even if ISE is not used, otherwise audit-session-id is not included and the CoA exchange may not work."     SM: Systems Manager Supported Operating Systems Change: Updated "Older Operating Systems": "Android versions 5 - 9 (these versions can no longer be enrolled, existing enrollments will have limited functionality)".     General Administration: Meraki Assurance Overview Page Change: Added "This is in active tiered rollout, and is being rolled gradually on a percentage basis".   Using Layer 3 Firewall Rules Change: Added "You can specify a range of ports, such as "1024-400" in group policy layer 3 firewall rules. However, listing individual ports separated by commas, such as "80,443" is not supported."   Upstream Firewall Rules for Cloud Connectivity Change: Added "If any Meraki devices fail firewall tests outlined in the rules above, you can download a CSV file with details of the nodes and the tests that failed."   Root Cause Analysis (RCA) - Alert Based Workflows Change: Added "Note that the alert is currently not generated in the following scenarios: APs detect that the connected switch port is a Fast Ethernet port via LLDP/CDP. AP models that are unable to upgrade to the latest firmware versions."   Cisco Meraki Firmware FAQ Change: Updated timeframe of email notification: "If an upgrade is scheduled, the network administrators will receive an email notification approximately one to two weeks prior to an upgrade."   Adaptive Policy Overview Change: Added "Cloud Native IOS XE Switches: 17.15.2+ (model support is expanding and covered here)".   Configuring RADIUS Authentication with a Sign-On Splash Page Change: Added "NAP was deprecated in Windows Server 2012 R2 and removed from Windows Server 2016. This NPS server configuration is an example only. If you need additional support, make sure you consult with your Microsoft Specialist and check Microsoft's current official documentation on Network Policy Server (NPS)." ... View more

  New articles: Support Center Case Submission Understanding Case Severity Levels Change: New articles.   Modem Firmware Versions Change: New article.     Access Manager: Access Manager Certificate Based Authentication - EAP-TLS with Entra ID Lookup Access Manager Username/Password Authentication - EAP-TTLS/PAP with Entra ID Lookup Access Manager non-802.1X Supported IoT or Other Endpoints - MAC Authentication Bypass (MAB) and iPSK Change: Added "Access rules are evaluated sequentially from top to bottom. A session will match a rule ONLY IF ALL the conditions specified in the "What's Matched" section are satisfied. This means the conditions are linked by an "AND" operator, requiring each condition to be met for a successful match. If a rule is not matched, the evaluation process continues to the next rule in the list until the default rule is reached."     Cloud Monitoring for Catalyst: Cloud Monitoring for Catalyst Change: Added "Cloud Monitoring for Catalyst Wireless is now Cloud-native IOS XE for wireless controllers. Please go to Cloud-native IOS XE Wireless Controllers to learn how to onboard your wireless controllers to dashboard.     Cisco Secure Connect: Cisco Secure Connect Foundation Meraki SD-WAN Integration Change: Update note regarding Cloud communication to the Meraki Dashboard of Meraki devices and HTTPS Inspection.     MX: Site-to-Site VPN Settings Change: Added DH-Group 15 and 21.     MS: Using the Cable Test Live tool Using the MS Live Tools Change: Added "DOM is supported on MS120, MS125, MS130, MS210, MS225, MS250, MS350, MS355, MS410, and MS425. Switches must be running firmware MS 17 or higher. Refer to the Digital Optical Monitoring documentation for more details."   Troubleshooting and Replacing a Faulty MS Switch Change: Added "Note: an alert will be triggered if a switch detects that it is operating at a Critical Temperature and Event Log will be generated".     MR: Cloud-native IOS XE Wireless Controllers Quick Start Guide: Cloud-native IOS XE for Catalyst Wireless Cloud-native IOS XE Wireless Controllers Design Guide Cloud-native IOS XE Wireless Controller Dashboard Provisioned Configurations Operating Catalyst Wireless 9800 Controllers Change: Updated and renamed articles for the new Cloud-native IOS XE Wireless Controller experience.   Meraki Dashboard Catalyst Wireless - What's New Change: Added "April 2025".     