New articles: BGP routing over IPsec VPN Change: New article.   Subscription Feature Tier Upgrade Change: New article.     Secure Connect: Remote Access Deployment Change: Added "Remote Access end device requires Umbrella Module to be active for DNS policy to take effect. Please check Deploy Umbrella module for configuration and installation steps."   Getting Started Meraki SD-WAN Hub Integration with Secure Connect Change: Added Z-Series.     Assurance: MI WAN Health Overview Change: Added section "ISP Renaming".     MG: MG52/52E Technical Specifications Change: Added Verizon to Certified Carriers.     MX: MX Sizing Guide & Principles Change: Added "Single & Multi-Tunnel VPN Throughput tests have the following configuration applied: QoS, DPI (NBAR), Layer 3 Firewall enabled".   Security and SD-WAN (MX,Z) Features Directory Change: Added section "Beta Release - MX 19.1.X Firmware Features".   EU Compliance Information Change: Updated note "EIRP on Access Points that support beamforming".     MS: Switch Stacks Change: Added note "Due to the management IP behavior described above, accessing the Local Status Page from any member will direct to the local status page of the active switch, regardless of which stack member you are physically connected to."   MS and CS Firmware Features Directory Change: Added section "Cloud-native IOS XE".   Catalyst 9300/X/L-M Series Installation Guide Change: Added section "Stack Cabling Installation (9300L)".     MR: Sponsored Guest Change: Added note "Access duration will be granted based on the configured duration when the access is granted. Changing the duration will not retroactively modify access duration for users who have already been authorized."     SM: Uninstalling Systems Manager and Removing Managed Devices Change: Added optional step 5 in section "ADE enrolled devices (Apple business manager / Apple school manager)" about removing devices from Apple Business Manager / Apple School Manager.   WPA3 Encryption and Configuration Guide Change: Added "When a client roams from a WPA2 to WPA3 SSID reauthentication will take place, but with minimal disruption to connectivity."   Seamless Meraki Integration with Cisco Spaces Change: Added FAQ "Is cross region integration supported if my Meraki Org is hosted in one region and my existing Spaces account is hosted in a different region?"     General Administration: FIPS 140 Configuration Guide for Cisco Meraki Change: Added "Download report is not available at this time, but is 'coming soon' for Meraki for Government cloud."; added "A known issue exists where SNMP Access is incorrectly showing "green" status when it should be "red".  There is no ETA for resolution at this time."   Contacting Support Change: Added note about "Call me now".   Managing Multiple Networks with Configuration Templates Change: Added section "Viewing Networks bound to a template".   The Science behind Per-Device Licensing Change: Added "Conversions to PDL will no longer be accepted. Customers should reach out to their Meraki Sales Representative to explore alternative options such as co-term or subscription licensing."   Dashboard Data Availability Change: Renamed from "Cloud Data Retention Policies".   Using the Cisco Meraki Device Local Status Page Change: Added "MX85/95/105 supports PoE+ on GbE Port 4, refer to the screenshot below on how to toggle PoE." ... View more

  New articles: MG52E Patch Antenna Datasheet Change: New article.   Digital Optical Monitoring Change: New article.   MV IP Assignment Change: New article.   Updated status colors Change: New article.   Enterprise Agreements Change: New article.   FIPS 140 for Meraki Change: New article.     Secure Connect: Meraki Cloud Authentication (Cisco Secure Connect Embedded) Cisco Secure Connect - Identity Provider (IdP) Setup Change: Added "Client based ZTNA doesn't support Meraki Authentication."   Cisco Secure Connect - SecureX Integration Change: Added deprecation notice.     MG: MG IP Passthrough Change: Added MG52/MG52E.   Product Firmware Version Restrictions Change: Added MG52.     MX: Firewall Logging Change: Added "The Rule # will begin at 0 for the first configured firewall rule, then increment by 1 for each further rule. Therefore, if a flow hits the first configured firewall rule it will show the Rule # as 0 rather than 1."   vMX Setup Guide for Microsoft Azure Change: Added section "Unable to Delete the Resource Group after Deployment"; updated wording "Do not associate the vMX SD-WAN Subnet to the same route table that is associated with the resources subnet, this is known to cause packet loss."   VPN Concentrator Deployment Guide Change: Added "Virtual MX (vMX) devices are not supported as Wireless concentrators. As a result, Security & SD-WAN > Configure > Wireless Concentrator is not available on vMX devices."   MX Templates Best Practices Change: Added "Global bandwidth limits".   IPv6 Support on MX Security & SD-WAN Platforms - LAN Change: Added "Assignment of an IP address from a DHCPv6-PD prefix is only supported on the LAN. It is not supported on WAN or Cellular."   IPv6 Support on MX Security & SD-WAN Platforms - WAN Change: Added "Assignment of an IP address from a DHCPv6-PD prefix is only supported on the LAN. It is not supported on WAN or Cellular. For IPv6 uplink assignment on WAN or Cellular, please use DHCPv6-NA or statically assign an IP address from the DHCPv6-PD prefix." and "There is no option to disable IPv6 on MX WAN ports."   Source Based Default Routing Change: Added "Pings sourced from the VLAN specified within the source-based default routing configuration do not adhere to routing policies. In order to properly test source-based default routing, the ping must be sourced from an internal client."   