New articles: Organization End Users Change: New article.   Managing Dashboard Administrators and Permissions (Modernized View) Change: New article.     Secure Connect: Cisco Secure Connect - Unified Organization Change Log Change: Added note about log exchange behavior between Umbrella and Meraki Organization change log.   Setting Up Your Cisco Secure Connect Account Cisco Secure Connect Foundation Meraki SD-WAN Integration Change: Added section "Prerequisites - Data Storage Location Setup".     Cloud Monitoring for Catalyst: Cloud Monitoring for Catalyst Cloud Monitoring for Catalyst Wireless Requirements Cloud Monitoring for Catalyst Wireless Design Guide Cloud Monitoring Catalyst 9800 Dashboard Provisioned Configurations Connecting Catalyst 9800 Wireless Controller to Dashboard Monitoring Catalyst Wireless 9800 Controllers Troubleshooting Dashboard Connectivity to Catalyst 9800 Wireless Controllers Change: Removed "Early Access" notes, because Cloud Monitoring for Catalyst Wireless is now General Availability.   Meraki Dashboard Catalyst Wireless - What's New Change: Added "Meraki dashboard for Catalyst Wireless public early access/beta has ended and is now General Availability!"     MG: MG Wireless WAN Dashboard Settings Change: Added "When Auto SIM failover is enabled, the MG will fail over to the standby SIM if it cannot establish dashboard connectivity for 5 minutes."   MG52/52E Technical Specifications Change: Added "ATT Firstnet" to Certified Carriers.     MX: Site-to-Site VPN Settings Change: Added note that the Local ID is only available with IKEv2.   vMX Setup Guide for Amazon Web Services (AWS) Change: Added "AWS applications such as Amazon Cloud Watch and Systems Manager Agent (SSM Agent) is currently not supported to be used with vMX's."   MX Firewall Settings Change: Update "FQDN Support" consideration: "The communication between the client and DNS server can be an inter-VLAN or NAT'ed traffic flow, but cannot be intra-VLAN (this DNS traffic is not snooped)."   Network Objects Configuration Guide Change: Added "Layer 3 inbound rules cannot be manually configured unless the NAT Exceptions (AKA No NAT) early access feature is enabled."   vMX NAT Mode Use Cases and FAQ Change: Updated vMX in NAT mode behavior: "vMXs in NAT mode will not advertise subnets that are available on the public/private cloud. If an AutoVPN peer wants to access resources inside the public/private cloud, it must send all its traffic to the vMX, which will then NAT the traffic and send it across its WAN interface into the public/private cloud environment. This requires a full tunnel configuration on the AutoVPN peer communicating with the vMX."   MX Cold Swap - Replacing an Existing MX with a Different MX Change: Added "Before connecting to the dashboard and pulling its config, the MX uses its out-of-the-box config, which includes running DHCP services on a default subnet. This can cause issues for downstream clients, as they may receive unexpected IP addresses if they are connected to the MX LAN before the MX downloads its configuration. To prevent this scenario, only the MX WAN port should be connected initially, while the MX LAN ports should remain disconnected until the MX has checked into the Meraki Dashboard."   Meraki MX ThousandEyes Configuration Guide Change: Added "Full ThousandEyes Path Visualization support for Applications over the AutoVPN tunnel is a work in progress".   Configuring Active Directory with MX Security Appliances Change: Added "AD integration with NTLM (New Technology Lan Manager) is only compatible with version 1 - NTLMv1. Any other version will fail."   MX and Z-series Source IP for RADIUS Authentication Change: Updated NAS-IP behavior beginning from MX 19.1.6.   Cisco Secure Access Meraki SD-WAN Configuration Guide Change: Added section "Configure Layer 7 Health Checks"; added description for "Tunnel Monitoring"; added note regarding availability for "Redundancy for Secure Internet Access" and "Redundancy for Private Access/Site-to-Site and Internet Access".   Dynamic DNS (DDNS) Change: Added note about the default naming behavior for the DDNS Hostname feature being changed.   AnyConnect Client Download and Deployment Change: Added "The AnyConnect app for ChromeOS is still listed on the Chrome Web Store, however it is no longer maintained nor supported. Chromebook users should install the Android version of the app instead where possible."   AnyConnect on the MX Appliance Change: Updated certificate requirement: "A chain certificate must establish a full chain of trust back to a root CA, including any intermediate certificates that sit between the device and root certs."     MS: Using the MS Live Tools Change: Added "Traditional Traceroute tool is only available when L3 interfaces have been configured on the switch."     MR: Automatic Frequency Coordination Change: Added Wi-Fi 7 access points.   Capturing Wireless Traffic from a Client Machine Change: Added "When capturing traffic on an end device, you are able to see L3 packets since the wNIC cards can map them. The MR's perform a monitor mode PCAP, meaning you cannot see L3 packets. Dashboard monitor mode PCAP is passive and more suited for observing authentication and association frames."   Wireless (MR) Firmware Features Directory Change: Added "AI-RRM (NDP support)" and "Intelligent capture".   Low Power Mode on Cisco Switches Change: "Alternatively, PoE can be disabled and then re-enabled without shutting down the port itself with the "power inline" command."     SM: Software Inventory Change: General article refresh.     General Administration: Managing Multiple Networks with Configuration Templates Change: Added "If that same network is then re-bound to the template, it will be assigned a new randomly selected subnet rather than receiving the same subnet previously allocated."   Enterprise Agreements Change: Added section "Adding Additional Devices to Use Your Enterprise Agreement".   Adding and Removing Devices from Dashboard Networks Change: Added "If swapping out an MX appliance with a static WAN IP, the uplink config (Appliance Status > Uplink) should be recorded - including IP, default gateway, subnet mask, and DNS servers - before proceeding to step 3, as this config will not be saved."   Meraki Co-Termination Licensing Overview Change: Updated section "MS Licensing Options".   Alerts and Notifications Change: Added "All firmware upgrade alerts will be sourced from the same email address. To ensure that alerts are not being lost to a spam filter, please be sure to add support-noreply@meraki.com as a trusted email source."   Manually Integrating Cisco Umbrella with Meraki Networks Change: Added note about the interoperability when using Umbrella on MR and an MX upstream.   Information for Cisco Meraki for Government users Change: Added CW9176I, CW9176D1 and CW9178.   ... View more

  New articles: CW-ANT-GPS1-M Installation Guide Change: New article.   Cisco SD-WAN Interconnects Change: New article.   Eligible models Change: New article.     Secure Connect: Cisco Secure Connect - Design Overview Get Started - Securing Access to Private Applications and Networks Change: Added section "Client-based ZTNA".   Cisco Secure Connect - ZTNA Network Prerequisites & Troubleshooting Change: Added sections "Requirements for Secure Client with Client-Based ZTNA" and "Troubleshoot Client-Based Zero Trust Network Access".     MX: vMX Comparison Datasheet Change: Added security features to list of "Supported Features".     MS: Switch Settings Change: Added sections "Storm Control", "Power Supply Settings" and "Network Client Sampling".   MS Switch Access Policies (802.1X) Change: Added note regarding multi-VLAN assignment support when using multi-auth as the host mode for the MS390 and C9300-M.     MR: CW9166D1 Installation Guide Change: Update behavior of Dual 5 GHz mode: "When the CW9166D1 is operating in Dual 5 GHz mode, the 5 GHz radio in slot 1 operates only in the UNII-1 and UNII-2 bands (channels 36 to 64), and the radio in slot 2 is locked to the UNII-2-Extended and UNII-3 bands (channels 100 to 165)."   VusionGroup Electronic Shelf Labels (ESL) Integration with MRs Change: Added V:Cloud destination URL and port information.     MV: Restricting Access to Cameras Change: Added "Ensure to avoid conflicting permission sets between Organization/Network role and camera roles. For example, do not pass a read only network role while also passing a full video access role for the same network."   Exports Page and Combining Exports Change: Added section "Error Messages".   MV33 Datasheet Change: Updated storage size for MV33-HW to 256 GB.   Meraki Vision Portal Changelog Change: Added release notes for up to v1.23.4.     General Administration: Moving Devices between Organizations Change: Added "In the event a Subscription needs to be moved to another organization because the order was mistakenly claimed to the wrong organization within the past 7 days from order, please contact Support."; added "Splitting Subscription Licensing into 2 separate Subscriptions is not supported. Moving devices to a different Organization will require a new Subscription for the devices in the new Org where the devices were moved."   Organization Split Overview and FAQ Change: Added "Org splits can not be done in an Org that has subscription at this time. Splitting Subscription Licensing into 2 separate Subscriptions is not supported."   Manage Tags Change: Added "Deleting a tag from all networks in an Organization will effectively delete the tag itself, and it must be recreated for use again."   Root Cause Analysis (RCA) - Alert Based Workflows Change: Added port color coding for CRC errors. Amber: High amount of L1 packet errors. Red: Very High amount of L1 packet errors.   Resetting Cisco Meraki Devices to Factory Defaults Change: Added section "CW Access Points".   Dashboard Alerts - Connectivity Issues Change: Added "This alert may also be phrased as 'The Cisco Meraki Cloud is having difficulty communicating with this device'." to "Meraki Cloud Communication Issues".   Dashboard Alerts - Configuration Issues Change: Added "This alert may also be phrased as 'The device is using a DHCP IP address from VLAN X instead of using configured VLAN Y'." to Device(s) VLAN Mismatch"; added "This alert may also be phrased as 'configuration is out of date'." to "Outdated/Unreachable Configuration".     Architectures and Best Practices: MX and MS Basic Recommended Layer 3 Topology Change: Added section "Incorrect Topology". ... View more

  New articles: CW9176I / CW9176D1 Datasheet CW9178 Datasheet Change: New articles.   MT Reports Change: New article.   Primary and Secondary IPsec VPN Tunnels Change: New article.   Selecting a Management Mode for Unified Licenses - WIFI7 Change: New article.     Secure Connect: Cisco Secure Connect - Client-based ZTNA Change: Added "Device Posture - Duo Desktop" to section "Prerequisites & Requirement".   Cisco Secure Connect - Manage DNS Policies Change: Added "DNS Security is a great solution for protecting guest networks as it doesn't require decryption or an endpoint agent."   Cisco Secure Connect - Manage Web Policies Change: Added "Users and groups must be synced into Umbrella to be used in policies. For details on setting up identity and syncing users, check out identity documentation."   Cisco Secure Connect - Cloud Access Security Broker (CASB) Change: Added "Threats can come from the outside or from insecure SaaS usage. Shadow IT, or the usage of applications unapproved or monitored for business usage can lead to data exposure and leakage."   Cisco Secure Connect - Internet Access Policies Change: Added third item to the list of benefits.   Cisco Secure Connect - Defining Private Resources & Apps Change: Added "Wildcard FQDNs are supported with the following format: *.cisco.com"; added "ICMP is not supported for ZTNA but is supported for VPN Access".     MG: MG41/41E Technical Specifications Change: Added Spark (NZ) to the list of certified carriers.     MX: SD-WAN and Traffic Shaping Change: Added "Custom traffic shaping rules may be configured on a per-destination basis. Source based configurations are not supported at this time."   IPv6 Support on MX Security & SD-WAN Platforms - VPN Change: Added "IPv6 is not currently supported for IPSEC Client VPN. Refer to IPv6 Support on MX Security & SD-WAN Platforms for more information on supported IPv6 features on the MX Security Appliance."     MS: MS Switch Access Policies (802.1X) Change: Renamed "Increase Access Speed" to "Concurrent Authentication".   Cloud-Native IOS XE Overview Change: Updated section "Layer 3 SVI Behavior".     MR: AP Neighbors Change: Added "Enabling AP neighbors changes the RF Spectrum page."   AP Port Profiles Change: Added "When you have APs using port profiles, and all the ports in the profile are disabled, the AP will reset its radios every 20 minutes if it doesn't have communication with the Meraki cloud (when it is offline)."     MV: MV Cloud Archive Change: Added "Cloud Archive footage retention is determined by time duration rather than storage capacity. For example, a 7-day Cloud Archive license retains footage for a continuous period of seven days from the current date, rather than storing a cumulative seven days' worth of footage."   MV93 Series Datasheet MV33 Datasheet Change: Added "Digital Pan-Tilt-Zoom (DPTZ) mode for live & historical video".     General Administration: Creating and Applying Group Policies Change: Added "Since the policy is applied on a per-VLAN basis, clients affected by this configuration will not contribute to the 'Affecting' counter for that policy displayed under Network-wide > Configure > Group policies page." to section "By VLAN".   Cisco Meraki Dashboard API Change: Updated the behavior of PUT: "PUT is idempotent; it updates a resource, but does not create a resource if it does not already exist, which differs from RFC 9110.   Root Cause Analysis (RCA) - Alert Based Workflows Change: Added "Cyclic Redundancy Check (CRC) errors detected" and "Guided Troubleshooting Flow".   Subscription - Licensing Claim Cloud Change: Added "Only Cisco Networking Subscription can be used in Meraki Dashboard and Cisco Smart Software Manager."   Subscription - Licensing Changes Cloud Managed Subscription - Licensing Claim Cloud Subscription - Licensing Renewals Change: Added "Cisco Networking Subscription does not have subscription changes available at this time."   Subscription - License Compliance Cloud Experience Change: Added "This document applies to Term Subscription and EA's with the Networking, Camera Systems, and System Manager Suites.  It does not cover legacy EA suites."   Subscription - Licensing SKUs Change: Added "Unified Licensing WIFI7".   Subscription - Licensing Overview Change: Added note "For customers ordering WIFI7 in regions where Subscriptions is not available yet, you have the option of ordering term licensing in our legacy licensing models."   Subscription - MT Licensing Change: Added MT15-HW.   Subscription - MR Licensing Change: Added CW9166D1-MR.   Subscription - MG Licensing Change: Added MG52-HW and MG52E-HW.   Subscription - MS Licensing Change: Added C9200 and C9200L.   ... View more

