Secure Connect: Cisco Secure Connect Data Center List Change: Marked a few sites where Site-to-site interconnect is not available yet.   MG: MG Installation Guides Change: Added Spanish Hardware Installation Guides.   MX: MX64 Installation Guide MX65 Installation Guide Change: Added section "Safety and Warnings", "Pre-install Preparation", "Configure your Dashboard Network", "Check and Set Firmware" and "Check and Configure Upstream Firewall Settings".   MX64 and MX65 Overview and Specifications Change: Updated "Max VPN Throughput".   IPv6 Support on MX Security & SD-WAN Platforms - LAN Change: Added note "RNDSS support requires a minimum firmware version of MX 18.205."   Site-to-Site VPN Settings Change: Added "WAN appliances in Routed mode only support OSPF when using the "Single LAN" LAN setting. This can be set on Addressing & VLANs page."   MX Installation Guides Change: Added Spanish Hardware Installation Guides.   MR: CW9163E Installation Guide Change: Updated note "The AP is locked to approved antennas. Third-party antennas will not operate if inserted into the 2.4, 5 or 6 GHz ports."   Hotspot 2.0 Configuration Example Change: Added note "If choosing to use a Hidden SSID, note that the SSID name and WPA2 passphrase are case sensitive. When configuring the wireless profile on the client device ensure that they are identical to how they are configured in Dashboard. If you do not have the SSID name value entered correctly on your wireless client, your device will not be able to receive a response from the AP when probing for the wireless network."   MV: Meraki Vision Portal Changelog Change: Added release notes for up to v1.17.6.   Third Generation MV Cameras: Overview and Specifications Change: Added MV13 and MV33.   SM: Windows BitLocker Encryption with Meraki Systems Manager Change: Added note "Bit-Locker Keys are not stored in Dashboard and it is up to the administrators to securely store them. They cannot be stored on the managed endpoint's drive(s) that is being encrypted."   Systems Manager Agent Upgrade 2024 Change: Updated date to April 14, 2024.   General Administration: Summary Report Overview Change: Added note "Analytics must be enabled under Network-wide > General's Location and scanning section in order for a network to include this in the Summary Report" to section "Number of sessions over time".   Configuring the Default Block Message Change: Added note "This message will appear on the error page shown to blocked devices, unless those devices have client-specific block messages."; added instructions on how to set client specific block messages. ... View more

  Secure Connect: Cisco Secure Connect - Non-Meraki IPSec Tunnel Change: Added section "Multiple Tunnels".   Cisco Secure Connect - Meraki MX IPSec Tunnel Change: Added "Umbrella does not support the reassembly of fragmented IPSec traffic or IP packets for internet traffic. Thus, when a network device sends fragmented IPSec or IP packets to Umbrella, Umbrella drops the fragmented packets. IPSec tunnels for Secure Internet Access must have an MTU no larger than 1280 bytes. Fragmented packets in underlay or overlay are dropped."   Cisco Secure Connect - Identity Provider (IdP) Setup Cisco Secure Connect - Meraki Cloud Authentication Change: Updated description of Meraki Cloud Authentication.   MX: Site-to-Site VPN Settings Change: Added "Making changes to Non-Meraki VPN settings under Security & SD-WAN > Configure > Site-to-site VPN, might result in existing Non-Meraki VPN tunnels bouncing. We recommend that you make changes during a maintenance window to minimize the impact of Non-Meraki VPN tunnels bouncing."   vMX Comparison Datasheet Change: Added vMX-XL; added "Supported Features" and "Unsupported Features"; added "NAT Mode Support" comparison; added minimum firmware support for "Concentrator Mode"; added notes "vMX-XL is in public beta and only supported on AWS", "vMX-XL is supported in Passthrough or VPN Concentrator mode only. NAT mode is currently not supported on the vMX-XL", and "Static IP configuration from the dashboard, should match the IP address configuration on the cloud platform".   MultiWAN Backup Uplink Change: Added section "Failback behavior".   MX Sizing Guide & Principles Change: Updated NGFW throughput for MX67 / MX68.   