MV: Exports Creation and Management Change: Added "The current minimum time allowed for a single export is 5 seconds and the maximum time allowed is 12 hours. Video exports are trimmed to the requested size with no buffer. If an invalid time range is selected, the export will automatically default back to 30 seconds to provide a valid export. The download link for an export is valid for one hour from the time of page load. Refreshing the dashboard page generates a new download link."   MV53X Installation Guide Change: Added "The MV53X requires 30W of dedicated power to support its processing capabilities and infrared (IR) load."     MT: MT10 Installation Guide - Temperature and Humidity Change: Added CW9172I.     General Administration: Meraki MX/Z Security and SD-WAN Licensing Change: Added "ENT vMX cannot be used with a Adv Sec or SD-WAN+ MX Org."   Ways to Contact Meraki Support Change: Added note that a case severity level can now be chosen upon case creation via the new Support Center case creation experience.   Meraki Co-Termination Licensing Overview Change: Added Z3 conversion: "Z3 → Z4" and "Z3C → Z4C".   Subscription - Unified Licensing Wi-Fi 7 APs Change: Added CW9172I and CW9172H.   Returns (RMAs), Warranties and End-of-Life Information Change: Added "Support will give you a reference number to manage your RMA, including returning the failed device, using the POWR tool."   Meraki Assurance Overview Page Change: Added "Infrastructure Impact Module".   Security and SD-WAN (MX,Z) Features Directory Change: Added "Public BETA Release - MX 19.2.X Firmware Features".   Meraki MX/Z Security and SD-WAN Licensing Change: Added "Virtual MX (vMX) License Breakdown".   Small-Form Factor Pluggable (SFP) and Stacking Accessories Change: Added "For 100G operation, IOS-XE 17.15+ is required."   Blocking and Allowing Clients Change: Added "The EAP exchange will still be allowed for wireless clients, and devices will be able to associate with an SSID. The block will apply to client traffic after the 4-way handshake is completed."   FIPS 140 Devices and Firmware for Cisco Meraki Change: Updated "Firmware - FIPS 140-3 Compliance" firmware version for CW9172 to MR31.1.6+.   Organization Alerts and Notifications Configuration Change: Added section "Adding a New Profile".   Adaptive Policy MS Configuration Guide Change: Added section "Adaptive Policy Classification Order of Operation" ... View more

  New articles: Cisco Meraki Add-on for Splunk Change: New article.   CW9172H Datasheet Change: New article.   Meraki Hardware and Software Onboarding Guide Change: New article.   Access Manager - EAP-TLS Client Configuration (Windows, macOS and iOS) Access Manager - EAP-TTLS Client Configuration (Windows, macOS and iOS) Change: New articles.   MS Device Health Change: New article.     Access Manager: Access Manager Certificate Based Authentication - EAP-TLS with Entra ID Lookup Change: Added section "Troubleshooting"; added required Microsoft Graph API permissions; added "added "Please ensure to upload a full trusted certificate chain by compiling all intermediate and root certificates into a single.cer or.crt file. Begin by exporting each certificate in the chain as a Base64 encoded.cer file. Open each exported file with a text editor and copy the entire contents. Paste them sequentially into a new text file, ensuring there are no extra spaces or lines between the certificates. Save this file with either a .cer or .crt extension to create the complete certificate chain. Please refer to this guide on detailed instructions: Microsoft - Export a trusted client CA certificate chain."     Cloud Monitoring for Catalyst: Monitoring Catalyst Wireless 9800 Controllers Change: Added "Cisco Catalyst Wireless LAN Controller can register with your Meraki Dashboard since firmware version IOS XE 17.12.3 or 17.15.1 or later."     MX: Carrier-Grade NAT and Meraki Auto VPN Change: Added sections "The Problem" and "Solutions".   Trusted Traffic Exclusions Cisco SD-WAN Interconnects Change: Added introduction video.     MS: SmartPorts Change: Added MS150.   Verifying Voice and Data VLAN tags with LLDP phones Change: Added "When a device land into Voice VLAN, the dashboard adds a 'Phone' tag next to the CDP/LLDP discovery item."     MR: Configuring RADIUS Authentication with WPA2-Enterprise Change: Added "When a RADIUS Server is added to the configuration, it will disconnect current clients connected to the SSID."   RF Profiles Change: Added "On the 6 GHz band, AutoRF can assign channels outside the Preferred Scanning Channels (PSC) group if they are selected in the RF Profile list when using 20 MHz channels."   