  New articles: Thousand Eyes Integration with Secure Connect Change: New article.   TLS Protocol and Compliance Standards Change: New article.     Secure Connect: Cisco Secure Connect - Cloud Firewall Policy Change: Added "Meraki Cloud Firewall page is optimized for Secure Connect and should be used for all configurations and maintenance of firewall rules.  It is not recommended to use Umbrella Firewall Policy dashboard."   Cisco Secure Connect Foundation Meraki SD-WAN Integration Change: Added sections "Connect Meraki SD-WAN Branches to Secure Connect Regions", "Select Local Networks Announced to Secure Connect", "Sites Monitoring" and "Using MX Firewall Forwarding Rules with SD-WAN Tunnel".   Remote Access - Secure Client configuration Change: Added "When the remote users reach the maximum time of the VPN session, the VPN connection will be disconnected with below error message pop up and they will need to re-connect to the VPN for accessing company's resource."     MX: SD-WAN and Traffic Shaping Change: Added "For routed mode devices, it is currently advised to configure any rules which remap priority such as 'high', 'medium', or 'low', via a rule within the Group Policy section under Network Wide -> Group Policies. Rules configured within the SD-WAN & Traffic shaping page which remaps the priority of traffic is currently deprecated."; added queuing method behavior for firmware MX 18.2 and above to section "Rule Actions".   Content Filtering Powered By Cisco Talos Change: Updated upstream firewall prerequisite to include TCP port 443.   MX Warm Spare - High-Availability Pair Change: Added "Adding an online/offline spare MX in the dashboard network will cause a brief connectivity loss on the primary MX due to the initialization of the HA configuration."   Managing and Troubleshooting AnyConnect Certificates Change: Added note to ensure that Anyconnect clients are connecting using the custom DNS name and not the MX DDNS hostname when using custom certs.     MR: CW9166 Datasheet Change: Added "The CW9166 RJ45 console port is only available when in Cisco DNA management mode."   Configuring RADIUS Authentication with a Sign-On Splash Page Change: Added "RADSec is not supported for splash authentication."   Automatically Integrating Cisco Umbrella with Meraki Networks Change: Updated wording regarding licensing "Before May 2022, adding an MR Advanced or MR Upgrade license to a co-term organization would initiate a PDL conversion process; however, this is no longer the case. Conversions from co-term to PDL are no longer supported, as referenced in the Per-Device Licensing article."   Location Analytics Change: Added "This 20 minute period begins when the AP receives the first probe with RSSI of 15 or greater."     SM: Tags Management Page for Systems Manager Change: Added "Please note Device Tags are Auto-Tags with device enrollment and have a magic wand icon that cannot be deleted from the dashboard."; added "Deleting Owner Tags" to section "Deleting Tags".     MV: Gen3 Meraki MV Mounting Options and Guidelines Change: Added "Dimensional Diagrams" for MV mounts.   Vision Portal Integrations: Access Control Change: Added descriptions to section "Tour of the Interface".   Meraki Vision Portal Changelog Change: Added release notes for up to v1.23.2.   Video Walls Change: Added note "Camera-only admins (view live, view historical, view and export footage) may still be able to see the "Edit Layouts" button on the Video Wall, however, they cannot make changes to the Video Wall."     MT: MT15 Installation Guide - Indoor Air Quality w/CO2 Change: Added "Dimensions of the mounting plate is 105mm x 105mm."     General Administration: Using the Organization Inventory Change: Added "If the device is claimed to the inventory through Device Serial instead of Meraki Order number, the Meraki Order number will not be listed against the device in the Organization > Inventory page."   Cisco Meraki Support Call Recording Change: Updated call recording duration to 180 days.   Meraki Status Page Change: Added section "Subscribing to Slack Updates".   Managing Dashboard Administrators and Permissions Change: Updated click path for combined and non-combined networks "Navigate to Network-wide > Configure > Administration if the network is combined, or Network-wide > Configure > General if the network is not combined."   Device Uptime Change: Added Cloud monitored Access Points to the list of supported devices.   SP-Initiated SAML SSO Configuration Guide Change: Added "If using the Meraki for Government dashboard, the URL would be https://account.gov-meraki.com/login...login?sso=true." ... View more

  New articles: BGP routing over IPsec VPN Change: New article.   Subscription Feature Tier Upgrade Change: New article.     Secure Connect: Remote Access Deployment Change: Added "Remote Access end device requires Umbrella Module to be active for DNS policy to take effect. Please check Deploy Umbrella module for configuration and installation steps."   Getting Started Meraki SD-WAN Hub Integration with Secure Connect Change: Added Z-Series.     Assurance: MI WAN Health Overview Change: Added section "ISP Renaming".     MG: MG52/52E Technical Specifications Change: Added Verizon to Certified Carriers.     MX: MX Sizing Guide & Principles Change: Added "Single & Multi-Tunnel VPN Throughput tests have the following configuration applied: QoS, DPI (NBAR), Layer 3 Firewall enabled".   Security and SD-WAN (MX,Z) Features Directory Change: Added section "Beta Release - MX 19.1.X Firmware Features".   EU Compliance Information Change: Updated note "EIRP on Access Points that support beamforming".     MS: Switch Stacks Change: Added note "Due to the management IP behavior described above, accessing the Local Status Page from any member will direct to the local status page of the active switch, regardless of which stack member you are physically connected to."   MS and CS Firmware Features Directory Change: Added section "Cloud-native IOS XE".   Catalyst 9300/X/L-M Series Installation Guide Change: Added section "Stack Cabling Installation (9300L)".     MR: Sponsored Guest Change: Added note "Access duration will be granted based on the configured duration when the access is granted. Changing the duration will not retroactively modify access duration for users who have already been authorized."     SM: Uninstalling Systems Manager and Removing Managed Devices Change: Added optional step 5 in section "ADE enrolled devices (Apple business manager / Apple school manager)" about removing devices from Apple Business Manager / Apple School Manager.   WPA3 Encryption and Configuration Guide Change: Added "When a client roams from a WPA2 to WPA3 SSID reauthentication will take place, but with minimal disruption to connectivity."   Seamless Meraki Integration with Cisco Spaces Change: Added FAQ "Is cross region integration supported if my Meraki Org is hosted in one region and my existing Spaces account is hosted in a different region?"     General Administration: FIPS 140 Configuration Guide for Cisco Meraki Change: Added "Download report is not available at this time, but is 'coming soon' for Meraki for Government cloud."; added "A known issue exists where SNMP Access is incorrectly showing "green" status when it should be "red".  There is no ETA for resolution at this time."   Contacting Support Change: Added note about "Call me now".   Managing Multiple Networks with Configuration Templates Change: Added section "Viewing Networks bound to a template".   The Science behind Per-Device Licensing Change: Added "Conversions to PDL will no longer be accepted. Customers should reach out to their Meraki Sales Representative to explore alternative options such as co-term or subscription licensing."   Dashboard Data Availability Change: Renamed from "Cloud Data Retention Policies".   Using the Cisco Meraki Device Local Status Page Change: Added "MX85/95/105 supports PoE+ on GbE Port 4, refer to the screenshot below on how to toggle PoE." ... View more

  New articles: Cloud-Native IOS XE Cloud-Native IOS XE Overview Cloud Native IOS XE FAQ Migration from CLI-managed Catalyst Switches to Meraki-managed Mode Upgrade Steps for Cloud-managed Catalyst Switches Change: New articles.   XDR XDR Quick Start Guide XDR User Guide Cisco XDR FAQ Change: New articles.   Meraki and Starlink Deployment Guide Change: New article.   Cisco Meraki MR46E VusionGroup ESL Specifications Change: New article.   Seamless Meraki Integration with Cisco Spaces Change: New article.   FIPS 140 Configuration Guide for Cisco Meraki Change: New article.   Cisco Administrator Access Change: New article.   Root Cause Analysis - Alert Workflows (RCA) Change: New article.   Call Me Now FAQ for Call Me Now Change: New articles.     Cloud Monitoring for Catalyst: Adding Catalyst 9800 Wireless Controller and Access Points to Dashboard Change: Added "Meraki Offboard EEM Script".     MG: Cisco MG52 AT&T eSIM Activation FAQ Change: Added sections "Initial Bootstrap Data FAQs" and "Troubleshooting FAQs".     MX: Route Table Change: Added "Hovering over the "i" next to the subnet will expose additional attributes such as AS Path, Origin, Local Preference, Next Hop and historical connectivity information."   Border Gateway Protocol (BGP) Change: Added "BGP is not supported for template networks."   MX95/105 Datasheet Change: Updated "Stateful firewall throughput" and "Maximum VPN throughput".   Port Forwarding and NAT Rules on the MX Change: Added section "Port forwarding/NAT rules and Inbound firewall rules".   Connection Monitoring for WAN Failover Change: Added "Hence, a soft failure will be quicker in case the ARP test to default gateway fails before ICMP or the HTTP test."   MX64 and MX65 Overview and Specifications MX67 and MX68 Datasheet MX75 Datasheet MX75 Hardware Installation Guide MX84 Datasheet MX85 Datasheet MX85 Series Hardware Installation Guide MX95/105 Datasheet MX95/MX105 Series Hardware Installation Guide Change: Updated "Recommended Device Count".     MS: SmartPorts Change: Added note "SmartPorts are currently not supported in networks enabled for SecurePort."   Catalyst 9300/X/L-M Series Installation Guide Change: Added description for the "Active LED" states.   Adaptive Policy MS Configuration Guide Change: Added "VLAN to SGT mapping feature is available on MS390 and Catalyst switches in managed mode from firmware CS 17.1.2.1 and above."   Advanced MS Setup Guide Change: Added "If a Native VLAN is specified, ensure that it is also added to the Allowed VLANs configuration."   Getting started: Cisco Catalyst 9300 Management with Meraki Dashboard Change: Added announcement notice about Cloud-native IOS-XE public beta.   Change of Authorization with RADIUS (CoA) on MS Switches Change: Added PoE behaviour for Port Bounce (Catalyst-based switches: Bounces PoE on the port. MS-based switches: Does not bounce PoE on the port.).     MR: Configuring RADSec (MR) Change: Added "'RADSec Keep Alives' is a Meraki Dashboard Early Access feature. Before changing this configuration, you need to opt into Early API Access."   SSID Tunneling and Layer 3 Roaming - VPN Concentration Configuration Guide Change: Added "This is not a recommended deployment, but the tunnel will form. Please note that there might be some MTU issues with this approach."   AI-RRM Change: Added note "Currently AI-RRM is in Early Access phase, available in US and EU region. APAC regions and Canada doesn't have AI-RRM service during this Early Access phase and will be introduced when solution become generally available."   Meraki MR License Guide Change: Added AI-RRM and Intelligent capture.   MR Meraki RADIUS 2.0 Change: Added Called-Station-ID and NAS-ID attributes "AP LAN IP" and "AP Public IP"; added note "When 802.11r is enabled, the available NAS-ID options will be limited to specific attributes to ensure the network remains stable."; added section "Device IP set as NAS-ID".   Wireless Mesh Networking Change: Added CW9163E and CW9166D1.   VusionGroup Electronic Shelf Labels (ESL) Integration with MRs Change: Added Bluetooth ESL mode.   NAT Mode with Meraki DHCP Change: Added "Group Policy 'Security appliance only' settings" to section "Common Problems".   Understanding and Configuring Management VLANs on Cisco Meraki Access Points VLAN Tagging on MR Access Points Change: Added note about native VLAN configuration between the access point and upstream switch.     SM: Systems Manager Firewall Rules Change: Added "*.meraki.net" for Meraki-hosted Content.     MV: MV23 Series Datasheet MV73 Series Datasheet Change: Added "MT Gateway Support for all MT sensors".   Meraki Vision Portal Changelog Change: Added release notes for up to v1.23.0.     MT: Sensor Alert Profiles Change: Added note "MT20 will log all door opens and closes events, the behavior cannot be modified."   MT10 Installation Guide - Temperature and Humidity Change: Added MV13/M, MV23M/X, MV33/M, MV63/M/X, MV73M/X, MV93/M/X and CW9163E-MR.     General Administration: Getting started on Packet Captures with Wireshark Change: Added references to free online training courses on the Meraki Learning Hub.   Active Directory Issue Resolution Guide Change: Added "If VPN mode is disabled for all VLANs, the WAN appliance will use a 6.X.X.X source IP address to communicate with the AD server."   FIPS 140 Devices and Firmware for Cisco Meraki Change: Added note "Any Meraki MX/Z Series devices not included in the list above is not FIPS compliant."; added MG52E; updated FIPS 140-2 Compliance Firmware for MX.   Using the Cisco Meraki Device Local Status Page Change: Added behavior of the Local Status Page on Catalyst 9300/X/L-M series switches for both monitored and managed mode; added "Starting in MS17+, MS devices will now support HTTP CONNECT proxy."   Meraki End-of-Life (EOL) Products and Dates Change: Updated the End-of-Sale Date for MG21-HW-WW and MG21-HW-NA to Mar 18, 2025.   Locating the MAC Address of Cisco Meraki Devices Change: Added note "Meraki WAN appliances and switches configured in warm spare will also use virtual MAC addresses."   Using the License Calculator Change: Added "For additional regions, navigating to the license calculator can be achieved by replacing .com with the corresponding extension for your dashboard region."   Meraki Subscription Licensing Overview Change: Updated availability "Subscription licensing is available for new and renewing customers globally except in Brazil, India, Russia, Belarus, and China."   EU Cloud Configuration Guide Change: Updated hosting region for Europe to European Union.   Dashboard Data Storage Privacy and Security Meraki Cloud Architecture Change: Added France.   Information for Cisco Meraki for Government users Change: Added "MG, YouTube Content Restriction, Web Search Filtering, Cisco Secure Malware Analytics Integration (formerly know as Threat Grid) and Adaptive Policy" to Supported Features; added "vMX, Trusted Traffic Exclusions powered by NBAR, Umbrella DNS Integration, ThousandEyes Agent Integration, MX SD-WAN+, Cisco Catalyst Monitoring, Z4 Series and Meraki Mobile App" to Unsupported Features.   Adaptive Policy Configuration Guide Change: Updated note about the Infrastructure Group description "The default value is 2 and unless necessary to integrate with other deployments, it is not suggested to modify this value. If it is necessary to change the Infrastructure group, be careful if modifying in production as a mistake can isolate the network device's originated traffic if an upstream device does not permit the traffic due to policy."   Manually Integrating Cisco Umbrella with Meraki Networks Change: Added "An existing license to use Cisco Umbrella" to Licensing Requirements.   Dashboard Access Restricted Due to IP Address Geolocation Change: Added note "Devices in restricted countries and regions should also not be expected to operate online and connect to the Meraki cloud."   Configuring SAML Single Sign-on for Dashboard Change: Added "Additionally, when the SAML assertion is failing, kindly check for spelling mistakes or leading white spaces in the defined roles which are the most common mistakes."   Alerts and Notifications Change: Added "The Account Status of the added Network admins need not be in a verified state to be a recipient of these alerts."   Two-Factor Authentication Change: Added "When Two-Factor Authentication is not enabled, the user will see a banner "Two-factor Authentication is not currently enabled on your Meraki Dashboard account. For an extra layer of security, we recommend enabling it at your earliest convenience." Clicking on the [x] button will not permanently remove the banner."   Assurance Left Navigation Change: Updated section "Context". ... View more