Border Gateway Protocol (BGP) Change: Added "A one-armed VPN concentrator will advertise local Client VPN/AnyConnect VPN networks via iBGP and eBGP to external peers as long as the subnets are VPN Mode 'Enabled' on the Site-to-Site VPN page."   MX and Z-series Source IP for RADIUS Authentication Change: Added "In situations where the MX is configured with Multiple VLANs, the NAS-IP will be the MX IP of the VLAN with the lowest VLAN ID This is still the case even if that VLAN is not VPN-Enabled."   AnyConnect Troubleshooting Guide Change: Added "Do not include port number when adding the Meraki hostname to DUO configuration."     MS: Using the Cisco Meraki Device Local Status Page Change: Added "HTTP proxy is no longer supported on MS 15+ firmware. Nodes that use HTTP proxy without any other means to connect to dashboard may fail to connect."   Catalyst 9300X-M Datasheet Change: Updated switching capacity for C9300X-24HX-M to 880 Gbps.   Switch Stacks Change: Added section "Understanding how the Active Stack Member is Elected".     MR: Frequently Asked Questions for Cisco Meraki Access Point Antennas Change: Added note that certain extension cables have a plug on both ends, which require an additional adapter to question "What are the Antenna Extension Cable Options?", added MR53E to question "Is there a quick reference sheet comparing these indoor antennas?"   Automatic Frequency Coordination Change: Added note "After enabling Standard Power within the RF profile, assigned access points will reboot to enable the 6 GHz radio. It is recommended to enable AFC during a planned maintenance window."   Capturing Wireless Traffic from a Client Machine Change: Added sections "Starting Monitor Mode" and "Stopping Monitor Mode".     General Administration: Syslog Event Types and Log Samples Change: Added AnyConnect VPN events.   Deleting an Organization Change: Added requirement that no Google Domain binding must exist before deleting an Organization.   Rename a Client's Hostname Change: Added instructions on how to change back to an automatically assigned hostname.   Meraki Dashboard Login Authentication Options Change: Added "Once a Dashboard Administrator account is created, the Authentication Method used is fixed and cannot be altered. Should an administrator need to change their authentication method (e.g., from Email to SecureX), the existing administrator account must be deleted and then re-created with the desired authentication method."   Syslog Server Overview and Configuration Change: Added "Syslog Flows are a shared MR and MX category. Flows cannot be separated so that only MX flows or MR flows contribute the flows syslog category."   Meraki Licensing FAQs Change: Added email send intervals for both out of compliance and in compliance expiration emails to question "Will I be notified before my license expires?"   Throughput test to the Cisco Meraki Dashboard Change: Added "Dashboard throughput may be improved by ticking / unticking Site-to-Site VPN IPv4 default route. See 'Behavior of Management Traffic' for more information."   Information for Cisco Meraki for Government users Change: Added C9300/L/X-M models.   Using the Cisco Meraki Device Local Status Page Change: Added "APN Configuration on Newer Firmware" and "Differences Between Old and New APN configurations Settings Compared" for MG. ... View more

  New articles: Remote Access Deployment Remote Access - Traffic Steering Remote Access - Secure Client configuration Remote Access - Log Export Remote Access - Deploy Cisco Secure Client Remote Access - Client-based Posture Change: New articles.   Cisco Meraki India Region Change: New article.   Secure Connect: Cisco Secure Connect Sites - Meraki SD-WAN Integration Change: Added "Hub devices will remain listed in your Organization > Configure > Inventory page, for re-use in future provisioning tasks."   Meraki SD-WAN Hub Integration with Secure Connect Change: Updated because SD-WAN Hubs can now be connected to the Secure Connect cloud fabric using the Sites page.   Cloud Monitoring for Catalyst: Cloud Monitoring for Catalyst Wireless FAQ Change: Added "1560 Series access points".   MX: Client-Tracking Options Change: Added note that ports with supported max speeds 25G, 40G, 100G as well as Link Aggregation ports don't support Client Tracking features on MS390/C9300-M.   MX Access Policies (802.1X) Change: Added MX75.   SD-WAN and Traffic Shaping Change: Added "MXs and Zs with integrated cellular will not send out ICMP connectivity tests through their cellular interface. This is designed to help reduce the amount of traffic that is sent out of these uplinks. These uplinks can be metered or have data caps.  If this behavior is needed or desired, please reach out to Meraki Support to have this functionality enabled."   MR: AP Auto Locate Automatic Frequency Coordination Change: Added section "GNSS Antenna Installation".   Wireless (MR) Firmware Features Directory Change: Added "Automatic Frequency Coordination (AFC)".   MV: Meraki Vision Portal Changelog Change: Added release notes for up to v1.20.0.   SM: Samsung Knox Change: Added section "Samsung Knox Service Plugin".   General Administration: SAML Login History Events Change: Added "Session timeout earlier than expected".   Cisco Single Sign-On Integration Change: Added "Cisco SSO users cannot use Magic Search to locate a client. When they search for a client using the mac address or the name of the client and click on the client, they will be redirected to demo networks."   Creating and Deleting Dashboard Networks Change: Added network type "Wireless LAN Controller".   Meraki Cloud Architecture Creating a Dashboard Account and Organization Getting Started Checklist Dashboard Data Storage Privacy and Security Change: Added India region.   MR Subscription Licensing Change: Added "CW9163E-MR". ... View more