Air Marshal Change: Updated behavior of AP rogue flagging for APs across different network within the same Dashboard Organization.     SM: Uninstalling Systems Manager and Removing Managed Devices Change: Added "The profile can also be removed via the dashboard by navigating to Systems Manager > Device, selecting the device(s) that the management profile should be removed from, select the Mobile Security option, then select Unenroll device to trigger an MDM command be sent to the device to remove the enrollment profile. The profile will be removed the next time the device checks in."     MV: MV53X Datasheet Change: Added "1/1.8” 8.41MP (3840x2160) progressive CMOS image sensor".   Meraki Vision Portal Changelog Change: Added release notes for up to v1.24.2.   MV93 Series Datasheet Change: Added "MT Gateway Support for all MT sensors".     MT: MT10 Datasheet - Temperature and Humidity Change: Added "Certifications: UL 2905".     General Administration: Product Firmware Version Restrictions Change: Added maximum runnable firmware CS 17.1.4 to MS22, MS42, MS220 and MS320.   Client Details Page Overview Change: Updated client appearance behavior for Meraki devices in the clients list: "For networks that do not use the Unique Client identifier method, Meraki devices in the same combined network will not appear in the Network-Wide > Monitor > Clients list, with the exception of MV devices which has always been considered clients for not playing a role as a network device. Meraki devices in different networks will appear in Network-Wide > Monitor > Clients list. For networks using the Unique client identifier tracking method, Meraki Devices in the same network will be shown in the Network-Wide > Monitor > Clients list."   Subscription - Licensing SKUs Change: Added "These licensing SKUs are options within the following two subscriptions: 'Meraki Software Subscription SKU: MERAKI-SUB' and 'Cisco Networking Subscription: CISCO-NETWORK-SUB'".   Viewing Old Event Logs Change: Added "The Client Privacy feature is only available for organizations hosted in the Europe region of Meraki Cloud."   Next-gen Traffic Analytics - Network-Based Application Recognition (NBAR) Integration Change: Added section "SD-AVC Integration - Smart Application Updates Delivered via the Cloud".   Meraki Licensing Change: Updated availability: "Meraki Subscription licensing is available for new and renewing customers globally except in Brazil, India, Russia, Belarus, and China."   Organization Users Change: Added sections "Concepts", "Meraki-hosted Users" and "Authorizations".   Building a Scalable Meraki Solution Meraki Cloud Sizing and Scaling Considerations and Best Practices Change: Updated Maximum Devices Per Organization to 35,000. ... View more

  New articles: External File Sharing using Box Change: New article.   MR RADIUS Troubleshooting Change: New article.     Secure Connect: Using Umbrella Multi-org with Cisco Secure Connect Change: Added section "Umbrella MSSP and MSP Orgs".     Access Manager: Securing Managed Endpoints - Username/Password Authentication against Entra ID Change: Added troubleshooting section "Verify security settings on Entra ID".     MX: AnyConnect on the MX Appliance Change: Added "TLS 1.3 on MX 19.1+"; added note that automatic certificate generation is not supported for networks hosted on dashboard.meraki.in.   MX Firewall Settings Change: Added "Firewall rules will immediately apply for outbound internet traffic."     MS: Packet Capture Overview Change: Added MS130 series switches do not support dashboard based packet captures on network switch ports connected to other MS switches within the same dashboard network.     MR: AI-RRM Change: Updated availability: "AI-RRM is available as an Early Access feature in the US, EU as well as Asia, ANZ, Japan and Canada. AI-RRM is not yet supported in Greater China region."   Meraki Health - MR Access Point Details Change: Added CPU and Memory statistics.   IPSK with RADIUS Authentication Change: Added "To enable Easy PSK, please contact Cisco Meraki support.”   MR Mixed Firmware Networks Change: Updated Maximum Supported Firmware for Wi-Fi 5 Wave 2 access point to MR 30.x.   MR57 Dual Uplink, PoE Redundancy and High Availability Change: Added section "Link Aggregation".     SM: Windows Imaging and Systems Manager Change: Added msiexec arguments.   Uninstalling Systems Manager and Removing Managed Devices Change: Updated commands to remove the agent on macOS.   