  New articles: MG52 and MG52E eSIM Activation Guide using Control Center Change: New article.   MX650 Installation Guide Change: New article.   MS Temperature Thresholds Change: New article.   MV23 Series Datasheet MV23 Installation Guide Change: New articles.   MV73 Series Datasheet MV73 Installation Guide Change: New articles.   Smart Retention Change: New article.     MG: MG52E Patch Antenna Datasheet Change: Added antenna profile images.     MX: MultiWAN Backup Uplink Change: Added "Not all NAT features are supported such as Port Forwards, 1:1 NAT and 1:Many NAT."   MX67 and MX68 Datasheet Change: Added MA-SIMTRAY-2C and MA-SIMTRAY-5C to Accessories table.   Advanced Malware Protection (AMP) Layer 3 and 7 Firewall Processing Order A Guide to Troubleshooting Blocked Traffic Content Filtering Powered By Cisco TalosMX Firewall Settings MX Firewall Settings Site-to-site VPN Firewall Rule Behavior Content Filtering MX Uplink Settings Connection Monitoring for WAN Failover Using Layer 3 Firewall Rules Creating a Layer 7 Firewall Rule Network Objects Configuration Guide Threat Protection Content Filtering Troubleshooting Trusted Traffic Exclusions Security Center URL Filtering Web Search Filtering and its Effect on Google Apps and Google Search Troubleshooting a Faulty MX Appliance or Z-Series Teleworker Gateway Change: Added references to free online training courses on the Meraki Learning Hub.     MS: Switch Overview and Statistics Change: Added Serial, Firmware, Config, VLAN Profile and Device uptime to the "Status" table.     MR: Packet Capture Overview Change: Added "Intelligent Capture".   Client Balancing Change: Added suggestion to not enable client balancing, because many clients and/or applications do not handle these rejections appropriately.   VusionGroup Electronic Shelf Labels (ESL) Integration with MRs Changed: Added support for MR46E; added sections "ESL and Templates", "ESL and MT Coexistence in the Same Dashboard Network", "API Support" and "High Frequency ESL VusionGroup Firmware Upgrades"; added warning "All Bluetooth features (scanning/beaconing/scanning API), Electronic Shelf Labels, MQTT, and Door locks functionalities are mutually exclusive. Enabling either one of these features would prevent others from working."   Regulatory Domains for MR, MX, and Z-Series (Legacy Version) MR Regulatory Domains Change: Added "MX and Z-Series products will not support a manual override of the regulatory domain. Contact Meraki Support in case of alerts."     SM: Uninstalling Systems Manager and Removing Managed Devices Change: Added "For iOS/iPadOS devices, the restrictions setting "Allow Erase All Content and Settings" should be enabled if you want to initiate a factory reset from the device itself (Settings > General > Transfer or Reset iPhone > Erase All Content and Settings). If the setting is disabled, the device can still be erased using the Apple Configurator by selecting Actions > Advanced > Erase All Content and Settings."   Systems Manager Supported Operating Systems Change: Added "Windows Long-Term Servicing Channel (LTSC) (formerly Windows Embedded)" to section "Older Operating Systems".     MV: MV63 Series Datasheet MV63 Installation Guide Change: Added MV63M.   MV93 Series Datasheet MV93 Installation Guide Change: Added MV93M.   MV13 Datasheet MV13 Installation Guide Change: Added MV13M.   MV33 Datasheet MV33 Installation Guide Change: Added MV33M.   Gen3 Meraki MV Mounting Options and Guidelines Change: Added MV23 Series and MV73 Series.   Third Generation MV Cameras: Overview and Specifications Change: Added MV63M, MV93M, MV13M, MV33M, MV23 Series and MV73 Series.   Video Retention Change: Added retention estimates for MV63M, MV93M, MV13M, MV33M, MV23 Series and MV73 Series.   MV Cloud Archive Change: Added archive specifications for MV63M, MV93M, MV13M, MV33M, MV23 Series and MV73 Series.   Meraki Vision Portal Changelog Change: Added release notes for up to v1.22.6.     General Administration: Trusted Access for Secure Wireless Connectivity - Setup Guide Change: Added "Provision Owner Access".   Meraki MV Subscription Licensing Change: Added MV13/MV13M, MV23/MV23M, MV33/MV33M, MV63M, MV73M/MV73X and MV93M.   Contacts for Webinar and CMNA, ECMS Equipment Change: Added addtional information (FAQs) regarding ECMS1, ECMS2 and CMNA promo renewals.   Alert: This device is having difficulty contacting the Meraki Cloud Change: Added additional alert reason (The upstream ISP provided modem may have traffic inspection security enabled); added note regarding Comcast modems or routers manufactured by SMC that have the "Gateway Smart Packet Detection".   Alerts and Notifications Change: Added "The SMS alerts are limited to nodes going offline or coming online and sensor events." to section "Receiving Email Alerts via SMS".   Meraki Health Overview Change: Added counting mechanism description for "Connection failures based on unique clients" in section "Anomaly Graphs" (last blue note).   Mapping Layer 7 Firewall Rules to NBAR IDs Change: Updated NBAR ID of "Binary over HTTP" to 121.   Using Wireshark for Packet Captures Packet Capture Overview Change: Added references to free online training courses on the Meraki Learning Hub. ... View more

  New articles: Downloading Secure Client for Cisco Software Central Change: New article.     Secure Connect: Cisco Secure Connect - Cloud Firewall Policy Change: Added section "Recommended Use of Objects in the Rules".   Remote Access - Secure Client configuration Change: Added "Secure Client on Linux hosts does not support "VPN establishment for RDP". VPN establishment rules for Linux hosts only apply to SSH sessions. Please refer to this link for more details."     MX: MX Sizing Guide & Principles Change: Added vMX-XL specifications; added note "Dual power supply models have an active/standby redundant power supply and do not provide combined power."   MX67 and MX68 Datasheet Change: Added note that the number of users mentioned in "Recommended use case" refers to the number of the Client devices that are connected to the network, which can checked by navigating to Network-Wide > monitor > Clients.   MX650 Datasheet Change: Updated "Recommended Device Count" for MX650 (25,000).   Dynamic DNS (DDNS) Change: Added notes how the different DDNS URLs will resolve to the active WAN uplink, WAN 1 and WAN 2.     MS: Restricting Traffic with Isolated Switch Ports Change: Added port isolation behavior for MS-based and CS-based switches.     MR: AI-RRM Change: Added "If FRA is disabled, the 2.4 GHz radios that were turned off by FRA will automatically be re-enabled within 1 hour."   CW9163E Datasheet Change: Added "2x2 MIMO with two spatial streams".     SM: Windows Enrollment Change: Added section "Auto-installing the Windows Agent"; added note that Azure AD, Google and OpenID Connect are no longer supported for Windows Agent Enrollment.   Enabling Device Owner Mode using Android Debug Bridge (ADB) Change: Added "Please note that Meraki Systems Manager now only supports Android 10 and above, see the "Supported Operating Systems" KB for more info."   Systems Manager Agent and MDM Profile Enrollment Change: Added note "Please use agent versions greater than 3.7.2."     MT: MT Frequently Asked Questions Change: Added note "Free licensing for MT is not available in Subscription model."     General Administration: FIPS 140 for Meraki Change: Added MS17.1+ / CS17.1+ for FIPS 140-3 Compliance.   ... View more