  New articles: MG52 Internal Antenna Datasheet MG52E Cellular Dipole Antenna Datasheet Change: New articles.   Uplink and Performance Tab Change: New article.   APN Selection Change: New article.   Cloud Monitoring for Catalyst: Cloud Monitoring for Catalyst Wireless Requirements Change: Clarified wording of required licenses for Access Points and Wireless LAN Controllers.   MX: Meraki SD-WAN Change: Updated failover times.   Auto VPN Port Change FAQ Change: Updated due date to Wednesday, July 31, 2024.   Creating a Layer 7 Firewall Rule Change: Added "Firewall rules, of any type, apply only to traffic which traverses through the firewall device. This means that firewall rules do not apply to traffic originating from (such as LDAP binds) or terminating at (such as client VPN) the firewall device.  Additionally, MX VLAN interfaces and the MX WAN IP addresses, themselves, are not considered in Allow or Deny rules."   Connection Monitoring for WAN Failover Change: Added "The MX also performs an ARP test to its default gateway and its IP (to detect a conflict). If these tests are successful, the ARP test is marked as good for 120 seconds. If any of those tests are unsuccessful, the MX decreases the testing interval to 30 seconds. If the next test then fails, ARP will be marked as failed on the uplink. Otherwise, a successful test will again mark ARP as good for another 120 seconds."   IPv6 Support on MX Security & SD-WAN Platforms - LAN Change: Added "If IPv4 addresses are provided using the "specified nameservers" option, but no IPv6 addresses are provided, the MX will advertise its VLAN interface addresses as IPv6 DNS servers to clients and begin proxying DNS queries as though the "proxy to upstream DNS" option is in use."   MS: MS and CS Firmware Features Directory Change: Added MS130-8P-I; added C9300/L/X models; added CS17 firmware features.   MR: Automatic Frequency Coordination Change: Added note "If an external GPS antenna is used to achieve satellite reception for the AP, the cable length will default to 10 meters. If no external antenna is detected, the cable length will default to 0 meters."   MV: Gen2 MV Mounting Options and Guidelines Change: Added note "The MV13, MV33, MV63, and MV93 series are products of Generation 3 MV.  All Gen3 cameras utilize a new set of mounting plate and mounting accessories."   Meraki Vision Portal Changelog Change: Added internal release notes for up to v4.2.2.   SM: Systems Manager Agent Release Notes Change: Added internal release notes for up to v1.19.3.   General Administration: Global Overview Change: Added "Organizations Status Changes Card" and "Firmware Status Card".   Meraki Per-Device Licensing - Configuration Change: Added "If you are interested in upgrading from Enterprise to Advanced Security or Secure SD-WAN Plus, please reach out to our Support team by submitting a case on our support home page or by calling into Meraki." ... View more

  New articles: MG52/52E Technical Specifications MG52/MG52E Installation Guide Change: New articles.   MG Cellular Best Practices Doc Change: New article.   Traffic Forwarding Issues on Firmware MX18.211 Change: New article.   A Guide to Troubleshooting Blocked Traffic Change: New article.   Cisco Meraki MR Firmware Restrictions Overview and FAQ Change: New article.   AP Auto Locate Change: New article.   Assa Abloy’s Zigbee Integration with MRs Change: New article.   Meraki Subscription Renewals Change: New article.   Accelerated Navigation with Search Change: New article.   Secure Connect: New Cisco Secure Connect Foundation Deployment with the Cloud Native Head End Enabled New Secure Connect Foundation Deployment without Cloud Native Head End Enabled Existing Cisco Secure Connect Foundation Deployment with Cloud Native Head End Enabled Existing Cisco Secure Connect Foundation Deployment without Cloud Native Head End Enabled Change: Updated title.   MG: MG MX/Z Cellular TAC Range Behavior during Connection Loss to Cisco Meraki Cloud Change: Added MG52 / MG52E.   MX: VPN Full-Tunnel Exclusion (Application and IP/URL Based Local Internet Breakout) Change: Added note "Encrypted DNS (eDNS) or TCP DNS query responses will not generate tunnel exclusions."   MX67/MX68 Installation Guide Change: Added section "Pre-install Preparation".   Meraki MX/Z Security and SD-WAN Licensing Change: Added note regarding the Per Device SD-WAN+ Licensing for Enterprise Agreement customers.   AnyConnect Client Download and Deployment Change: Added additional location for AnyConnect Profiles to be pushed to: "%ProgramData%\Cisco\Cisco Secure Client\VPN\Profile".   MS: MS130 Datasheet MS130 Series Installation Guide Change: Added MS130-8P-I.   MS130 Series Installation Guide Change: Added note "Rack-mount screws are not included in the box, but can be ordered separately. Meraki recommends sourcing rack-mount screws and nuts made for your specific rack."   MR: Wireless (MR) Firmware Features Directory MR Meraki RADIUS 2.0 WPA3 Encryption and Configuration Guide Adaptive Policy MR Configuration Guide Air Marshal Change: Updated for MR 31.1.x.   Configuring RADSec (MR) Change: Added sections "Enable RADSec Keep Alives" and "Configure TLS Idle Timeout".   Product Firmware Version Restrictions Change: Added "Maximum Runnable Firmware" for MR42, MR52, MR53, MR84, MR30H, MR33, MR74, MR42E, MR53E, MR20 and MR70.   Dynamic Frequency Selection (DFS) Change: Added section "Zero Wait DFS".   CW9163E Datasheet Change: Added "CW-ANT-GPS2-S-00 Active GNSS/GPS Antenna with RP-SMA Connector"; updated "Environmental" capabilities (Wind resistance, Icing protection, Corrosion, Solar radiation and Vibration).   