Meraki MX/Z Security and SD-WAN Licensing Change: Added "Cellular failover".   Meraki Umbrella SDWAN Connector Deployment Guide Change: Added note "MV cameras and other Meraki devices that do not use FIPS Device-to-Cloud connectivity (TCP-443) must have their dashboard management traffic excluded from SIG tunnels, or they may experience issues with dashboard configuration updates."   MS: Catalyst 9300-M Datasheet Catalyst 9300L-M Datasheet Catalyst 9300X-M Datasheet Change: Added section "SFP Modules".   VLAN Profiles Change: Added C9300-M.   Enhanced Topology Change: Added sections "Navigating the Topology Map" and "Device Status Rationale".   General Administration: Meraki MX Subscription Licensing Meraki Z Subscription Licensing Change: Configuration Templates are available with the Essential license tier.   Information for Cisco Meraki for Government users Change: Added specific MX SKUs "MX67C-HW-NA" and "MX68CW-HW-NA"; added note "MX67C-HW-WW & MX68CW-HW-WW devices are not supported at this time"; added MG41, MG41E, as well as MG51, MG51E.   Meraki End-of-Life (EOL) Products and Dates Change: Added MG21 / MG21E.   Product Firmware Version Restrictions Change: Added Catalyst switches.   Returns (RMAs), Warranties and End-of-Life Information Change: Added "MT accessories". ... View more

  New Articles: Meraki Subscription Changes Change: New article.   Secure Connect: Site Localization Change: New article.   Systems Manager Agent Upgrade 2024 Change: New article.   Basic SFP Troubleshooting Guide Change: New article.   Traffic Analysis and Classification Change: New article.   Secure Connect: Cisco Secure Connect - Manage Web Policies Change: Added "At this time QUIC protocol is not supported and it is recommend to explicitly disable QUIC protocol in web browsers."   MX: SD-WAN Internet Policies (SD-Internet) Change: Added note "For some UI features that you see in the sections below, MX18.2+ is required. MX devices on firmware versions below MX18.2 can still use the feature in the same manner but the UI view is slightly different."   SD-WAN and Traffic Shaping Change: Added "MX95, MX105, MX85, MX75 Z1, Z3, Z3C, Z4, Z4C".   General MX Best Practices Change: Added note that SD-WAN Policies only appear after Active-Active Auto VPN is enabled; added note "On MX18.2 firmware while using MultiWAN MXs SD-WAN policies and load balancing policies do not apply to WAN3."   MX Firewall Settings Change: Added "The DNS request doesn't need to be from a specific client, the MX will map the FQDN based on the DNS response, regardless of which client made the DNS Request."; added "MX will not be able to snoop TCP-based or encrypted DNS traffic."   MultiWAN Backup Uplink Change: Added VPN behavior for AutoVPN; added "IPv6 is not supported on the Backup WAN uplink".   Trusted Traffic Exclusions Change: Added "The Cisco Meraki Cloud and Umbrella Cloud communications are trusted by default."   Security Center Change: Added section "Organization-wide".   Using Layer 3 Firewall Rules Change: Updated wording "Note that, on a network with an MX handling inter-VLAN routing, the IP address of the MX on the destination subnet may still respond to any services (For example: ICMP pings, SNMP, and so forth) it's configured to listen for, even if the rule is set to block traffic."   MS: Getting started: Cisco Catalyst 9300 Management with Meraki Dashboard Change: Added additional command required for cloud connectivity "ip http client source-interface {vlan-interface}"; added note "Do not use the OOB port (Gig0/0) management port on the rear of the switch for internet connectivity. Front facing ports only."; added note "SVIs only, no routed-port support at this time."   Setting Custom DHCP Options Change: Added section "Unsupported DHCP options on MS390 and Meraki-managed C9300".   Link Aggregation and Load Balancing Change: Added note "When configuring LACP port-channels on uplinks between remote switches/stacks, always configure the remote/downstream side of the port-channel first. Once the config has been applied configure the LACP port-channel on the upstream switch. This insures you don't strand the downstream switch. Catalyst 9300-M and MS390 switches will disable a port (for 30 seconds) if it detects a regular trunk port on the other end of a configured LACP port."   