Meraki

jimmyt234

I often find these dedicated apps do some form of certificate pinning and doing any kind of HTTPS inspection causes issues. (This is presuming you have HTTPS inspection turned on for your Roaming Computers Web Policy). Try adding the FQDN/URL for the application to the Selective Decryption Lists section.

jimmyt234

That didn't take very long 😉

jimmyt234

I WANT IT

jimmyt234

Your experience lines up with this bug fix: Corrected an issue that resulted in MX75, MX85, MX95, MX105, MX250, and MX450 appliances reporting erroneously higher device utilization on the Meraki Dashboard.

jimmyt234

This is different to my scenario then where we are in monitor mode and have TLS tunnels configured on the switch to talk to dashboard. Would try support!

jimmyt234

Which Catalyst management mode are they in? We've had this issue a few times and it has self-resolved after a day or two. Support were not able to provide a root cause to the issue.

jimmyt234

With the edit pencil icon, the same way you rename any other device in dashboard.

jimmyt234

Microsoft Entra ID Integration with Splash Page - Cisco Meraki Documentation Native integration is now possible, please see documentation above. (I have not tested this yet)

jimmyt234

You could leverage the API to disable the AnyConnect service and re-enable it every night at 3am 😁

jimmyt234

Congratulations everybody!!

jimmyt234

@CloudStrife I believe the contest is over as of yesterday! 😁

jimmyt234

Do you mean Secure Connect or just AnyConnect on the MX itself? Which section are you performing the configuration under: - Secure Connect > Remote Access - Security & SD-WAN > Client VPN

jimmyt234

I have tried this on both 18.211.x and 19.1.8 versions.

jimmyt234

You ask the ISP to swap to a /29 so that each MX can have it's own dedicated WAN IP 😊

jimmyt234

There is a rumoured secret back-end feature that Meraki support can turn on that converts the Cellular failover rules to work as a WAN 2 firewall policy. Worth reaching out to support and getting clarification. Re: Cellular Failover Ruleset Behavior - The Meraki Community Solved: Heavily restricting allowed traffic on WAN2? - The Meraki Community

jimmyt234

Wouldn't count on it, you should request it via the Give your feedback button on the dashboard, the more people that ask hopefully the more weight it will carry! Can you also not filter on the FortiGate side?

jimmyt234

Now, the real question is when is the community branding going to change and become blue? 😁 Paging @CarolineS

jimmyt234

Our recent support interaction led us to this update: "I can confirm, that the feature does work and you can set and change credentials as normal, you just need to make a note of them as once they are saved they don't appear in the UI for you to view if needed. The issue is purely cosmetic." I can confirm I have tried this a couple of times and it has worked.

jimmyt234

And you got a free coin as well?! Awesome! 😁

jimmyt234

These firewalls can absolutely operate over the recommended client limit - I've seen MX67 in the 200-300 region and they are absolutely fine, where the datasheet says 50 clients. What you have to be prepared for is if you ever raise a Meraki support ticket this will be the first thing they point out - that you are "oversubscribed". What is more important to consider is flow/session count, but we have no visibility of this in the dashboard (support does).

jimmyt234

As this often flies under the radar, I wanted to make everybody aware that as of around a week ago, we have been able to select a new content filtering category to block traffic to: Generative AI Category Description: Websites whose primary purpose is to use artificial intelligence models to generate output in the form of text, audio, video, or images based on user-supplied prompts. Technologies that tangentially use generative AI as part of their service are not included.

jimmyt234

Luckily I think 99% of our AnyConnect deployments are leveraging SAML and not using certificate auth so not vulnerable to this!

jimmyt234

Happy to say that this issue has been fixed now 😊

jimmyt234 · ‎Jun 12 2025

Check your Cloud Firewall rules are allowing Private traffic between the sites.

jimmyt234 · ‎Jun 12 2025

We might finally be getting the right pair of eyes on the issue, update from support this morning: I was able to replicate this behavior on my side as well, therefore I have opened an internal investigation with our Support Product Specialist team to investigate further.

About jimmyt234

jimmyt234

Community Record

Badges