MV: Meraki Vision Portal Changelog Change: Added release notes for up to v1.19.0.   MT: Common Sensor (MT) Event Log Messages Change: Added "Only applicable to the MT20 Sensor" to the event type "Battery Cover".   MT15 Datasheet - Indoor Air Quality w/CO2 Change: Added "PBAQ Algorithm (MT 1.6 or higher)".   SM: Apple MDM Push Certificate Change: Updated APN recovery and the requirements.   SM Enrollment Authentication Change: Added note "iOS and macOS devices enrolling through ADE (formerly DEP) may encounter enrollment issues if enrollment authentication settings change. Resolve ADE enrollment issues by creating a new ADE payload and ensure the "Use network's user authentication" value is set correctly."   General Administration: Meraki Subscription Licensing Overview Change: Added "EMEA-All, Australia, Emerging Markets, and Canada".   FAQ: Scheduled Maintenance Impacting Order and Device Claiming on the Meraki Dashboard Change: Added FAQ "What improvements will be achieved after the maintenance?" ... View more

  New articles: Overview and FAQ: MX Product Platforms Restricted in MX18.1 Change: New article.   Deploying Meraki vMX in a Transit VPC with AWS Cloud WAN Tunnel-Less Connect Change: New article.   Cloud Monitoring for Catalyst: Monitoring Catalyst Wireless 9800 Controllers Change: Added Assurance Alert "Access Point count exceeded allowed threshold".   Connecting Catalyst 9800 Wireless Controller to Dashboard Change: Added section "Access Point Registration Prerequisites".   MX: Blocking Inbound Traffic on MX Security Appliances Change: Added an example to section "Details"; added section "Traffic Flow using Port Forwarding Rule".   Client-Tracking Options Change: Added note "When modifying the 'Client tracking' the change will reset any client device with a manually configured group policy associated. Manual group policies are on the Network-Wide > Monitor > Clients page under the policy column. If a policy is needed for a particular associated device, it must be re-added once the change is made and the device populates on the client list."   AnyConnect on the MX Appliance Change: Added note "Depending on your operating system the output of ipconfig/ifconfig may show a default gateway of 0.0.0.0 and subnet mask of 255.255.255.255. This is expected behavior and does not affect the functionality of AnyConnect."   MX Access Policies (802.1X) Change: Added Z4(C).   Z4 Datasheet Z4C Datasheet MX67 and MX68 Datasheet Change: Added "802.1X wired and wireless support".   Using the MX Live tools Change: Added note "When the WAN appliance is in an HA pair the "Reboot WAN appliance" button only reboots the current appliance and not both."   Meraki and ThousandEyes Integration Troubleshooting Change: Added troubleshooting for issue "A ThousandEyes Organization already exists for this Account. Please contact your company's ThousandEyes Platform Administrator or ThousandEyes Support and share this ID."   MR: Frequently Asked Questions for Cisco Meraki Access Point Antennas Change: Added "How many CW-ANT-D1-NS-00 patch antennas do I need?" and "What is the correct way to cable the CW-ANT-D1-NS-00 patch antenna?".   Wi-Fi Personal Network (WPN) Change: Added note "Please ensure to unassign an iPSK from a port profile before attempting to delete this iPSK. Otherwise, the Meraki dashboard will display a validation error."   SoluM Electronic Shelf Labels (ESL) Integration with MRs Hanshow Electronic Shelf Labels (ESL) Integration with MRs Change: Added CW9166D1-MR and CW9163E-MR.   VusionGroup Electronic Shelf Labels (ESL) Integration with MRs Change: Renamed from "SES-imagotag" to "VusionGroup"; added MR46E as "not supported"; added CW9166D1-MR and CW9163E-MR as "planned".   Wireless (MR) Firmware Features Directory Change: Added CW9162-MR, CW9164-MR, CW9166I-MR, CW9166D1-MR and CW9163E-MR.   MV: MV Object Detection MV People Detection MV Presence Analytics Change: Added note "If there are no detections on the camera and no MQTT output for a camera, please ensure the camera is receiving the correct PoE power as stated in its datasheet. To see if you're hitting this issue, search the Event Log for Event Type "PoE power error. Incorrect PoE standard detected." which will be logged when the camera boots."   General Administration: Returns (RMAs), Warranties and End-of-Life Information Change: Clarified wording that only Meraki accessories fall under the warranty coverage.   Small-Form Factor Pluggable (SFP) and Stacking Accessories Change: Added note "Cisco Optics Compatibility".   Layer 3 and 7 Firewall Processing Order Change: Added note "Additionally, MX VLAN interfaces and the MX WAN IP addresses, themselves, are not considered in Allow or Deny rules".   SP-Initiated SAML SSO Configuration Guide Change: Added note that the SSO Login URL is required for SP-initiated SAML to function properly; added note that a Meraki admin account needs to be deleted from dashboard and then re-introduced as a SAML account, in order to convert an existing non-SAML Meraki admin account to a SAML account. The username attribute cannot match an existing Dashboard administrator or Meraki Authentication user's email address configured on any Dashboard Organization.   FAQ: Scheduled Maintenance Impacting Order and Device Claiming on the Meraki Dashboard Change: Move all dates to one week into the future: the mentioned maintenance will take place from June 6, 2024, at 23:00 to June 7, 2024, 01:00 UTC. ... View more