SM Enrollment Authentication Change: Added section "SM Enrollment Authentication per OS Type".     MV: MV53X Datasheet Change: Updated "DORI Specifications (Maximum Resolution)".   Vision Portal: Introduction Change: Updated note regarding browser compatibility: "For best experience with video performance, we suggest using the recommended browsers cited in our Dashboard Browser Compatibility article."     MT: Resetting Cisco Meraki Devices to Factory Defaults Change: Added section "Factory Reset Button" to MT sensors.     General Administration: Meraki Per-Device Licensing Overview Change: Added "We don't allow grace period resets with 1-day licensing and no crediting / promos would be allowed if the licenses are incorrectly applied in this case."   Cisco Meraki Dashboard API Change: Added section "API & Webhooks Dashboard page".   Creating and Deleting Dashboard Networks Change: Removed restriction that all devices must be removed from a network before it can be deleted.   Subscription - Licensing Claim Cloud Change: Added "Scenarios where you can expect an error notification."   FIPS 140 Devices and Firmware for Cisco Meraki Change: Added MX 19.1.1+ to column "Firmware - FIPS 140-3 Compliance"; added CW9172I.   Call Me Now Change: Added "Starting March 28, 2025, customers can utilize the feature from within the new case creation experience. To access this feature, click the Try New Version link located at the top-right corner of the Support Center page in the Meraki Dashboard. Then, select one of the Product or Platform category tiles." ... View more

  New articles: Access Manager Access Manager Overview Access Manager Datasheet Access Manager - Architecture And Example Use Cases Access Manager Configuration Guides Securing Managed Endpoints - EAP-TLS with Entra ID Lookup Securing Managed Endpoints - Username/Password Authentication against Entra ID Securing non 802.1X Supported IoT or Other Endpoints - MAC Authentication Bypass (MAB) Change: New articles.   VLAN Profiles Change: New article.   MV53X Datasheet MV84X Datasheet MV53X Installation Guide Change: New articles.   Measure Wireless Throughput Using iPerf Change: New article.   Gathering DM Logs for Troubleshooting Cellular Issues Change: New article.     Secure Connect: Cisco Secure Connect - Account Setup Troubleshooting Change: Added "All sites enrolled in Secure Connect must be detached via the Secure Connect > Sites page before unlinking the current Umbrella org. Also, please verify that dashboard has deleted all Secure Connect Hub networks after the branch sites were detached."     MX: WAN Behavior on MX75/85/95/105 Change: Added "MX85/95/105 supports PoE+ on GbE Port 4. PoE on this port can be disabled from the Local Status Page if the MX is running firmware MX18.211.4 and above."   Site-to-Site VPN Settings Change: Added "If your MX device is operating on firmware version MX19.1.4 or later, you have the option to establish both Primary and Secondary VPN tunnels to enhance redundancy. For more information see Primary and Secondary IPsec VPN tunnels."   Cisco SD-WAN Interconnects Change: Added descriptions for the "Monitoring Workflow Diagram".   Meraki MX ThousandEyes Configuration Guide Change: Updated Subscription Licensing Essentials tier: "Same features as Advanced Security licensing".   Meraki MX/Z Security and SD-WAN Licensing Change: Added "The Z4 enterprise and Z4 teleworker licenses cannot be mixed on the same org."   DHCP Services Change: Added "For Fixed IP assignments, client description can only contain letters, numbers, spaces, and simple punctuation (commas not supported)."     MS: Migration from CLI-managed Catalyst Switches to Meraki-managed Mode Change: Added "If an RMA is done for a migrated Cisco Catalyst 9300 switch, the replacement will come in the management mode for which the unit was originally purchased."   Meraki MS Group Policy Access Control Lists Change: Added "In order to use group policy on MS390 or C9300 series switches, it is required to use Custom network firewall & shaping rules."   Configuring ACLs Change: Added section "Dashboard Service Rules".   Switch ACL Operation Change: Added "Traffic is first evaluated against Dashboard Service Rules, and followed by user-defined rules if no match is found."   Configuring Spanning Tree on Meraki Switches (MS) Change: Added "C9K".   MS Switch Access Policies (802.1X) Change: Updated RADIUS Testing behavior: "RADIUS test messages are sent every 24 hours. If a RADIUS test fails for a given node it will be tested again every hour until a passing result occurs. A subsequent pass will mark the server reachable and clear the alert, returning to the 24 hour testing cycle."   