MS DHCP Servers Change: Updated for IPv6 options.   Small-Form Factor Pluggable (SFP) and Stacking Accessories Change: Added "C9300-NM-2Y-M / C9300-NM-2Y modules are supported only by C9300-24S/48S switches in firmware CS16.7(CS16GA2). Support for the rest of the C9300-M portfolio will be added in CS16GA3 firmware."   Switch Ports Change: Added C9300-M.   Catalyst 9300-M Datasheet Catalyst 9300X-M Datasheet Change: Added note "The PWR-C1-1900WAC-P-M provides 1900 W output power when the nominal input voltage is 230 V. If the nominal input voltage is 115 V, then the output power is limited to 1500 W. The power supply does not work with standard 125VAC power cords (common with 1100W and lower power supplies), you require a C21 power cable."   Switch Settings Change: Added "Assigning a static IP address and/or VLAN to a switch will override management VLAN settings configured on this page."; added "An Alternate Management Interface can also be configured to source management traffic such as Syslog messages and communication with RADIUS servers from a different VLAN."   FAQs: Migrate to Meraki management mode Change: Added "This [the replacement of hardware] differs from CW access points where the replacement will be the same mode as when the case was opened."   MR: Access Point Status Page Change: Added "BSSID details for each SSID and current radio configuration (such as bands, channels, channel-width, and transmit power)"; added description for the Enabled and Broadcasting columns in the BSSID details window  (blue note).   RF Profiles Change: Added "The individual selected bands in Wireless > Configure > Radio Settings > General > Band Selection do not reflect in the Enabled and Broadcasting columns of the BSSID details found in Wireless > Monitor > Access Points."   MR Mixed Firmware Networks Change: Added Meraki Wi-Fi 6E access points.   Extending the LAN with a Wireless Mesh Link Change: Added warning "Link aggregation on dual-port APs (e.g., MR52, MR53, MR53E, MR57, MR84) must be disabled to allow wired clients connected directly to the AP to gain network connectivity and pass traffic through the wired port on the AP."   MV: MV13 Installation Guide Change: Updated sections "Mounting Instructions" and "MV13 Install using the small mounting plate".   MV Presence Analytics Change: Added section "Installation guideline"; added "Minimum software requirements"; added "The data for each configuration will retain for 6 months per area/line from the date of the configuration."   MV63 Series Datasheet Change: Updated Field of View data; added Licensing options for MV Sense and Cloud Archive.   External RTSP Change: Added MV13 and MV33.   Meraki Vision Portal Changelog Change: Added release notes for up to v1.17.4.   SM: Systems Manager Agent Release Notes Change: Added release notes for up to v4.1.4.   Systems Manager Agent Upgrade 2024 Change: Added FAQ "What version(s) of the agent will clients be upgraded to?"   General Administration: Throughput test to the Cisco Meraki Dashboard Change: Added "Unidirectional or asymmetrical routing configuration" to section "Factors Affecting the Dashboard Throughput Test".   Returns (RMAs), Warranties and End-of-Life Information Change: Added "Products must be returned to Cisco's designated location within 30 days of receiving your Returns Material Authorization (RMA) number."   Meraki Subscription Licensing Overview Meraki Subscription Licensing - Subscription Claim Meraki Subscription Licensing - Network Binding Change: Updated for Subscription Changes.   Meraki MS Subscription Licensing Change: Added MS130R. ... View more

  MX: Calculating MX WAN MAC Addresses Change: Added WAN 3 Offset (for MultiWAN Backup Uplink).   Z4 Datasheet Z4C Datasheet Change: Added "Signal Coverage Patterns".   MX75 Datasheet MX85 Datasheet Change: Added "Fan" to physical capabilies table.   Threat Protection Change: Updated sections "Intrusion Detection and Prevention", "Traffic Inspection" and "Logging".   MS: FAQs: Migrate to Meraki management mode Change: Added FAQ "RMA:  What management mode will a replacement unit be in?"   MI: Meraki and ThousandEyes Integration Troubleshooting Change: Updated note "The Agent will be internally assigned an IP address from the range 198.51.100.x, typically 198.51.100.2".   MV: MV Encoding Improvements: Smart Codec Change: Added MV13, MV13X, MV33, MV33X.   Video Retention Gen3 Meraki MV Mounting Options and Guidelines Change: Added MV13, MV33.   General Administration: Meraki End-of-Life (EOL) Products and Dates Change: Added Z3-HW and Z3-HW-NA.   Moving Devices between Networks Change: Added section "MR Access Points". ... View more