  New articles: Dynamic Protocol Status Change: New article.   Traffic Mirroring Change: New article.   SmartPorts Change: New article.   Cisco MG52 AT&T eSIM Activation FAQ eSIM Activation Guide Sim Ordering Guide Change: New articles.   Role-Based Access Control Wireless Beta Program Change: New article.   Cisco Secure Connect - Client-based ZTNA Cisco Secure Connect - Client-based ZTNA Enablement for Existing Customers Change: New articles.   Secure Connect: Cisco Secure Connect - Client-based ZTNA Change: Added Apple iOS and Samsung (Android) to "Prerequisites & Requirement"; added sections "Deploy Zero Trust Access Module", "Enroll in Zero Trust Access" and "Unenroll a Device from Zero Trust Access".   Cisco Secure Connect - ZTNA Endpoint Posture Profile Cisco Secure Connect - Defining Private Resources & Apps Change: General article refresh.   Cloud Monitoring for Catalyst: Cloud Monitoring Overview and FAQ Cloud Monitoring for Catalyst Onboarding Change: Updated supported firmware versions (17.3.1 - 17.10.1 and 17.12.3).   MG: MG IP Passthrough Change: Updated behavior of LAN 1: "Labeled LAN port 1 will no longer be used for data transfer, only PoE purposes."   MX: AnyConnect on the MX Appliance Change: Added "Changing the Server Certificate Generation Method back to the default option of Auto-Generated from Custom will cause the MX to delete the current uploaded custom certificate."   Meraki MX ThousandEyes Configuration Guide Change: Added Meraki and ThousandEyes domains/endpoints to be allowed for "Topology 4: Full AutoVPN Tunnel to Secure Connect, Umbrella, or any Internet Gateway".   Configuring Site to Site VPN tunnels to Azure VPN Gateway Change: Added "Each time, after creating a new tunnel, send traffic (a ping will suffice) from a client in a VPN-enabled VLAN behind the MX to a subnet behind the Azure gateway to bring the tunnel up."   SD-WAN and Traffic Shaping Change: Added "ICMP traffic is not subject to traffic shaping rules. As a result, Flow Preference will have no impact on ICMP traffic."   Border Gateway Protocol (BGP) Change: Added "When establishing eBGP peering in on the WAN, NAT Exceptions with Manual Inbound Firewall is also needed, otherwise the subnets advertised by the MX will be behind NAT and not reachable via eBGP upstream."   MX and Z-Series Wireless Settings Change: Updated wording about channel selection: "Wireless MX's and Z-series devices leveraging the WiFi 5 channel settings page do not support the manual configuration of DFS (UNII-2 and UNII-2E) channels, but will use these channels when leveraging Auto Channel."   Meraki and ThousandEyes Integration Troubleshooting Change: Added "Issue: A ThousandEyes Organization already exists for this user. Please contact your company's ThousandEyes Platform Administrator or ThousandEyes Support."   MS: MS DHCP Servers Change: Added section "RA Guard".   Switch Stacks Change: Added "Cloud-managed Catalyst switches may take several seconds to resume passing traffic after the Active Member has failed due to the Meraki management container having to reinitialize on the new Active Member."   Advanced MS Setup Guide Change: Added C9300-M.   MS OSPF Overview Change: Added OSPF Interface Passive states description.   MS Switch Access Policies (802.1X) Change: Added "The critical data and critical voice VLANs should not be the same."   MS130 Datasheet Change: Updated power input of MS130-8P-I: "100-240V~, 2.8A-1.2A, 50-60Hz".   MR: WPA3 Encryption and Configuration Guide Change: Added note "This feature is available from 31.1.x and above firmware versions." to section "WPA3 Transition Mode for RADIUS Authentication".   Roaming Technologies Change: Added note that PMK caching and OKC are leveraged when using OWE, WPA3-Personal, and WPA2/3 Enterprise; added "PMK caching and OKC aren't leveraged when using WPA2-Personal because the client(s) and access point(s) already know everything required to derive the PMK (SSID name and password)."   RADIUS Failover and Retry Details Change: Added "MRs will send Status-Server messages every 60 seconds to execute RADIUS failback tests and ensure that the primary server has returned online."   Scanning API for Location Analytics Solutions Change: Added section "Meraki Scanning APIs V3 Update".   RF Spectrum Page Overview Change: Added "Avg. channel utilization (6 GHz) - Average utilization over the last 80 seconds for the AP's client-facing 6 GHz radio channel."   SM: Meraki Authentication Server Certificate Rotations Change: Added "The common name of the certificate will remain radius.meraki.com between rotations. If clients can remain trusting this service certificate common name there should be no impact from this certificate transition."; added section "Timeline overview".   MV: Meraki Vision Portal Changelog Change: Added release notes for up to v1.21.0.   MT: MT10 Installation Guide - Temperature and Humidity Change: Added "The MT10 temperature sensor and the MT11 temperature probes use a digital sensor that comes pre-calibrated during the manufacturing process. This means no calibration is required during the product life cycle."   General Administration: Syslog Event Types and Log Samples Change: Added AnyConnect VPN events; added post MX 15.12 VPN events.   Authentication Enhancements and New Dashboard Security Features Change: Added "Government Account passwords must be at least 14 characters long."   Product Firmware Version Restrictions Change: Updated Minimum Runnable Firmware for MG52 to MG 3.200.   Cisco Meraki Dashboard API Change: Updated section "Generate API Key": "Cisco Meraki Dashboard API is enabled by default on all organizations. To generate an API key, go to the My Profile page accessed via the avatar icon in the top right-hand corner of dashboard."   Throughput test to the Cisco Meraki Dashboard Change: Added "In order to leverage the full performance of a device, multiple sessions must be leveraged. This is best done by an endpoint or client, as the dashboard throughput tool creates a single session." How to convert an org from Co-term to Per Device licensing How to unassign a queued license in PDL Meraki Licensing FAQs Meraki Per-Device Licensing Overview Meraki Per-Device Licensing - Configuration The Science behind Per-Device Licensing Meraki MR License Guide Change: Added "Conversions to PDL will no longer be accepted. Customers should reach out to their Meraki Sales Representative to explore alternative options such as co-term or subscription licensing."   Cisco SecureX Sign-On Integration Change: Added "Cisco has announced that the last day for support for Cisco SecureX is July 31, 2024.  You can read more about the SecureX end-of-sale and end-of-life by clicking here."   Meraki Device-to-Cloud Connectivity - FIPS Change: Added MG; updated "FIPS-140 Compliant Firmware Versions" for MX, MS and MR. ... View more

  New articles: Organization Summary Change: New article.     Secure Connect: Cisco Secure Connect - DNS Troubleshooting Change: Added sections "Remote user cannot resolve internal DNS", "External DNS is not Resolving", "DNS Policy not Enforced", "Web Browser Reports Generic Error" and "DNS Policy Tester".   Cisco Secure Connect -Troubleshooting Remote Access Change: Added "Posture Failure", "Unable to request IP", "Umbrella is inactive" and "Remote user not able to access local application".   Cisco Secure Connect Foundation Meraki SD-WAN Integration Change: General article re-write.   Cisco Secure Connect Data Center List Change: Secure Connect Complete available in RIO1 and SAO1.     Cloud Monitoring for Catalyst: Cloud Monitoring for Catalyst Wireless Requirements Change: Added section "Supported Dashboard Clusters".     MX: Site-to-Site VPN Settings Change: Added "If the peer device is part of a high availability peer (HA), you will need to enter the HA's virtual IP."   WAN behavior on MX75/85/95/105 Change: Added "On MX 18.2+ firmware, a third wired uplink can be enabled with the MultiWAN feature. When MutliWAN is enabled, the WAN behavior on MX75/85/95/105 platforms is different from what is outlined in this article. To learn more about MultiWAN, please see MultiWAN Backup Uplink."   3G/4G Cellular Failover with USB Modems Change: Added "Additionally, upon first connection to the Meraki dashboard, MX devices should not be connected to USB modems / internal SIMs at all. This is because the cellular service will restart constantly if a connection cannot be established, leading to MX instability which will prevent the initial firmware upgrade from completing successfully."   MX67 and MX68 Datasheet Change: Added MX67C and MX67W to the description for MA-PWR-30WAC.   MX95/105 Datasheet Change: Updated "Max throughput with all advanced security features" for MX85.   Client-Tracking Options Change: Added "Changing the client tracking method from MAC-based to either IP or Unique Client Identifier will cause Group Policies to not work. Additionally, changing the tracking method will also reset your historical client usage statistics."     MS: Switch Ports Change: Added "Module" Search Type in "Searching for ports".   MS Switch Access Policies (802.1X) Change: Added "Critical Authentication VLAN is only supported in the Single Host, Multi Host, Multi Domain, and Multi Auth modes for Cloud Manager Catalyst switches running CS17 and higher. Critical Authentication VLAN is only supported in Single Host, Mult Host and Multi Domain on MS Classic Switches."     MR: Meraki Health - MR Access Point Details Change: Added "While both the AP performance tab and the wireless health tab both pull information from the same sources over the same time span, the performance tab is not able to capture variations in the overall volume of packets processed, which may lead to inconsistencies seen between the two tabs."   MR28 Installation Guide Change: Added "The T-Rail Channel Adapter Mount Kit (SKU: MA-MNT-CLG-1) can be purchased separately for mounting Access Points."   MR Hospitality Design Guide (CVD) Change: Updated MR models; added reference to free online training courses on the Meraki Learning Hub.   OpenRoaming integration with Cisco Spaces Change: Added "Some clients might refuse to connect to SSIDs using OpenRoaming when configured with weak encryption methods (e.g., WPA1 or 'WPA1 and WPA2'). Please ensure the SSIDs are configured with strong encryption, such as 'WPA2 Only' or 'WPA3', under Wireless > Configure > Access Control, in the 'WPA encryption' section."   Automatically Integrating Cisco Umbrella with Meraki Networks Change: Added "If Automatic Umbrella is explicitly provisioned, using Manual integration with Umbrella in such organizations will not be possible. This process is irreversible."   Configuring RADSec (MR) Change: Added "RADSec Keep Alives is introduced in MR 30.7.  Ensure networks are configured for MR 30.7+ for support."     SM: Apple Volume Purchase Program (VPP) Change: Added sections "Apple Books (iBooks) App License", "Location Based VPP in Apple School Manager & Apple Business Manager", "Troubleshooting VPP Installs" and "Removing App licenses".   Uninstalling Systems Manager and Removing Managed Devices Change: Added "If VPP apps are in use, remove VPP licenses from devices before removing the device from the network."   Cellular Data Management with Systems Manager Change: Added "The usage reported by SM is best effort. Dashboard may under report or over report data usage in comparison to service provider statements. Consult your service providers data usage for the most accurate data. On iOS devices, the Systems Manager app needs to be running in the background to update Dashboard and report the latest cell data usage."   Enrolling and Supervising iOS Devices using Apple Configurator 2.5 or Later Change: Added note regarding an “invalid profile” error during manual device enrollment (invalid enrollment authentication method).     MV: Meraki Vision Portal Changelog Change: Added release notes for up to v1.20.2.     General Administration: Active Directory Issue Resolution Guide Change: Added "If the Server IP address is located over a VPN Tunnel, communication from the WAN appliance with the server will originate from the highest numbered VLAN included in the VPN."   Using the Cisco Meraki Device Local Status Page Change: Updated the behavior of default credentials: "MX devices running MX 19+ firmware, MS devices running MS 17+ firmware and MS390/Catalyst devices running CS 17+ firmware will use the username admin and the password will be the serial number of the device (upper case letters and dashes). All devices running other firmware versions will use the serial number of the device (upper case letters and dashes) as the username with no password."   Small-Form Factor Pluggable (SFP) and Stacking Accessories Change: Added "All MSes, except MS130R and Catalyst. Not supported by MS390 / C9300/X/L." to MA-SFP-1GB-TX; added note about "Other non-M accessories" (like fan spares, power stacking cables, stackwise cables and power supplies).   VLAN Profiles Change: Added "The VLAN pool contains multiple VLAN IDs. If a specific VLAN experiences a client connection issue, such as repeated DHCP failures for a single client, it may be temporarily blocked before being reassigned."   Meraki Licensing Meraki Per-Device Licensing Overview Meraki Per-Device Licensing - Configuration Change: Added "Per-device licensing is no longer available for customers who would like to move to this licensing model for regions where Subscription Licensing is available."   Meraki SM Subscription Licensing Change: Added "Agent version 3.5.2+ is required to enroll new Windows and macOS devices into a Systems Manager network when subscription licensing is enabled. For more information about the Agent, including how to set the preferred agent version for enrolled devices check out this Documentation article."   Cisco Meraki Dashboard API Change: Added base URLs for the India and Government dashboard.   Creating and Applying Group Policies Change: Added "Cisco Meraki recommends as a best practice to create no more than 100 group policies per network."   Adaptive Policy Overview Change: Added "MS130X / MS130R".   Packet Capture Overview Change: Added section "Intelligent Capture". ... View more