MS Layer 3 Switching and Routing Change: Added "SVI MTU size is 1500".     MR: AI-RRM Change: Added "Note: AI-RRM is currently in early access preview stage and opening up more global regions in phases. During this period, there will be no licensing enforcement (free trial for all organizations).  when AI-RRM moves to general availability, AI-RRM will be offered as premium service for MR-ADV or Advantage tier subscription customers. Customer can participate in a free trial by opting-in to AI-RRM from Early Access page  (Organization > Early Access)."   AP Neighbors Change: Added "Spectrogram and waterfall graphs are no longer available on these redesigned pages, but continue to be available through the View Old Version link available beneath the AP Neighbors by RSSI graph."   Wireless Client Isolation Change: Added "Client Isolation also extends to Port Profiles that can be leveraged on Access Points such as the MR30H, MR52, MR53 and MR84."; added section "31.1.6 and later".   Seamless Meraki Integration with Cisco Spaces Change: Added FAQ "Is it possible for more than 1 Meraki Organization be integrated to the same Cisco Spaces account?"; added FAQ "How does the integration handle license provisioning if my Org is using subscription licensing instead of co-term?"   Using the Cisco Meraki Device Local Status Page Change: Added "Note: The local status page of an MR device can be accessed via its LAN IP only if remote access to the local status page is enabled on the Network-wide > Configure > General page. If it is disabled, access to the local status page of an MR is only possible by connecting to an SSID being broadcasted by that MR device."     SM: How Systems Manager Approximates the Location of a Managed Device Change: Added "Note: Windows devices require MDM Profile enrollment to utilize AP based location."   Endpoint Management Enrollment Change: Added "SM Sentry Enrollment does not currently support tvOS".     MV: Meraki Vision Portal Changelog Change: Added release notes for up to v1.23.11.   MV Cloud Archive Change: Added FAQ "What happens when a camera moves from one supported Cloud Archive duration to a different one?"; added "Any footage that has been backed up will be retained until the end of the retention period. Footage will be deleted in the order in which it was recorded. For example, if the cloud archive footage retention period is 90 days, any footage older than 90 days will be deleted. The MV devices have onboard storage for up to 60 days (depending on the retention settings) and any footage that is stored on the devices can be backed up to the Cloud if new Cloud Archive licensing is purchased and assigned to the device."     General Administration: FIPS 140 Devices and Firmware for Cisco Meraki Change: Added IOS-XE 17.15+.   Meraki End-of-Life (EOL) Products and Dates Change: Added MS390-48UX2-HW, MR56 and MS120-8FP-HW.   Small-Form Factor Pluggable (SFP) and Stacking Accessories Change: Added "***Note: The number of Network Module ports are limited when C9300X-NM-8Y are used with the C9300X-48HXN models. Only 6 of the 8 ports will be available on a C9300X-48HXN switch."   Deleting an Organization Change: Added "After an organization is deleted, users may not be able to log in for 15-20 minutes. Clearing browser cache and cookies may be needed to allow users to log in."   License Info Page - Co-Termination License Model Change: Added "The SKUs will be shown if the organization is out of compliance or 30 days from the Co-Termination date."   Meraki Device Reporting - Syslog, SNMP, and API Change: Updated behavior of IP restrictions when using SNMPv2: "IP restrictions must be configured to restrict SNMP access to particular IP addresses in the customer environment when using v2c."   Organization Split Overview and FAQ Change: Added "SAML users with read-write permissions may request an organiztion split, as well."   Cisco Meraki Dashboard API Change: Added "Source IPs, are the source IP addresses from which the API requests originated."; added "API Analytics page FAQs".   Organization Settings Change: Added "Vision Portal" to "Login IP ranges".   Packet Capture Overview Change: Added section "Licensing Requirements"; added "MR Advanced license is required to use the Proactive PCAP feature. See Licensing Requirements for more information."   Information for Cisco Meraki for Government users Change: Added CW9166D1, CW9163E, CW9172I and MS150.   Co-Term License Problem - Out of Compliance Change: Added "When an organization is out of compliance, you may see a splash page with "This network is misconfigured.'" ... View more