  MX650 Datasheet Change: New article.   Using the Cisco Secure Client Diagnostics and Reporting Tool (DART) Change: New article.   Meraki Assurance Overview Page Change: New article.   Secure Connect: Cisco Secure Connect Account Setup FAQ Change: Added FAQs regarding "The new provisioning process and API keys".   MX: AnyConnect on the MX Appliance Change: Added note that the magnetized AnyConnect Settings page in now available through the Early Access page.   NAT Exceptions with Manual Inbound Firewall on MX Security Appliances Change: Added note "If your MX is configured for Passthrough mode, the default firewall rule is Allow Any Any".   VPN Full-Tunnel Exclusion (Application and IP/URL Based Local Internet Breakout) Change: Added note "If you intend to use Application Based VPN Exclusions on templates, you must be using both MX SD-WAN+ as well as Z Secure Teleworker Licenses."   Configuring DNS Nameservers for DHCP Change: Added note that "the MX is capable of proxying up to 150 outstanding DNS queries at a time. For use cases that require more than 150 concurrent queries, use a public or local DNS server".   Site-to-Site VPN Settings Change: Added limitation "Non-Meraki VPN connections are only established over the active WAN uplink, and cannot be established across multiple WAN uplinks."   MS: MS and CS Firmware Features Directory Change: Added MS 17.   MS130 Datasheet Change: Added mGig port speeds (100M/1G/2.5G).   MR: RF Profiles Change: Added instructions how to select only 5-hi or 5-lo channels for the 5 GHz band in Channel assignment method.   MR36H Installation Guide Change: Updated the LED behaviour for the bottom ethernet ports.   MV: Meraki Vision Portal Changelog Change: Added release notes for up to v1.19.2.   MV Sense Custom Computer Vision Change: Added sections "Custom CV Webhooks", "cURL", "Python Requests" and "How do I manage filters?".   Sharing Video Change: Updated validity for sharing links: "The 'Download Now' link for an export can be used for one hour, from the time of page load. Refreshing the dashboard page generates a new download link. The 'Copy link to clipboard' button, generates a 7 day link, to download the export."   SM: Trusted Access for Secure Wireless Connectivity - Setup Guide Change: Added note "End users will have a corresponding profile to install for Wi-Fi access (from portal.meraki.com) for each Trusted Access SSID created on a MR network. This can lead to multiple profiles for users to download for access (one for each SSID). Administrators deploying the same SSID name across various MR networks and wishing to simplify the end user's experience may consider the option of a MR Wireless template. A Wireless network template allows a single profile for users to install for Wi-Fi access while still being able to authenticate into every SSID."   General Administration: Using the Cisco Meraki Device Local Status Page Change: Added note about TLS support for the Local Status Page for all MR access points with firmware MR 31.1.   Small Remote or Home Office VPN Options Change: Added section "Cisco Secure Client (formerly AnyConnect)". ... View more

  Secure Connect: Cisco Secure Connect Data Center List Change: Marked a few sites where Site-to-site interconnect is not available yet.   MG: MG Installation Guides Change: Added Spanish Hardware Installation Guides.   MX: MX64 Installation Guide MX65 Installation Guide Change: Added section "Safety and Warnings", "Pre-install Preparation", "Configure your Dashboard Network", "Check and Set Firmware" and "Check and Configure Upstream Firewall Settings".   MX64 and MX65 Overview and Specifications Change: Updated "Max VPN Throughput".   IPv6 Support on MX Security & SD-WAN Platforms - LAN Change: Added note "RNDSS support requires a minimum firmware version of MX 18.205."   Site-to-Site VPN Settings Change: Added "WAN appliances in Routed mode only support OSPF when using the "Single LAN" LAN setting. This can be set on Addressing & VLANs page."   MX Installation Guides Change: Added Spanish Hardware Installation Guides.   MR: CW9163E Installation Guide Change: Updated note "The AP is locked to approved antennas. Third-party antennas will not operate if inserted into the 2.4, 5 or 6 GHz ports."   Hotspot 2.0 Configuration Example Change: Added note "If choosing to use a Hidden SSID, note that the SSID name and WPA2 passphrase are case sensitive. When configuring the wireless profile on the client device ensure that they are identical to how they are configured in Dashboard. If you do not have the SSID name value entered correctly on your wireless client, your device will not be able to receive a response from the AP when probing for the wireless network."   MV: Meraki Vision Portal Changelog Change: Added release notes for up to v1.17.6.   Third Generation MV Cameras: Overview and Specifications Change: Added MV13 and MV33.   SM: Windows BitLocker Encryption with Meraki Systems Manager Change: Added note "Bit-Locker Keys are not stored in Dashboard and it is up to the administrators to securely store them. They cannot be stored on the managed endpoint's drive(s) that is being encrypted."   Systems Manager Agent Upgrade 2024 Change: Updated date to April 14, 2024.   General Administration: Summary Report Overview Change: Added note "Analytics must be enabled under Network-wide > General's Location and scanning section in order for a network to include this in the Summary Report" to section "Number of sessions over time".   Configuring the Default Block Message Change: Added note "This message will appear on the error page shown to blocked devices, unless those devices have client-specific block messages."; added instructions on how to set client specific block messages. ... View more