  New articles: MG52E Patch Antenna Datasheet Change: New article.   Digital Optical Monitoring Change: New article.   MV IP Assignment Change: New article.   Updated status colors Change: New article.   Enterprise Agreements Change: New article.   FIPS 140 for Meraki Change: New article.     Secure Connect: Meraki Cloud Authentication (Cisco Secure Connect Embedded) Cisco Secure Connect - Identity Provider (IdP) Setup Change: Added "Client based ZTNA doesn't support Meraki Authentication."   Cisco Secure Connect - SecureX Integration Change: Added deprecation notice.     MG: MG IP Passthrough Change: Added MG52/MG52E.   Product Firmware Version Restrictions Change: Added MG52.     MX: Firewall Logging Change: Added "The Rule # will begin at 0 for the first configured firewall rule, then increment by 1 for each further rule. Therefore, if a flow hits the first configured firewall rule it will show the Rule # as 0 rather than 1."   vMX Setup Guide for Microsoft Azure Change: Added section "Unable to Delete the Resource Group after Deployment"; updated wording "Do not associate the vMX SD-WAN Subnet to the same route table that is associated with the resources subnet, this is known to cause packet loss."   VPN Concentrator Deployment Guide Change: Added "Virtual MX (vMX) devices are not supported as Wireless concentrators. As a result, Security & SD-WAN > Configure > Wireless Concentrator is not available on vMX devices."   MX Templates Best Practices Change: Added "Global bandwidth limits".   IPv6 Support on MX Security & SD-WAN Platforms - LAN Change: Added "Assignment of an IP address from a DHCPv6-PD prefix is only supported on the LAN. It is not supported on WAN or Cellular."   IPv6 Support on MX Security & SD-WAN Platforms - WAN Change: Added "Assignment of an IP address from a DHCPv6-PD prefix is only supported on the LAN. It is not supported on WAN or Cellular. For IPv6 uplink assignment on WAN or Cellular, please use DHCPv6-NA or statically assign an IP address from the DHCPv6-PD prefix." and "There is no option to disable IPv6 on MX WAN ports."   Source Based Default Routing Change: Added "Pings sourced from the VLAN specified within the source-based default routing configuration do not adhere to routing policies. In order to properly test source-based default routing, the ping must be sourced from an internal client."   Border Gateway Protocol (BGP) Change: Added "A one-armed VPN concentrator will advertise local Client VPN/AnyConnect VPN networks via iBGP and eBGP to external peers as long as the subnets are VPN Mode 'Enabled' on the Site-to-Site VPN page."   MX and Z-series Source IP for RADIUS Authentication Change: Added "In situations where the MX is configured with Multiple VLANs, the NAS-IP will be the MX IP of the VLAN with the lowest VLAN ID This is still the case even if that VLAN is not VPN-Enabled."   AnyConnect Troubleshooting Guide Change: Added "Do not include port number when adding the Meraki hostname to DUO configuration."     MS: Using the Cisco Meraki Device Local Status Page Change: Added "HTTP proxy is no longer supported on MS 15+ firmware. Nodes that use HTTP proxy without any other means to connect to dashboard may fail to connect."   Catalyst 9300X-M Datasheet Change: Updated switching capacity for C9300X-24HX-M to 880 Gbps.   Switch Stacks Change: Added section "Understanding how the Active Stack Member is Elected".     MR: Frequently Asked Questions for Cisco Meraki Access Point Antennas Change: Added note that certain extension cables have a plug on both ends, which require an additional adapter to question "What are the Antenna Extension Cable Options?", added MR53E to question "Is there a quick reference sheet comparing these indoor antennas?"   Automatic Frequency Coordination Change: Added note "After enabling Standard Power within the RF profile, assigned access points will reboot to enable the 6 GHz radio. It is recommended to enable AFC during a planned maintenance window."   Capturing Wireless Traffic from a Client Machine Change: Added sections "Starting Monitor Mode" and "Stopping Monitor Mode".     General Administration: Syslog Event Types and Log Samples Change: Added AnyConnect VPN events.   Deleting an Organization Change: Added requirement that no Google Domain binding must exist before deleting an Organization.   Rename a Client's Hostname Change: Added instructions on how to change back to an automatically assigned hostname.   Meraki Dashboard Login Authentication Options Change: Added "Once a Dashboard Administrator account is created, the Authentication Method used is fixed and cannot be altered. Should an administrator need to change their authentication method (e.g., from Email to SecureX), the existing administrator account must be deleted and then re-created with the desired authentication method."   Syslog Server Overview and Configuration Change: Added "Syslog Flows are a shared MR and MX category. Flows cannot be separated so that only MX flows or MR flows contribute the flows syslog category."   Meraki Licensing FAQs Change: Added email send intervals for both out of compliance and in compliance expiration emails to question "Will I be notified before my license expires?"   Throughput test to the Cisco Meraki Dashboard Change: Added "Dashboard throughput may be improved by ticking / unticking Site-to-Site VPN IPv4 default route. See 'Behavior of Management Traffic' for more information."   Information for Cisco Meraki for Government users Change: Added C9300/L/X-M models.   Using the Cisco Meraki Device Local Status Page Change: Added "APN Configuration on Newer Firmware" and "Differences Between Old and New APN configurations Settings Compared" for MG. ... View more

  New articles: Remote Access Deployment Remote Access - Traffic Steering Remote Access - Secure Client configuration Remote Access - Log Export Remote Access - Deploy Cisco Secure Client Remote Access - Client-based Posture Change: New articles.   Cisco Meraki India Region Change: New article.   Secure Connect: Cisco Secure Connect Sites - Meraki SD-WAN Integration Change: Added "Hub devices will remain listed in your Organization > Configure > Inventory page, for re-use in future provisioning tasks."   Meraki SD-WAN Hub Integration with Secure Connect Change: Updated because SD-WAN Hubs can now be connected to the Secure Connect cloud fabric using the Sites page.   Cloud Monitoring for Catalyst: Cloud Monitoring for Catalyst Wireless FAQ Change: Added "1560 Series access points".   MX: Client-Tracking Options Change: Added note that ports with supported max speeds 25G, 40G, 100G as well as Link Aggregation ports don't support Client Tracking features on MS390/C9300-M.   MX Access Policies (802.1X) Change: Added MX75.   SD-WAN and Traffic Shaping Change: Added "MXs and Zs with integrated cellular will not send out ICMP connectivity tests through their cellular interface. This is designed to help reduce the amount of traffic that is sent out of these uplinks. These uplinks can be metered or have data caps.  If this behavior is needed or desired, please reach out to Meraki Support to have this functionality enabled."   MR: AP Auto Locate Automatic Frequency Coordination Change: Added section "GNSS Antenna Installation".   Wireless (MR) Firmware Features Directory Change: Added "Automatic Frequency Coordination (AFC)".   MV: Meraki Vision Portal Changelog Change: Added release notes for up to v1.20.0.   SM: Samsung Knox Change: Added section "Samsung Knox Service Plugin".   General Administration: SAML Login History Events Change: Added "Session timeout earlier than expected".   Cisco Single Sign-On Integration Change: Added "Cisco SSO users cannot use Magic Search to locate a client. When they search for a client using the mac address or the name of the client and click on the client, they will be redirected to demo networks."   Creating and Deleting Dashboard Networks Change: Added network type "Wireless LAN Controller".   Meraki Cloud Architecture Creating a Dashboard Account and Organization Getting Started Checklist Dashboard Data Storage Privacy and Security Change: Added India region.   MR Subscription Licensing Change: Added "CW9163E-MR". ... View more

  New articles: MG52 Internal Antenna Datasheet MG52E Cellular Dipole Antenna Datasheet Change: New articles.   Uplink and Performance Tab Change: New article.   APN Selection Change: New article.   Cloud Monitoring for Catalyst: Cloud Monitoring for Catalyst Wireless Requirements Change: Clarified wording of required licenses for Access Points and Wireless LAN Controllers.   MX: Meraki SD-WAN Change: Updated failover times.   Auto VPN Port Change FAQ Change: Updated due date to Wednesday, July 31, 2024.   Creating a Layer 7 Firewall Rule Change: Added "Firewall rules, of any type, apply only to traffic which traverses through the firewall device. This means that firewall rules do not apply to traffic originating from (such as LDAP binds) or terminating at (such as client VPN) the firewall device.  Additionally, MX VLAN interfaces and the MX WAN IP addresses, themselves, are not considered in Allow or Deny rules."   Connection Monitoring for WAN Failover Change: Added "The MX also performs an ARP test to its default gateway and its IP (to detect a conflict). If these tests are successful, the ARP test is marked as good for 120 seconds. If any of those tests are unsuccessful, the MX decreases the testing interval to 30 seconds. If the next test then fails, ARP will be marked as failed on the uplink. Otherwise, a successful test will again mark ARP as good for another 120 seconds."   IPv6 Support on MX Security & SD-WAN Platforms - LAN Change: Added "If IPv4 addresses are provided using the "specified nameservers" option, but no IPv6 addresses are provided, the MX will advertise its VLAN interface addresses as IPv6 DNS servers to clients and begin proxying DNS queries as though the "proxy to upstream DNS" option is in use."   MS: MS and CS Firmware Features Directory Change: Added MS130-8P-I; added C9300/L/X models; added CS17 firmware features.   MR: Automatic Frequency Coordination Change: Added note "If an external GPS antenna is used to achieve satellite reception for the AP, the cable length will default to 10 meters. If no external antenna is detected, the cable length will default to 0 meters."   MV: Gen2 MV Mounting Options and Guidelines Change: Added note "The MV13, MV33, MV63, and MV93 series are products of Generation 3 MV.  All Gen3 cameras utilize a new set of mounting plate and mounting accessories."   Meraki Vision Portal Changelog Change: Added internal release notes for up to v4.2.2.   SM: Systems Manager Agent Release Notes Change: Added internal release notes for up to v1.19.3.   General Administration: Global Overview Change: Added "Organizations Status Changes Card" and "Firmware Status Card".   Meraki Per-Device Licensing - Configuration Change: Added "If you are interested in upgrading from Enterprise to Advanced Security or Secure SD-WAN Plus, please reach out to our Support team by submitting a case on our support home page or by calling into Meraki." ... View more

  New articles: MG52/52E Technical Specifications MG52/MG52E Installation Guide Change: New articles.   MG Cellular Best Practices Doc Change: New article.   Traffic Forwarding Issues on Firmware MX18.211 Change: New article.   A Guide to Troubleshooting Blocked Traffic Change: New article.   Cisco Meraki MR Firmware Restrictions Overview and FAQ Change: New article.   AP Auto Locate Change: New article.   Assa Abloy’s Zigbee Integration with MRs Change: New article.   Meraki Subscription Renewals Change: New article.   Accelerated Navigation with Search Change: New article.   Secure Connect: New Cisco Secure Connect Foundation Deployment with the Cloud Native Head End Enabled New Secure Connect Foundation Deployment without Cloud Native Head End Enabled Existing Cisco Secure Connect Foundation Deployment with Cloud Native Head End Enabled Existing Cisco Secure Connect Foundation Deployment without Cloud Native Head End Enabled Change: Updated title.   MG: MG MX/Z Cellular TAC Range Behavior during Connection Loss to Cisco Meraki Cloud Change: Added MG52 / MG52E.   MX: VPN Full-Tunnel Exclusion (Application and IP/URL Based Local Internet Breakout) Change: Added note "Encrypted DNS (eDNS) or TCP DNS query responses will not generate tunnel exclusions."   MX67/MX68 Installation Guide Change: Added section "Pre-install Preparation".   Meraki MX/Z Security and SD-WAN Licensing Change: Added note regarding the Per Device SD-WAN+ Licensing for Enterprise Agreement customers.   AnyConnect Client Download and Deployment Change: Added additional location for AnyConnect Profiles to be pushed to: "%ProgramData%\Cisco\Cisco Secure Client\VPN\Profile".   MS: MS130 Datasheet MS130 Series Installation Guide Change: Added MS130-8P-I.   MS130 Series Installation Guide Change: Added note "Rack-mount screws are not included in the box, but can be ordered separately. Meraki recommends sourcing rack-mount screws and nuts made for your specific rack."   MR: Wireless (MR) Firmware Features Directory MR Meraki RADIUS 2.0 WPA3 Encryption and Configuration Guide Adaptive Policy MR Configuration Guide Air Marshal Change: Updated for MR 31.1.x.   Configuring RADSec (MR) Change: Added sections "Enable RADSec Keep Alives" and "Configure TLS Idle Timeout".   Product Firmware Version Restrictions Change: Added "Maximum Runnable Firmware" for MR42, MR52, MR53, MR84, MR30H, MR33, MR74, MR42E, MR53E, MR20 and MR70.   Dynamic Frequency Selection (DFS) Change: Added section "Zero Wait DFS".   CW9163E Datasheet Change: Added "CW-ANT-GPS2-S-00 Active GNSS/GPS Antenna with RP-SMA Connector"; updated "Environmental" capabilities (Wind resistance, Icing protection, Corrosion, Solar radiation and Vibration).   MV: Meraki Vision Portal Changelog Change: Added release notes for up to v1.19.0.   MT: Common Sensor (MT) Event Log Messages Change: Added "Only applicable to the MT20 Sensor" to the event type "Battery Cover".   MT15 Datasheet - Indoor Air Quality w/CO2 Change: Added "PBAQ Algorithm (MT 1.6 or higher)".   SM: Apple MDM Push Certificate Change: Updated APN recovery and the requirements.   SM Enrollment Authentication Change: Added note "iOS and macOS devices enrolling through ADE (formerly DEP) may encounter enrollment issues if enrollment authentication settings change. Resolve ADE enrollment issues by creating a new ADE payload and ensure the "Use network's user authentication" value is set correctly."   General Administration: Meraki Subscription Licensing Overview Change: Added "EMEA-All, Australia, Emerging Markets, and Canada".   FAQ: Scheduled Maintenance Impacting Order and Device Claiming on the Meraki Dashboard Change: Added FAQ "What improvements will be achieved after the maintenance?" ... View more