  MG: MG52/52E Technical Specifications Change: Added section "Band and CA Combinations".   MG Wireless WAN Dashboard Settings Change: Added MG52.     MX: MX67 and MX68 Datasheet Change: Added Bell Canada, Telus and Vodafone (UK, Germany, Ireland, Spain, Italy, Portugal) to "Worldwide Bands" to the list of certified carriers.   Subscription - MX Licensing Change: Added "The vMX type does not support the Advantage tier. If a network includes a claimed vMX, the Advantage tier cannot be set for that product class. Only MX types can support the Advantage tier."   Configuring Split Tunnel Client VPN Change: Added note "For split tunnel configuration on macOS the route table on each client device will have to be modified depending on what networks will be accessed over the Client VPN (e.g. more than one network behind the concentrator). The interface will also have to be modified if there is more than one VPN configured on the client. These steps will have to be entered each time the VPN is brought up, but they can be defined in a script to make the changes quickly when needed. The specific process for this will be highly dependent on the operating system, tools available, and administrator preferences."   AnyConnect Troubleshooting Guide Change: Added section "Tunnel Drops and re-establishes after initial connection is made".   Border Gateway Protocol (BGP) Change: Added "On routed mode MXs, the MX will only advertise those routes to its eBGP peer that are participating in AutoVPN. If a particular route on the Security & SD-WAN > Site to Site VPN page for any network has VPN mode set to “Disabled” this route will not be propagated via BGP. Static route redistribution is currently not supported on the MX platform."     MS: Packet Captures and Port Mirroring on the MS Switch Change: Added "The uplink port cannot be used as the destination and will not be listed as an option".   Adaptive Policy Overview MS130 Datasheet MS150 Datasheet MS390 Datasheet Catalyst 9300X-M Datasheet Change: Added note that all switches within the entire organization would require the same license tier independent of the model.   Cloud-Native IOS XE Overview Change: Added sections "Before You Upgrade or Migrate: Key Considerations", "Management Interface Architecture", "Default Port Modules" and "Safe-Config and Rollback".     MR: Wireless Layer 3 Roaming Best Practices Change: Added "Please note that on the Access control page, the layer 3 roaming test will not work when testing from a template."   Meraki MR License Guide Change: Added "Cisco Spaces Extend" and "Cisco Spaces Smart Venues"; added "Cisco Spaces Licensing is supported by Co-Termination and Subscription Licensing Models, but not supported by the PDL Licensing Model."   Subscription - MR Licensing Change: Added "Cisco Spaces Extend" and "Cisco Spaces Smart Venues".   WPA3 Encryption and Configuration Guide Change: Added "WPA3 Enterprise Transition".     SM: Systems Manager Agent Release Notes Change: Added "[Bug fix] Minor bug fixes" for Windows and macOS to versions 4.1.4 to 4.2.2.     MV: Third Generation MV Cameras: Overview and Specifications Change: Added dimensions for MV23M/MV23X and MV73M/MV73X; Update operating temperature for MV63/MV63M/MV63X, MV93/MV93M/MV93X, MV23M/MV23X and MV73M/MV73X.   MV Wireless Configuration Guide Change: Added section "WPA3 Support".     General Administration: SNMP Overview and Configuration Change: Added "By default, Meraki does not support reporting information related to device 'EngineID'."   Meraki Per-Device Licensing Overview Meraki Per-Device Licensing - Configuration Change: Added "Conversions to PDL will no longer be accepted. Customers should contact their Meraki Sales Representative to explore alternative options such as co-term or subscription licensing."   Product Firmware Version Restrictions Change: Added MS150.   Dashboard Data Storage Privacy and Security Meraki Cloud Architecture Change: Updated location for Europe to "Germany".   Managing Dashboard Administrators and Permissions (Modernized View) Change: Updated "SSID Admin" availability: "This feature is only available to Service Providers and must be enabled by Meraki Support."   Troubleshooting MTU Issues Change: Added section "Linux". ... View more