  Secure Connect: Cisco Secure Connect - Non-Meraki IPSec Tunnel Change: Added section "Multiple Tunnels".   Cisco Secure Connect - Meraki MX IPSec Tunnel Change: Added "Umbrella does not support the reassembly of fragmented IPSec traffic or IP packets for internet traffic. Thus, when a network device sends fragmented IPSec or IP packets to Umbrella, Umbrella drops the fragmented packets. IPSec tunnels for Secure Internet Access must have an MTU no larger than 1280 bytes. Fragmented packets in underlay or overlay are dropped."   Cisco Secure Connect - Identity Provider (IdP) Setup Cisco Secure Connect - Meraki Cloud Authentication Change: Updated description of Meraki Cloud Authentication.   MX: Site-to-Site VPN Settings Change: Added "Making changes to Non-Meraki VPN settings under Security & SD-WAN > Configure > Site-to-site VPN, might result in existing Non-Meraki VPN tunnels bouncing. We recommend that you make changes during a maintenance window to minimize the impact of Non-Meraki VPN tunnels bouncing."   vMX Comparison Datasheet Change: Added vMX-XL; added "Supported Features" and "Unsupported Features"; added "NAT Mode Support" comparison; added minimum firmware support for "Concentrator Mode"; added notes "vMX-XL is in public beta and only supported on AWS", "vMX-XL is supported in Passthrough or VPN Concentrator mode only. NAT mode is currently not supported on the vMX-XL", and "Static IP configuration from the dashboard, should match the IP address configuration on the cloud platform".   MultiWAN Backup Uplink Change: Added section "Failback behavior".   MX Sizing Guide & Principles Change: Updated NGFW throughput for MX67 / MX68.   Meraki MX/Z Security and SD-WAN Licensing Change: Added "Cellular failover".   Meraki Umbrella SDWAN Connector Deployment Guide Change: Added note "MV cameras and other Meraki devices that do not use FIPS Device-to-Cloud connectivity (TCP-443) must have their dashboard management traffic excluded from SIG tunnels, or they may experience issues with dashboard configuration updates."   MS: Catalyst 9300-M Datasheet Catalyst 9300L-M Datasheet Catalyst 9300X-M Datasheet Change: Added section "SFP Modules".   VLAN Profiles Change: Added C9300-M.   Enhanced Topology Change: Added sections "Navigating the Topology Map" and "Device Status Rationale".   General Administration: Meraki MX Subscription Licensing Meraki Z Subscription Licensing Change: Configuration Templates are available with the Essential license tier.   Information for Cisco Meraki for Government users Change: Added specific MX SKUs "MX67C-HW-NA" and "MX68CW-HW-NA"; added note "MX67C-HW-WW & MX68CW-HW-WW devices are not supported at this time"; added MG41, MG41E, as well as MG51, MG51E.   Meraki End-of-Life (EOL) Products and Dates Change: Added MG21 / MG21E.   Product Firmware Version Restrictions Change: Added Catalyst switches.   Returns (RMAs), Warranties and End-of-Life Information Change: Added "MT accessories". ... View more

  New Articles: Meraki Subscription Changes Change: New article.   Secure Connect: Site Localization Change: New article.   Systems Manager Agent Upgrade 2024 Change: New article.   Basic SFP Troubleshooting Guide Change: New article.   Traffic Analysis and Classification Change: New article.   Secure Connect: Cisco Secure Connect - Manage Web Policies Change: Added "At this time QUIC protocol is not supported and it is recommend to explicitly disable QUIC protocol in web browsers."   MX: SD-WAN Internet Policies (SD-Internet) Change: Added note "For some UI features that you see in the sections below, MX18.2+ is required. MX devices on firmware versions below MX18.2 can still use the feature in the same manner but the UI view is slightly different."   SD-WAN and Traffic Shaping Change: Added "MX95, MX105, MX85, MX75 Z1, Z3, Z3C, Z4, Z4C".   General MX Best Practices Change: Added note that SD-WAN Policies only appear after Active-Active Auto VPN is enabled; added note "On MX18.2 firmware while using MultiWAN MXs SD-WAN policies and load balancing policies do not apply to WAN3."   MX Firewall Settings Change: Added "The DNS request doesn't need to be from a specific client, the MX will map the FQDN based on the DNS response, regardless of which client made the DNS Request."; added "MX will not be able to snoop TCP-based or encrypted DNS traffic."   MultiWAN Backup Uplink Change: Added VPN behavior for AutoVPN; added "IPv6 is not supported on the Backup WAN uplink".   Trusted Traffic Exclusions Change: Added "The Cisco Meraki Cloud and Umbrella Cloud communications are trusted by default."   Security Center Change: Added section "Organization-wide".   Using Layer 3 Firewall Rules Change: Updated wording "Note that, on a network with an MX handling inter-VLAN routing, the IP address of the MX on the destination subnet may still respond to any services (For example: ICMP pings, SNMP, and so forth) it's configured to listen for, even if the rule is set to block traffic."   MS: Getting started: Cisco Catalyst 9300 Management with Meraki Dashboard Change: Added additional command required for cloud connectivity "ip http client source-interface {vlan-interface}"; added note "Do not use the OOB port (Gig0/0) management port on the rear of the switch for internet connectivity. Front facing ports only."; added note "SVIs only, no routed-port support at this time."   Setting Custom DHCP Options Change: Added section "Unsupported DHCP options on MS390 and Meraki-managed C9300".   Link Aggregation and Load Balancing Change: Added note "When configuring LACP port-channels on uplinks between remote switches/stacks, always configure the remote/downstream side of the port-channel first. Once the config has been applied configure the LACP port-channel on the upstream switch. This insures you don't strand the downstream switch. Catalyst 9300-M and MS390 switches will disable a port (for 30 seconds) if it detects a regular trunk port on the other end of a configured LACP port."   