    New articles: Meraki SDWAN 'HUB' Integration with Secure Connect Change: New article.   MX: MX Sizing Guide & Principles Change: Added "Maximum Number of AnyConnect Sessions" to Feature Specific Data; added "Advanced Security Throughput (Prevention) EMIX" to Performance Data; updated Performance Data table; added note for Advanced Security Throughput Tests with "IPS Mode in Detection or Prevention configuration".   Dynamic DNS (DDNS) Change: Added "If DDNS is in use with an HA pair configured with a virtual IP (VIP) behind NAT, DDNS will resolve to the NAT-translated (public) address of the management/uplink IP, rather than the NAT-translated virtual IP."   Trusted Traffic Exclusions Change: Added sections "How are my applications identified?" and "Trusted Application Category List".   MX Routing Behavior Change: AMP Registration and File disposition will adhere to the route priority.   VPN Full-Tunnel Exclusion (Application and IP/URL Based Local Internet Breakout) Change: Added "Traffic sourced from the MX itself will not adhere to VPN exclusion rules".   MS: Getting started: Cisco Catalyst 9300 Management with Meraki Dashboard Change: Added new C9300L and C9300X models; added firmware requirements for all C9300X, C9300 and 9300L switches (IOS-XE 17.9.3m3).   Catalyst 9300-M Datasheet Change: Updated Forwarding rate for C9300-24S-M and C9300-48S-M.   Switch Stacks Change: Added note "Based on the number of members in a stack, the switch stack may require approximately one hour to become operational and connect to the Meraki Dashboard".   MS Switch Access Policies (802.1X) Change: Added note "VLAN Profiles feature simplifies VLAN management across multiple sites by enabling dynamic assignment of VLANs based on descriptive names rather than numerical IDs. This facilitates easier management across multiple sites with varying VLAN configuration reducing the need for multiple RADIUS policies."; added descripton for "Increase Access Speed"; added references to C9300-Ms.   MR: Channel Bonding Change: Added note that while achieving higher PHY rates in 2.4GHz is theoretically possible, it requires using 40MHz channels (20 + 20 MHz channel bonding) in 2.4GHz, which Cisco Meraki does not enable because this feature is not recommendable in real-world enterprise deployments.   Wi-Fi Personal Network (WPN) Change: Removed the "2x SSIDs per Meraki dashboard network" scalability limit for the iPSK without RADIUS Authentication Type.   CW9163E Installation Guide Change: Added "CW9163E only supports mesh at 2.4 and 5 GHz".   MV: Motion Search and Motion Recap Change: Added note that Motion Detector v1 is currently only supported on MV21/71. For all other cameras, Motion Detector v2 is set as the default on MV5.5.1+ and Motion Detector v1 is deprecated.   Meraki Vision Portal Changelog Change: Added release notes for up to v1.17.3.   General Administration: Cisco Meraki Canada Region Change: Added note that Cloud Monitoring for Catalyst is currently not supported in the Meraki Canada Region.   Small-Form Factor Pluggable (SFP) and Stacking Accessories Change: Added MA-SFP-10GB-LRM as compatible for MS390/C9300.   Creating and Applying Group Policies Change: Added note "When doing a Configuration Sync to multiple target SSIDs, disable group policy assignment by device type before doing the sync".   MV Presence Analytics Change: Added "Area occupancy with duration" for MV2, MV12, MV22, MV32, MV52, MV72.   MT: MT12 Datasheet - Water Detection Change: Added accessories. External Power Adapter (Sold Separately): MA-PWR-USB-US, MA-PWR-USB-UK, MA-PWR-USB-EU, MA-PWR-USB-AU, MA-PWR-ETH (USB-C to Ethernet adapter). ... View more

