Meraki System Manager Sentry, authentication

Kushan
Here to help

Meraki System Manager Sentry, authentication

We are planning Meraki System Manager(SM) Sentry for enterprise user's certificate based machine authentication, and have few queries.

Can Simeone please guide here ?

 

1) When we do Azure AD based authentication, will Meraki dashboard authenticate Machines as well (along with users) from Azure AD database? or Do we need to manually enroll device in SM first ?

 

2) How will "SM Sentry" determine that Machine is not non-corporate when it enrolls for the first time ? By checking first with Azure AD ?

 

3) System Manager license is 80$/MR for 3 years, does it mean we can enroll as many Windows Device as possible ?

2 Replies 2
alemabrahao
Kind of a big deal
Kind of a big deal

Take a look at the documentation:

 

https://documentation.meraki.com/SM/Device_Enrollment/SM_Enrollment_Authentication

 

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Certificate-based_Wi-...

 

I recommend you ask your Meraki sales representative consultant.

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
PhilipDAth
Kind of a big deal
Kind of a big deal

>How will "SM Sentry" determine that Machine is not non-corporate when it enrolls for the first time ? By checking first with Azure AD ?

 

Depends on how you configure it.  But if you have it setup for a user to authenticate against Azure AD, then that authentication will need to be completed before the client can finish enrolling.

 

>System Manager license is 80$/MR for 3 years, does it mean we can enroll as many Windows Device as possible ?

 

The Systems Manager price is per managed device, not per MR.  So if you have 100 Windows machines, you'll need 100 licences.

 

 

You could request a trial of Systems Manager to see it working for yourself.

https://meraki.cisco.com/form/trial/ 

Get notified when there are additional replies to this discussion.