  New articles: Overview and FAQ: MX Product Platforms Restricted in MX18.1 Change: New article.   Deploying Meraki vMX in a Transit VPC with AWS Cloud WAN Tunnel-Less Connect Change: New article.   Cloud Monitoring for Catalyst: Monitoring Catalyst Wireless 9800 Controllers Change: Added Assurance Alert "Access Point count exceeded allowed threshold".   Connecting Catalyst 9800 Wireless Controller to Dashboard Change: Added section "Access Point Registration Prerequisites".   MX: Blocking Inbound Traffic on MX Security Appliances Change: Added an example to section "Details"; added section "Traffic Flow using Port Forwarding Rule".   Client-Tracking Options Change: Added note "When modifying the 'Client tracking' the change will reset any client device with a manually configured group policy associated. Manual group policies are on the Network-Wide > Monitor > Clients page under the policy column. If a policy is needed for a particular associated device, it must be re-added once the change is made and the device populates on the client list."   AnyConnect on the MX Appliance Change: Added note "Depending on your operating system the output of ipconfig/ifconfig may show a default gateway of 0.0.0.0 and subnet mask of 255.255.255.255. This is expected behavior and does not affect the functionality of AnyConnect."   MX Access Policies (802.1X) Change: Added Z4(C).   Z4 Datasheet Z4C Datasheet MX67 and MX68 Datasheet Change: Added "802.1X wired and wireless support".   Using the MX Live tools Change: Added note "When the WAN appliance is in an HA pair the "Reboot WAN appliance" button only reboots the current appliance and not both."   Meraki and ThousandEyes Integration Troubleshooting Change: Added troubleshooting for issue "A ThousandEyes Organization already exists for this Account. Please contact your company's ThousandEyes Platform Administrator or ThousandEyes Support and share this ID."   MR: Frequently Asked Questions for Cisco Meraki Access Point Antennas Change: Added "How many CW-ANT-D1-NS-00 patch antennas do I need?" and "What is the correct way to cable the CW-ANT-D1-NS-00 patch antenna?".   Wi-Fi Personal Network (WPN) Change: Added note "Please ensure to unassign an iPSK from a port profile before attempting to delete this iPSK. Otherwise, the Meraki dashboard will display a validation error."   SoluM Electronic Shelf Labels (ESL) Integration with MRs Hanshow Electronic Shelf Labels (ESL) Integration with MRs Change: Added CW9166D1-MR and CW9163E-MR.   VusionGroup Electronic Shelf Labels (ESL) Integration with MRs Change: Renamed from "SES-imagotag" to "VusionGroup"; added MR46E as "not supported"; added CW9166D1-MR and CW9163E-MR as "planned".   Wireless (MR) Firmware Features Directory Change: Added CW9162-MR, CW9164-MR, CW9166I-MR, CW9166D1-MR and CW9163E-MR.   MV: MV Object Detection MV People Detection MV Presence Analytics Change: Added note "If there are no detections on the camera and no MQTT output for a camera, please ensure the camera is receiving the correct PoE power as stated in its datasheet. To see if you're hitting this issue, search the Event Log for Event Type "PoE power error. Incorrect PoE standard detected." which will be logged when the camera boots."   General Administration: Returns (RMAs), Warranties and End-of-Life Information Change: Clarified wording that only Meraki accessories fall under the warranty coverage.   Small-Form Factor Pluggable (SFP) and Stacking Accessories Change: Added note "Cisco Optics Compatibility".   Layer 3 and 7 Firewall Processing Order Change: Added note "Additionally, MX VLAN interfaces and the MX WAN IP addresses, themselves, are not considered in Allow or Deny rules".   SP-Initiated SAML SSO Configuration Guide Change: Added note that the SSO Login URL is required for SP-initiated SAML to function properly; added note that a Meraki admin account needs to be deleted from dashboard and then re-introduced as a SAML account, in order to convert an existing non-SAML Meraki admin account to a SAML account. The username attribute cannot match an existing Dashboard administrator or Meraki Authentication user's email address configured on any Dashboard Organization.   FAQ: Scheduled Maintenance Impacting Order and Device Claiming on the Meraki Dashboard Change: Move all dates to one week into the future: the mentioned maintenance will take place from June 6, 2024, at 23:00 to June 7, 2024, 01:00 UTC. ... View more

  MX650 Datasheet Change: New article.   Using the Cisco Secure Client Diagnostics and Reporting Tool (DART) Change: New article.   Meraki Assurance Overview Page Change: New article.   Secure Connect: Cisco Secure Connect Account Setup FAQ Change: Added FAQs regarding "The new provisioning process and API keys".   MX: AnyConnect on the MX Appliance Change: Added note that the magnetized AnyConnect Settings page in now available through the Early Access page.   NAT Exceptions with Manual Inbound Firewall on MX Security Appliances Change: Added note "If your MX is configured for Passthrough mode, the default firewall rule is Allow Any Any".   VPN Full-Tunnel Exclusion (Application and IP/URL Based Local Internet Breakout) Change: Added note "If you intend to use Application Based VPN Exclusions on templates, you must be using both MX SD-WAN+ as well as Z Secure Teleworker Licenses."   Configuring DNS Nameservers for DHCP Change: Added note that "the MX is capable of proxying up to 150 outstanding DNS queries at a time. For use cases that require more than 150 concurrent queries, use a public or local DNS server".   Site-to-Site VPN Settings Change: Added limitation "Non-Meraki VPN connections are only established over the active WAN uplink, and cannot be established across multiple WAN uplinks."   MS: MS and CS Firmware Features Directory Change: Added MS 17.   MS130 Datasheet Change: Added mGig port speeds (100M/1G/2.5G).   MR: RF Profiles Change: Added instructions how to select only 5-hi or 5-lo channels for the 5 GHz band in Channel assignment method.   MR36H Installation Guide Change: Updated the LED behaviour for the bottom ethernet ports.   MV: Meraki Vision Portal Changelog Change: Added release notes for up to v1.19.2.   MV Sense Custom Computer Vision Change: Added sections "Custom CV Webhooks", "cURL", "Python Requests" and "How do I manage filters?".   Sharing Video Change: Updated validity for sharing links: "The 'Download Now' link for an export can be used for one hour, from the time of page load. Refreshing the dashboard page generates a new download link. The 'Copy link to clipboard' button, generates a 7 day link, to download the export."   SM: Trusted Access for Secure Wireless Connectivity - Setup Guide Change: Added note "End users will have a corresponding profile to install for Wi-Fi access (from portal.meraki.com) for each Trusted Access SSID created on a MR network. This can lead to multiple profiles for users to download for access (one for each SSID). Administrators deploying the same SSID name across various MR networks and wishing to simplify the end user's experience may consider the option of a MR Wireless template. A Wireless network template allows a single profile for users to install for Wi-Fi access while still being able to authenticate into every SSID."   General Administration: Using the Cisco Meraki Device Local Status Page Change: Added note about TLS support for the Local Status Page for all MR access points with firmware MR 31.1.   Small Remote or Home Office VPN Options Change: Added section "Cisco Secure Client (formerly AnyConnect)". ... View more

  Secure Connect: Cisco Secure Connect Data Center List Change: Marked a few sites where Site-to-site interconnect is not available yet.   MG: MG Installation Guides Change: Added Spanish Hardware Installation Guides.   MX: MX64 Installation Guide MX65 Installation Guide Change: Added section "Safety and Warnings", "Pre-install Preparation", "Configure your Dashboard Network", "Check and Set Firmware" and "Check and Configure Upstream Firewall Settings".   MX64 and MX65 Overview and Specifications Change: Updated "Max VPN Throughput".   IPv6 Support on MX Security & SD-WAN Platforms - LAN Change: Added note "RNDSS support requires a minimum firmware version of MX 18.205."   Site-to-Site VPN Settings Change: Added "WAN appliances in Routed mode only support OSPF when using the "Single LAN" LAN setting. This can be set on Addressing & VLANs page."   MX Installation Guides Change: Added Spanish Hardware Installation Guides.   MR: CW9163E Installation Guide Change: Updated note "The AP is locked to approved antennas. Third-party antennas will not operate if inserted into the 2.4, 5 or 6 GHz ports."   Hotspot 2.0 Configuration Example Change: Added note "If choosing to use a Hidden SSID, note that the SSID name and WPA2 passphrase are case sensitive. When configuring the wireless profile on the client device ensure that they are identical to how they are configured in Dashboard. If you do not have the SSID name value entered correctly on your wireless client, your device will not be able to receive a response from the AP when probing for the wireless network."   MV: Meraki Vision Portal Changelog Change: Added release notes for up to v1.17.6.   Third Generation MV Cameras: Overview and Specifications Change: Added MV13 and MV33.   SM: Windows BitLocker Encryption with Meraki Systems Manager Change: Added note "Bit-Locker Keys are not stored in Dashboard and it is up to the administrators to securely store them. They cannot be stored on the managed endpoint's drive(s) that is being encrypted."   Systems Manager Agent Upgrade 2024 Change: Updated date to April 14, 2024.   General Administration: Summary Report Overview Change: Added note "Analytics must be enabled under Network-wide > General's Location and scanning section in order for a network to include this in the Summary Report" to section "Number of sessions over time".   Configuring the Default Block Message Change: Added note "This message will appear on the error page shown to blocked devices, unless those devices have client-specific block messages."; added instructions on how to set client specific block messages. ... View more

  Secure Connect: Cisco Secure Connect - Non-Meraki IPSec Tunnel Change: Added section "Multiple Tunnels".   Cisco Secure Connect - Meraki MX IPSec Tunnel Change: Added "Umbrella does not support the reassembly of fragmented IPSec traffic or IP packets for internet traffic. Thus, when a network device sends fragmented IPSec or IP packets to Umbrella, Umbrella drops the fragmented packets. IPSec tunnels for Secure Internet Access must have an MTU no larger than 1280 bytes. Fragmented packets in underlay or overlay are dropped."   Cisco Secure Connect - Identity Provider (IdP) Setup Cisco Secure Connect - Meraki Cloud Authentication Change: Updated description of Meraki Cloud Authentication.   MX: Site-to-Site VPN Settings Change: Added "Making changes to Non-Meraki VPN settings under Security & SD-WAN > Configure > Site-to-site VPN, might result in existing Non-Meraki VPN tunnels bouncing. We recommend that you make changes during a maintenance window to minimize the impact of Non-Meraki VPN tunnels bouncing."   vMX Comparison Datasheet Change: Added vMX-XL; added "Supported Features" and "Unsupported Features"; added "NAT Mode Support" comparison; added minimum firmware support for "Concentrator Mode"; added notes "vMX-XL is in public beta and only supported on AWS", "vMX-XL is supported in Passthrough or VPN Concentrator mode only. NAT mode is currently not supported on the vMX-XL", and "Static IP configuration from the dashboard, should match the IP address configuration on the cloud platform".   MultiWAN Backup Uplink Change: Added section "Failback behavior".   MX Sizing Guide & Principles Change: Updated NGFW throughput for MX67 / MX68.   Meraki MX/Z Security and SD-WAN Licensing Change: Added "Cellular failover".   Meraki Umbrella SDWAN Connector Deployment Guide Change: Added note "MV cameras and other Meraki devices that do not use FIPS Device-to-Cloud connectivity (TCP-443) must have their dashboard management traffic excluded from SIG tunnels, or they may experience issues with dashboard configuration updates."   MS: Catalyst 9300-M Datasheet Catalyst 9300L-M Datasheet Catalyst 9300X-M Datasheet Change: Added section "SFP Modules".   VLAN Profiles Change: Added C9300-M.   Enhanced Topology Change: Added sections "Navigating the Topology Map" and "Device Status Rationale".   General Administration: Meraki MX Subscription Licensing Meraki Z Subscription Licensing Change: Configuration Templates are available with the Essential license tier.   Information for Cisco Meraki for Government users Change: Added specific MX SKUs "MX67C-HW-NA" and "MX68CW-HW-NA"; added note "MX67C-HW-WW & MX68CW-HW-WW devices are not supported at this time"; added MG41, MG41E, as well as MG51, MG51E.   Meraki End-of-Life (EOL) Products and Dates Change: Added MG21 / MG21E.   Product Firmware Version Restrictions Change: Added Catalyst switches.   Returns (RMAs), Warranties and End-of-Life Information Change: Added "MT accessories". ... View more