MS DHCP Servers Change: Updated for IPv6 options.   Small-Form Factor Pluggable (SFP) and Stacking Accessories Change: Added "C9300-NM-2Y-M / C9300-NM-2Y modules are supported only by C9300-24S/48S switches in firmware CS16.7(CS16GA2). Support for the rest of the C9300-M portfolio will be added in CS16GA3 firmware."   Switch Ports Change: Added C9300-M.   Catalyst 9300-M Datasheet Catalyst 9300X-M Datasheet Change: Added note "The PWR-C1-1900WAC-P-M provides 1900 W output power when the nominal input voltage is 230 V. If the nominal input voltage is 115 V, then the output power is limited to 1500 W. The power supply does not work with standard 125VAC power cords (common with 1100W and lower power supplies), you require a C21 power cable."   Switch Settings Change: Added "Assigning a static IP address and/or VLAN to a switch will override management VLAN settings configured on this page."; added "An Alternate Management Interface can also be configured to source management traffic such as Syslog messages and communication with RADIUS servers from a different VLAN."   FAQs: Migrate to Meraki management mode Change: Added "This [the replacement of hardware] differs from CW access points where the replacement will be the same mode as when the case was opened."   MR: Access Point Status Page Change: Added "BSSID details for each SSID and current radio configuration (such as bands, channels, channel-width, and transmit power)"; added description for the Enabled and Broadcasting columns in the BSSID details window  (blue note).   RF Profiles Change: Added "The individual selected bands in Wireless > Configure > Radio Settings > General > Band Selection do not reflect in the Enabled and Broadcasting columns of the BSSID details found in Wireless > Monitor > Access Points."   MR Mixed Firmware Networks Change: Added Meraki Wi-Fi 6E access points.   Extending the LAN with a Wireless Mesh Link Change: Added warning "Link aggregation on dual-port APs (e.g., MR52, MR53, MR53E, MR57, MR84) must be disabled to allow wired clients connected directly to the AP to gain network connectivity and pass traffic through the wired port on the AP."   MV: MV13 Installation Guide Change: Updated sections "Mounting Instructions" and "MV13 Install using the small mounting plate".   MV Presence Analytics Change: Added section "Installation guideline"; added "Minimum software requirements"; added "The data for each configuration will retain for 6 months per area/line from the date of the configuration."   MV63 Series Datasheet Change: Updated Field of View data; added Licensing options for MV Sense and Cloud Archive.   External RTSP Change: Added MV13 and MV33.   Meraki Vision Portal Changelog Change: Added release notes for up to v1.17.4.   SM: Systems Manager Agent Release Notes Change: Added release notes for up to v4.1.4.   Systems Manager Agent Upgrade 2024 Change: Added FAQ "What version(s) of the agent will clients be upgraded to?"   General Administration: Throughput test to the Cisco Meraki Dashboard Change: Added "Unidirectional or asymmetrical routing configuration" to section "Factors Affecting the Dashboard Throughput Test".   Returns (RMAs), Warranties and End-of-Life Information Change: Added "Products must be returned to Cisco's designated location within 30 days of receiving your Returns Material Authorization (RMA) number."   Meraki Subscription Licensing Overview Meraki Subscription Licensing - Subscription Claim Meraki Subscription Licensing - Network Binding Change: Updated for Subscription Changes.   Meraki MS Subscription Licensing Change: Added MS130R. ... View more

    New articles: Meraki SDWAN 'HUB' Integration with Secure Connect Change: New article.   MX: MX Sizing Guide & Principles Change: Added "Maximum Number of AnyConnect Sessions" to Feature Specific Data; added "Advanced Security Throughput (Prevention) EMIX" to Performance Data; updated Performance Data table; added note for Advanced Security Throughput Tests with "IPS Mode in Detection or Prevention configuration".   Dynamic DNS (DDNS) Change: Added "If DDNS is in use with an HA pair configured with a virtual IP (VIP) behind NAT, DDNS will resolve to the NAT-translated (public) address of the management/uplink IP, rather than the NAT-translated virtual IP."   Trusted Traffic Exclusions Change: Added sections "How are my applications identified?" and "Trusted Application Category List".   MX Routing Behavior Change: AMP Registration and File disposition will adhere to the route priority.   VPN Full-Tunnel Exclusion (Application and IP/URL Based Local Internet Breakout) Change: Added "Traffic sourced from the MX itself will not adhere to VPN exclusion rules".   MS: Getting started: Cisco Catalyst 9300 Management with Meraki Dashboard Change: Added new C9300L and C9300X models; added firmware requirements for all C9300X, C9300 and 9300L switches (IOS-XE 17.9.3m3).   Catalyst 9300-M Datasheet Change: Updated Forwarding rate for C9300-24S-M and C9300-48S-M.   Switch Stacks Change: Added note "Based on the number of members in a stack, the switch stack may require approximately one hour to become operational and connect to the Meraki Dashboard".   MS Switch Access Policies (802.1X) Change: Added note "VLAN Profiles feature simplifies VLAN management across multiple sites by enabling dynamic assignment of VLANs based on descriptive names rather than numerical IDs. This facilitates easier management across multiple sites with varying VLAN configuration reducing the need for multiple RADIUS policies."; added descripton for "Increase Access Speed"; added references to C9300-Ms.   