  New Articles: Meraki Subscription Changes Change: New article.   Secure Connect: Site Localization Change: New article.   Systems Manager Agent Upgrade 2024 Change: New article.   Basic SFP Troubleshooting Guide Change: New article.   Traffic Analysis and Classification Change: New article.   Secure Connect: Cisco Secure Connect - Manage Web Policies Change: Added "At this time QUIC protocol is not supported and it is recommend to explicitly disable QUIC protocol in web browsers."   MX: SD-WAN Internet Policies (SD-Internet) Change: Added note "For some UI features that you see in the sections below, MX18.2+ is required. MX devices on firmware versions below MX18.2 can still use the feature in the same manner but the UI view is slightly different."   SD-WAN and Traffic Shaping Change: Added "MX95, MX105, MX85, MX75 Z1, Z3, Z3C, Z4, Z4C".   General MX Best Practices Change: Added note that SD-WAN Policies only appear after Active-Active Auto VPN is enabled; added note "On MX18.2 firmware while using MultiWAN MXs SD-WAN policies and load balancing policies do not apply to WAN3."   MX Firewall Settings Change: Added "The DNS request doesn't need to be from a specific client, the MX will map the FQDN based on the DNS response, regardless of which client made the DNS Request."; added "MX will not be able to snoop TCP-based or encrypted DNS traffic."   MultiWAN Backup Uplink Change: Added VPN behavior for AutoVPN; added "IPv6 is not supported on the Backup WAN uplink".   Trusted Traffic Exclusions Change: Added "The Cisco Meraki Cloud and Umbrella Cloud communications are trusted by default."   Security Center Change: Added section "Organization-wide".   Using Layer 3 Firewall Rules Change: Updated wording "Note that, on a network with an MX handling inter-VLAN routing, the IP address of the MX on the destination subnet may still respond to any services (For example: ICMP pings, SNMP, and so forth) it's configured to listen for, even if the rule is set to block traffic."   MS: Getting started: Cisco Catalyst 9300 Management with Meraki Dashboard Change: Added additional command required for cloud connectivity "ip http client source-interface {vlan-interface}"; added note "Do not use the OOB port (Gig0/0) management port on the rear of the switch for internet connectivity. Front facing ports only."; added note "SVIs only, no routed-port support at this time."   Setting Custom DHCP Options Change: Added section "Unsupported DHCP options on MS390 and Meraki-managed C9300".   Link Aggregation and Load Balancing Change: Added note "When configuring LACP port-channels on uplinks between remote switches/stacks, always configure the remote/downstream side of the port-channel first. Once the config has been applied configure the LACP port-channel on the upstream switch. This insures you don't strand the downstream switch. Catalyst 9300-M and MS390 switches will disable a port (for 30 seconds) if it detects a regular trunk port on the other end of a configured LACP port."   MS DHCP Servers Change: Updated for IPv6 options.   Small-Form Factor Pluggable (SFP) and Stacking Accessories Change: Added "C9300-NM-2Y-M / C9300-NM-2Y modules are supported only by C9300-24S/48S switches in firmware CS16.7(CS16GA2). Support for the rest of the C9300-M portfolio will be added in CS16GA3 firmware."   Switch Ports Change: Added C9300-M.   Catalyst 9300-M Datasheet Catalyst 9300X-M Datasheet Change: Added note "The PWR-C1-1900WAC-P-M provides 1900 W output power when the nominal input voltage is 230 V. If the nominal input voltage is 115 V, then the output power is limited to 1500 W. The power supply does not work with standard 125VAC power cords (common with 1100W and lower power supplies), you require a C21 power cable."   Switch Settings Change: Added "Assigning a static IP address and/or VLAN to a switch will override management VLAN settings configured on this page."; added "An Alternate Management Interface can also be configured to source management traffic such as Syslog messages and communication with RADIUS servers from a different VLAN."   FAQs: Migrate to Meraki management mode Change: Added "This [the replacement of hardware] differs from CW access points where the replacement will be the same mode as when the case was opened."   MR: Access Point Status Page Change: Added "BSSID details for each SSID and current radio configuration (such as bands, channels, channel-width, and transmit power)"; added description for the Enabled and Broadcasting columns in the BSSID details window  (blue note).   RF Profiles Change: Added "The individual selected bands in Wireless > Configure > Radio Settings > General > Band Selection do not reflect in the Enabled and Broadcasting columns of the BSSID details found in Wireless > Monitor > Access Points."   MR Mixed Firmware Networks Change: Added Meraki Wi-Fi 6E access points.   Extending the LAN with a Wireless Mesh Link Change: Added warning "Link aggregation on dual-port APs (e.g., MR52, MR53, MR53E, MR57, MR84) must be disabled to allow wired clients connected directly to the AP to gain network connectivity and pass traffic through the wired port on the AP."   MV: MV13 Installation Guide Change: Updated sections "Mounting Instructions" and "MV13 Install using the small mounting plate".   MV Presence Analytics Change: Added section "Installation guideline"; added "Minimum software requirements"; added "The data for each configuration will retain for 6 months per area/line from the date of the configuration."   MV63 Series Datasheet Change: Updated Field of View data; added Licensing options for MV Sense and Cloud Archive.   External RTSP Change: Added MV13 and MV33.   Meraki Vision Portal Changelog Change: Added release notes for up to v1.17.4.   SM: Systems Manager Agent Release Notes Change: Added release notes for up to v4.1.4.   Systems Manager Agent Upgrade 2024 Change: Added FAQ "What version(s) of the agent will clients be upgraded to?"   General Administration: Throughput test to the Cisco Meraki Dashboard Change: Added "Unidirectional or asymmetrical routing configuration" to section "Factors Affecting the Dashboard Throughput Test".   Returns (RMAs), Warranties and End-of-Life Information Change: Added "Products must be returned to Cisco's designated location within 30 days of receiving your Returns Material Authorization (RMA) number."   Meraki Subscription Licensing Overview Meraki Subscription Licensing - Subscription Claim Meraki Subscription Licensing - Network Binding Change: Updated for Subscription Changes.   Meraki MS Subscription Licensing Change: Added MS130R. ... View more

  MX: Calculating MX WAN MAC Addresses Change: Added WAN 3 Offset (for MultiWAN Backup Uplink).   Z4 Datasheet Z4C Datasheet Change: Added "Signal Coverage Patterns".   MX75 Datasheet MX85 Datasheet Change: Added "Fan" to physical capabilies table.   Threat Protection Change: Updated sections "Intrusion Detection and Prevention", "Traffic Inspection" and "Logging".   MS: FAQs: Migrate to Meraki management mode Change: Added FAQ "RMA:  What management mode will a replacement unit be in?"   MI: Meraki and ThousandEyes Integration Troubleshooting Change: Updated note "The Agent will be internally assigned an IP address from the range 198.51.100.x, typically 198.51.100.2".   MV: MV Encoding Improvements: Smart Codec Change: Added MV13, MV13X, MV33, MV33X.   Video Retention Gen3 Meraki MV Mounting Options and Guidelines Change: Added MV13, MV33.   General Administration: Meraki End-of-Life (EOL) Products and Dates Change: Added Z3-HW and Z3-HW-NA.   Moving Devices between Networks Change: Added section "MR Access Points". ... View more

    New articles: Meraki SDWAN 'HUB' Integration with Secure Connect Change: New article.   MX: MX Sizing Guide & Principles Change: Added "Maximum Number of AnyConnect Sessions" to Feature Specific Data; added "Advanced Security Throughput (Prevention) EMIX" to Performance Data; updated Performance Data table; added note for Advanced Security Throughput Tests with "IPS Mode in Detection or Prevention configuration".   Dynamic DNS (DDNS) Change: Added "If DDNS is in use with an HA pair configured with a virtual IP (VIP) behind NAT, DDNS will resolve to the NAT-translated (public) address of the management/uplink IP, rather than the NAT-translated virtual IP."   Trusted Traffic Exclusions Change: Added sections "How are my applications identified?" and "Trusted Application Category List".   MX Routing Behavior Change: AMP Registration and File disposition will adhere to the route priority.   VPN Full-Tunnel Exclusion (Application and IP/URL Based Local Internet Breakout) Change: Added "Traffic sourced from the MX itself will not adhere to VPN exclusion rules".   MS: Getting started: Cisco Catalyst 9300 Management with Meraki Dashboard Change: Added new C9300L and C9300X models; added firmware requirements for all C9300X, C9300 and 9300L switches (IOS-XE 17.9.3m3).   Catalyst 9300-M Datasheet Change: Updated Forwarding rate for C9300-24S-M and C9300-48S-M.   Switch Stacks Change: Added note "Based on the number of members in a stack, the switch stack may require approximately one hour to become operational and connect to the Meraki Dashboard".   MS Switch Access Policies (802.1X) Change: Added note "VLAN Profiles feature simplifies VLAN management across multiple sites by enabling dynamic assignment of VLANs based on descriptive names rather than numerical IDs. This facilitates easier management across multiple sites with varying VLAN configuration reducing the need for multiple RADIUS policies."; added descripton for "Increase Access Speed"; added references to C9300-Ms.   MR: Channel Bonding Change: Added note that while achieving higher PHY rates in 2.4GHz is theoretically possible, it requires using 40MHz channels (20 + 20 MHz channel bonding) in 2.4GHz, which Cisco Meraki does not enable because this feature is not recommendable in real-world enterprise deployments.   Wi-Fi Personal Network (WPN) Change: Removed the "2x SSIDs per Meraki dashboard network" scalability limit for the iPSK without RADIUS Authentication Type.   CW9163E Installation Guide Change: Added "CW9163E only supports mesh at 2.4 and 5 GHz".   MV: Motion Search and Motion Recap Change: Added note that Motion Detector v1 is currently only supported on MV21/71. For all other cameras, Motion Detector v2 is set as the default on MV5.5.1+ and Motion Detector v1 is deprecated.   Meraki Vision Portal Changelog Change: Added release notes for up to v1.17.3.   General Administration: Cisco Meraki Canada Region Change: Added note that Cloud Monitoring for Catalyst is currently not supported in the Meraki Canada Region.   Small-Form Factor Pluggable (SFP) and Stacking Accessories Change: Added MA-SFP-10GB-LRM as compatible for MS390/C9300.   Creating and Applying Group Policies Change: Added note "When doing a Configuration Sync to multiple target SSIDs, disable group policy assignment by device type before doing the sync".   MV Presence Analytics Change: Added "Area occupancy with duration" for MV2, MV12, MV22, MV32, MV52, MV72.   MT: MT12 Datasheet - Water Detection Change: Added accessories. External Power Adapter (Sold Separately): MA-PWR-USB-US, MA-PWR-USB-UK, MA-PWR-USB-EU, MA-PWR-USB-AU, MA-PWR-ETH (USB-C to Ethernet adapter). ... View more