MR: Channel Bonding Change: Added note that while achieving higher PHY rates in 2.4GHz is theoretically possible, it requires using 40MHz channels (20 + 20 MHz channel bonding) in 2.4GHz, which Cisco Meraki does not enable because this feature is not recommendable in real-world enterprise deployments.   Wi-Fi Personal Network (WPN) Change: Removed the "2x SSIDs per Meraki dashboard network" scalability limit for the iPSK without RADIUS Authentication Type.   CW9163E Installation Guide Change: Added "CW9163E only supports mesh at 2.4 and 5 GHz".   MV: Motion Search and Motion Recap Change: Added note that Motion Detector v1 is currently only supported on MV21/71. For all other cameras, Motion Detector v2 is set as the default on MV5.5.1+ and Motion Detector v1 is deprecated.   Meraki Vision Portal Changelog Change: Added release notes for up to v1.17.3.   General Administration: Cisco Meraki Canada Region Change: Added note that Cloud Monitoring for Catalyst is currently not supported in the Meraki Canada Region.   Small-Form Factor Pluggable (SFP) and Stacking Accessories Change: Added MA-SFP-10GB-LRM as compatible for MS390/C9300.   Creating and Applying Group Policies Change: Added note "When doing a Configuration Sync to multiple target SSIDs, disable group policy assignment by device type before doing the sync".   MV Presence Analytics Change: Added "Area occupancy with duration" for MV2, MV12, MV22, MV32, MV52, MV72.   MT: MT12 Datasheet - Water Detection Change: Added accessories. External Power Adapter (Sold Separately): MA-PWR-USB-US, MA-PWR-USB-UK, MA-PWR-USB-EU, MA-PWR-USB-AU, MA-PWR-ETH (USB-C to Ethernet adapter). ... View more

  New articles: MultiWAN Backup Uplink Change: New article.   Catalyst 9300L-M Datasheet Catalyst 9300X-M Datasheet Change: New articles. MV13 Datasheet MV13 Installation Guide MV33 Datasheet MV33 Installation Guide Change: New articles.   Vision Portal: Attribute Search Change: New article.   Assurance Left Navigation Change: New article.   Enhanced Topology Change: New article.   MX: Meraki MX ThousandEyes Configuration Guide Change: Added information about Meraki and ThousandEyes region linkage.   Security and SD-WAN (MX,Z) Features Directory Change: Added note that MX75, MX85, MX95, MX105, MX250, and MX450 will have a performance boost (up to 3x with no additional cost) enabled by default in MX 18.2 and above firmware release; added "AnyConnect Enhancements".   SSID Tunneling and Layer 3 Roaming - VPN Concentration Configuration Guide Change: In case the MX is used as VPN concentrator it is recommended that the MX is not configured for NAT. However, an exception is made for virtual MX (vMX) devices in cloud environments where broadcast traffic limitations can impact network functions. In such cases, deploying vMX in Routed mode is recommended.   MS: Catalyst 9300/X/L-M Series Installation Guide Change: Added C9300L/X-M models; added note that the included video will link to a MS390 but the steps and information are the same for the C9300-M; added differentiation between soft and factory reset.   Switch Stacks Change: Added C9300/L/X-M models; added note "If the Active stack member is replaced there will be a short loss in connectivity when it is powered down while a new Active member is elected"; added MS130.   Small-Form Factor Pluggable(SFP) and Stacking Accessories Change: Added accessories for new C9300/L/X models.   Catalyst 9300-M Datasheet Change: Updated accessories table; added fiber models.   Getting started: Cisco Catalyst 9300 Management with Meraki Dashboard Change: Added note that the C9300-NM-2Y module requires CS16GA2firwmare (Feb '24) for management. When the software is available, customers might still need to unseat the module to bypass the compatibility checks during migration. After full migration and dashboard connectivity, re-insert/install the module (hot-swappable).   Port Schedules Change: Added note that each network can have at most five port schedules.   MS Mid-Mount Mounting Brackets Change: Updated "Compatible Switch Models" to include MS130 (except the 8-port and 12-port models).   MR: Wi-Fi Personal Network (WPN) Change: Added section "Supported Authentication Types"; added step-by-step user onboarding example.   Setting a WPA Encryption Mode Change: Added warning that WEP is deprecated in MR 30.X and newer firmware. Limited configuration options still exist when using the old Access control page (Wireless > Configure > Access control > View old version > WPA encryption mode) until this page is deprecated.   Channel Bonding Change: Added note that Channel bonding is not possible for 2.4GHz. Using anything other than 20MHz channels in 2.4GHz is not practical in real deployments as no clients negotiate 40MHz bonding in the 2.4GHz band.   MR28 Datasheet MR36 Datasheet MR36H Datasheet MR44 Datasheet MR46 Datasheet MR46E Datasheet MR56 Datasheet MR57 Datasheet MR76 Datasheet MR78 Datasheet MR86 Datasheet CW9162 Datasheet CW9164 Datasheet CW9166 Datasheet CW9163E Datasheet Change: Added note that 40MHz channels are supported only in the 5GHz band.   MV: MV63 Series Datasheet MV93 Series Datasheet Change: Added "DORI Specifications (Maximum Resolution)".   MV Object Detection Change: Added MV63 to list of compatible devices for vehicle detection.   Meraki Vision Portal Changelog Change: Added release notes for up to v1.17.0.   MT: MT MQTT Setup Guide Change: Added MT15 to "Per Sensor Metrics".   MT10 Installation Guide - Temperature and Humidity MT11 Probe Sensor Installation Guide MT12 Installation Guide - Water Detection MT14 Installation Guide - Indoor Air Quality MT15 Installation Guide - Indoor Air Quality w/CO2 MT20 Installation Guide - Open/Close Detection MT30 Installation Guide - Smart Automation Button MT40 Installation Guide - Smart Power Controller Change: Added MV13 and MV33 as compatible gateways. ... View more