  New articles: MultiWAN Backup Uplink Change: New article.   Catalyst 9300L-M Datasheet Catalyst 9300X-M Datasheet Change: New articles. MV13 Datasheet MV13 Installation Guide MV33 Datasheet MV33 Installation Guide Change: New articles.   Vision Portal: Attribute Search Change: New article.   Assurance Left Navigation Change: New article.   Enhanced Topology Change: New article.   MX: Meraki MX ThousandEyes Configuration Guide Change: Added information about Meraki and ThousandEyes region linkage.   Security and SD-WAN (MX,Z) Features Directory Change: Added note that MX75, MX85, MX95, MX105, MX250, and MX450 will have a performance boost (up to 3x with no additional cost) enabled by default in MX 18.2 and above firmware release; added "AnyConnect Enhancements".   SSID Tunneling and Layer 3 Roaming - VPN Concentration Configuration Guide Change: In case the MX is used as VPN concentrator it is recommended that the MX is not configured for NAT. However, an exception is made for virtual MX (vMX) devices in cloud environments where broadcast traffic limitations can impact network functions. In such cases, deploying vMX in Routed mode is recommended.   MS: Catalyst 9300/X/L-M Series Installation Guide Change: Added C9300L/X-M models; added note that the included video will link to a MS390 but the steps and information are the same for the C9300-M; added differentiation between soft and factory reset.   Switch Stacks Change: Added C9300/L/X-M models; added note "If the Active stack member is replaced there will be a short loss in connectivity when it is powered down while a new Active member is elected"; added MS130.   Small-Form Factor Pluggable(SFP) and Stacking Accessories Change: Added accessories for new C9300/L/X models.   Catalyst 9300-M Datasheet Change: Updated accessories table; added fiber models.   Getting started: Cisco Catalyst 9300 Management with Meraki Dashboard Change: Added note that the C9300-NM-2Y module requires CS16GA2firwmare (Feb '24) for management. When the software is available, customers might still need to unseat the module to bypass the compatibility checks during migration. After full migration and dashboard connectivity, re-insert/install the module (hot-swappable).   Port Schedules Change: Added note that each network can have at most five port schedules.   MS Mid-Mount Mounting Brackets Change: Updated "Compatible Switch Models" to include MS130 (except the 8-port and 12-port models).   MR: Wi-Fi Personal Network (WPN) Change: Added section "Supported Authentication Types"; added step-by-step user onboarding example.   Setting a WPA Encryption Mode Change: Added warning that WEP is deprecated in MR 30.X and newer firmware. Limited configuration options still exist when using the old Access control page (Wireless > Configure > Access control > View old version > WPA encryption mode) until this page is deprecated.   Channel Bonding Change: Added note that Channel bonding is not possible for 2.4GHz. Using anything other than 20MHz channels in 2.4GHz is not practical in real deployments as no clients negotiate 40MHz bonding in the 2.4GHz band.   MR28 Datasheet MR36 Datasheet MR36H Datasheet MR44 Datasheet MR46 Datasheet MR46E Datasheet MR56 Datasheet MR57 Datasheet MR76 Datasheet MR78 Datasheet MR86 Datasheet CW9162 Datasheet CW9164 Datasheet CW9166 Datasheet CW9163E Datasheet Change: Added note that 40MHz channels are supported only in the 5GHz band.   MV: MV63 Series Datasheet MV93 Series Datasheet Change: Added "DORI Specifications (Maximum Resolution)".   MV Object Detection Change: Added MV63 to list of compatible devices for vehicle detection.   Meraki Vision Portal Changelog Change: Added release notes for up to v1.17.0.   MT: MT MQTT Setup Guide Change: Added MT15 to "Per Sensor Metrics".   MT10 Installation Guide - Temperature and Humidity MT11 Probe Sensor Installation Guide MT12 Installation Guide - Water Detection MT14 Installation Guide - Indoor Air Quality MT15 Installation Guide - Indoor Air Quality w/CO2 MT20 Installation Guide - Open/Close Detection MT30 Installation Guide - Smart Automation Button MT40 Installation Guide - Smart Power Controller Change: Added MV13 and MV33 as compatible gateways. ... View more

  New articles: Meraki Wireless for Enterprise - Security Meraki Wireless for Enterprise Best Practices- RF Design Change: New articles.   Cloud Monitoring for Catalyst: Cloud Monitoring Overview and FAQ Change: Added section "Device-side routing changes" to "Known Issues/Caveats for Dashboard Monitoring".   MX / Z: 3G/4G Cellular Failover with USB Modems Change: Added note that the MX does not support IPv6 through a USB cellular modem.   AnyConnect Client Download and Deployment Change: Added AnyConnect / Secure Client download and configuration example for iOS.   AnyConnect Azure AD SAML Configuration Change: Added note "If a port other than the default 443 is used the URLs should include the custom port"; added note "If a custom hostname is utilized the Identifier and Reply URLs should contain this custom hostname and not the Meraki DDNS name".   MX Sizing Guide & Principles Change: Added warning that the Performance metrics detailed in this document are based on the Current Firmware Version listed above. It should be noted not all platforms can support MX 18.2x.   Security and SD-WAN (MX,Z) Features Directory Change: Added "SD-WAN and SD-Internet APIs".   Border Gateway Protocol (BGP) Change: Added requirement for routed mode BGP: MX must be running MX 18.205 or higher firmware.   Troubleshooting a Faulty MX Appliance or Z-Series Teleworker Gateway Change: Added another troubleshooting step "Try performing a factory reset on the device and reconfigure its management IP as needed" to section "Appliance has a solid orange power LED".   Firewall Logging Change: Added note to leave the Ports section of the Firewall Log empty for ICMP filtering.   IPSec VPN Port Overlap with Manual Port Forwarding rules Change: Added section "Firewall Port Forwarding".   Auto VPN Port Change FAQ Change: Updated cutover date to April 30, 2024.   MX Templates Best Practices Change: Update note "To manage Client VPN users across all networks bound to a template, you can do so in the User Management section of the Security & SD-WAN > Client VPN page of said template. If you would like to manage Client VPN users for a specific network bound to that template, you can do so in the Network-wide > Configure > Users page of that network".   Z4C Installation Guide Z4/Z4C Series Hardware Installation Guide Change: Added "2x External LTE Antenna".   MS: Switch Ports Change: Added note that MAC addresses for "MAC allow list" or "Sticky MAC allow list" can be separated by a space, comma or by entering a new MAC on each line.   MS125 Overview and Specifications Change: Updated Features table: "4x 1000/10000 Mbps SFP+ ports".   Product Firmware Version Restrictions Change: Added maximum firmware version MS 15.23 for MS420.   MR: Automatically Integrating Cisco Umbrella with Meraki Networks Change: Added note that the Automatic Umbrella provisioning behavior for organizations using the Co-termination licensing model changed.  Automatic Umbrella is no longer automatically provisioned when MR Advanced licenses or MR Enterprise + MR Upgrade licenses are claimed into a co-term organization (as of Jan 2024).   AP Neighbors Change: Added note that AP Neighbors is an Early Access feature and can be enabled by browsing to Organization > Configure > Early Access.   Wireless Encryption and Authentication Overview Change: Added section "Opportunistic Wireless Encryption".   MR57 Dual Uplink High Availability Change: Added Link Aggregation state table regarding Power Sharing and High Availability.   MV: Mobile App - Camera Experience Change: Added section "Camera-only Administrator".   MT: MT11 Probe Sensor Installation Guide MT15 Installation Guide - Indoor Air Quality w/CO2 MT20 Installation Guide - Open/Close Detection Change: Added / updated unboxing video.   SM: Windows BitLocker Encryption with Meraki Systems Manager Change: Added note that Bit-Locker Keys are not stored in Dashboard and it is up to the administrators to securely store them. They cannot be stored on the managed endpoint's drive(s) that is being encrypted.   Deploying Powershell and Shell Scripts in Systems Manager Change: Added section "macOS - Add timestamp text to a file on desktop (schedule script test file)"; added note "Some features and user interface screenshots referenced in this document may change or be unavailable during the early access stage".   General Administration: China Region Cloud Maintenance New IP Ranges 2023 FAQ Change: Updated deadline to add the new IP ranges to March 31, 2024.   Meraki End-of-Life (EOL) Products and Dates Change: Added Meraki Insight (MI) Licenses.   Blocking and Allowing Clients Change: Added note that Security Appliance policies applied for clients connected to a SSID with Meraki DHCP will not have an effect, as the client MAC and IP address will get NATed at the MR before reaching the Security Appliance.   Using Tags to Manage MR Access Points Using Tags to Broadcast SSIDs from Specific APs SSID Availability Manage Tags Change: Added note that although tags are case sensitive, it is advised to avoid using multiple capitalization variants and use completely unique tags per use-case.   Cisco Meraki Canada Region Change: Added note "Per-Device Licensing (PDL), the Meraki mobile app and the Meraki Umbrella SDWAN Connector are currently not supported in the Meraki Canada Region".   Misc: MX - Security & SD-WAN Change: Added references to free online training courses on the Meraki Learning Hub. ... View more

  New articles: Using Umbrella Multi-org with Cisco Secure Connect Change: New article.   Secure Connect: Cisco Secure Connect Account Setup FAQ Change: Added note that Umbrella customers with the Multi-org can continue to use Multi-org with Cisco Secure Connect. To do this, they must order Multi-org at the same time when they order Secure Connect. It's crucial to note that there is no direct integration between Secure Connect and Multi-org. Customers can access Multi-org via their existing Multi-org dashboard. Furthermore, the use of Multi-org will remain limited to DNS content and security policy management.   Cloud Monitoring for Catalyst: Cloud Monitoring for Catalyst Onboarding Change: Added note that when onboarding a stack, the single management IP should be entered which will onboard the entire stack.   MX/Z: MX Cold Swap - Replacing an Existing MX with a Different MX Change: Added section "Re-generate AnyConnect custom certificate (optional)".   MX Routing Behavior Change: Added note that the mentioned behavior is specific to traffic initiated by the MX appliance itself, any Meraki devices connected downstream will always adhere to the route priority of the MX, added ports for management traffic and AMP registration and file disposition lookups.   Configuring Active Directory with MX Security Appliances Change: Added note that communication with the server will originate from the highest numbered VLAN included in the VPN, if the Server IP address is located over a VPN Tunnel.   AnyConnect on the MX Appliance Change: Updated note that custom hostname certificates require MX firmware version 16.16+.   AnyConnect Authentication Methods Change: Added note that TLS is required to communicate with the Domain Controller for Active Directory authentication.   Client VPN Overview Change: Added note that MX utilizes LCP (Link Control Protocol) to assign IPs to clients, thus DHCP and Static Assignment are not supported.   MX75 Hardware Installation Guide Change: Added MA-PWR-100WAC-A to Accessories.   MX250/450 Series Hardware Installation Guide MX95/MX105 Series Hardware Installation Guide MX85 Series Hardware Installation Guide MX85 Datasheet MX75 Datasheet MX67 and MX68 Datasheet Z3 and Z3C Overview and Specifications Change: Updated throughputs.   Z4C Installation Guide Change: Added Verizon (US) to certified carriers.   Meraki MX/Z Security and SD-WAN Licensing Change: Added Z4 license SKUs.   MG MX/Z Cellular TAC Range Change: Added Z4C TAC Range.   MS: Switch Port View Change: Added "Topology changes" to packet counter table.   MS Switch Access Policies (802.1X) Change: Updated RADIUS Testing. If unreachable, the switch would transition into an alerting status to indicate a failure. Actual server failover is based on the client authentication requests. Failed client authentications will have the switch failover to the next available configured server.   FAQs: Migrate to Meraki management mode Change: Updated FAQ "If I already have DNAC essential/advantage licenses, do I need to purchase another license to use the Meraki dashboard today?", "Can I access the console after I initiate the migration?" and "What do I need to do if I want to migrate back to DNA management mode?".   Catalyst 9300-M Datasheet MS390 Datasheet Change: Added warning about MS390s existing in the same co-term Organization will require the same license edition (either Enterprise or Advanced) as the Catalyst 9300-M. License types cannot be mixed and will result in an incompatible license error (and vice versa).   MR: HTTP CONNECT Proxy Support on MR Access Points Change: Added notes for correct formatting for using the "Option 43" method.   Wi-Fi Personal Network (WPN) Change: Added CW9163E.   Scanning API for Location Analytics Solutions Change: Added differences 4, 5 and 6 to FAQ "What are the fundamental differences between V2 and V3 versions of the Scanning API?".   RF Profiles Change: Updated regarding Wi-Fi 6E / 6 GHz wireless.   NAT Mode with Meraki DHCP Change: Added note that a Lease Time of 24 hours will be given to wireless clients.   Meraki Local Authentication - MR 802.1X Change: Added note to consult vendor-specific documentation to determine the exact path to a device's certificate store or IdenTrust Commercial Root CA 1.   High Density Wi-Fi Deployments Change: Added note that once an antenna is detected by the AP it cannot be changed in dashboard until the antenna is removed and AP is rebooted.   MT: MT Frequently Asked Questions Change: Added section "2 Free MT Licenses with MR Advance License".   General Administration: Behavior during Connection Loss to Cisco Meraki Cloud Change: Added reboot behavior for different MX firmware versions.   Managing Multiple Networks with Configuration Templates Change: Added note that Firewall rules on Template networks do not show a hit counter column, which is expected behavior for this column to be missing.   Changing the Dashboard Network Time Zone Change: Added note that Winter and Summer time (Daylights savings time) is automatically applied by the dashboard.   How to do a License Transfer in Cotermination Change: Added note that transferring between a Co-Termination Licensing Organization, to a Per-Device Licensing Organization or vice-versa is not possible.   Organization Split Overview and FAQ Change: Added "Secure Connect Organizations" to section "Limitations of Organization Splits".   Managing Dashboard Administrators and Permissions Change: Added note that Read-Only admins can perform switch port cycles and cable tests.   SM: Windows Enrollment Change: Added section "Version 4.x+ with Bulk Enrollment Token"; updated section "Version 3.5.x - 3.9.x".   Misc: MV - Smart Cameras MX Quick Start Getting Started with Meraki Change: Added references to free online training courses on the Meraki Learning Hub. ... View more