  New articles: MultiWAN Backup Uplink Change: New article.   Catalyst 9300L-M Datasheet Catalyst 9300X-M Datasheet Change: New articles. MV13 Datasheet MV13 Installation Guide MV33 Datasheet MV33 Installation Guide Change: New articles.   Vision Portal: Attribute Search Change: New article.   Assurance Left Navigation Change: New article.   Enhanced Topology Change: New article.   MX: Meraki MX ThousandEyes Configuration Guide Change: Added information about Meraki and ThousandEyes region linkage.   Security and SD-WAN (MX,Z) Features Directory Change: Added note that MX75, MX85, MX95, MX105, MX250, and MX450 will have a performance boost (up to 3x with no additional cost) enabled by default in MX 18.2 and above firmware release; added "AnyConnect Enhancements".   SSID Tunneling and Layer 3 Roaming - VPN Concentration Configuration Guide Change: In case the MX is used as VPN concentrator it is recommended that the MX is not configured for NAT. However, an exception is made for virtual MX (vMX) devices in cloud environments where broadcast traffic limitations can impact network functions. In such cases, deploying vMX in Routed mode is recommended.   MS: Catalyst 9300/X/L-M Series Installation Guide Change: Added C9300L/X-M models; added note that the included video will link to a MS390 but the steps and information are the same for the C9300-M; added differentiation between soft and factory reset.   Switch Stacks Change: Added C9300/L/X-M models; added note "If the Active stack member is replaced there will be a short loss in connectivity when it is powered down while a new Active member is elected"; added MS130.   Small-Form Factor Pluggable(SFP) and Stacking Accessories Change: Added accessories for new C9300/L/X models.   Catalyst 9300-M Datasheet Change: Updated accessories table; added fiber models.   Getting started: Cisco Catalyst 9300 Management with Meraki Dashboard Change: Added note that the C9300-NM-2Y module requires CS16GA2firwmare (Feb '24) for management. When the software is available, customers might still need to unseat the module to bypass the compatibility checks during migration. After full migration and dashboard connectivity, re-insert/install the module (hot-swappable).   Port Schedules Change: Added note that each network can have at most five port schedules.   MS Mid-Mount Mounting Brackets Change: Updated "Compatible Switch Models" to include MS130 (except the 8-port and 12-port models).   MR: Wi-Fi Personal Network (WPN) Change: Added section "Supported Authentication Types"; added step-by-step user onboarding example.   Setting a WPA Encryption Mode Change: Added warning that WEP is deprecated in MR 30.X and newer firmware. Limited configuration options still exist when using the old Access control page (Wireless > Configure > Access control > View old version > WPA encryption mode) until this page is deprecated.   Channel Bonding Change: Added note that Channel bonding is not possible for 2.4GHz. Using anything other than 20MHz channels in 2.4GHz is not practical in real deployments as no clients negotiate 40MHz bonding in the 2.4GHz band.   MR28 Datasheet MR36 Datasheet MR36H Datasheet MR44 Datasheet MR46 Datasheet MR46E Datasheet MR56 Datasheet MR57 Datasheet MR76 Datasheet MR78 Datasheet MR86 Datasheet CW9162 Datasheet CW9164 Datasheet CW9166 Datasheet CW9163E Datasheet Change: Added note that 40MHz channels are supported only in the 5GHz band.   MV: MV63 Series Datasheet MV93 Series Datasheet Change: Added "DORI Specifications (Maximum Resolution)".   MV Object Detection Change: Added MV63 to list of compatible devices for vehicle detection.   Meraki Vision Portal Changelog Change: Added release notes for up to v1.17.0.   MT: MT MQTT Setup Guide Change: Added MT15 to "Per Sensor Metrics".   MT10 Installation Guide - Temperature and Humidity MT11 Probe Sensor Installation Guide MT12 Installation Guide - Water Detection MT14 Installation Guide - Indoor Air Quality MT15 Installation Guide - Indoor Air Quality w/CO2 MT20 Installation Guide - Open/Close Detection MT30 Installation Guide - Smart Automation Button MT40 Installation Guide - Smart Power Controller Change: Added MV13 and MV33 as compatible gateways. ... View more

  New articles: Meraki Wireless for Enterprise - Security Meraki Wireless for Enterprise Best Practices- RF Design Change: New articles.   Cloud Monitoring for Catalyst: Cloud Monitoring Overview and FAQ Change: Added section "Device-side routing changes" to "Known Issues/Caveats for Dashboard Monitoring".   MX / Z: 3G/4G Cellular Failover with USB Modems Change: Added note that the MX does not support IPv6 through a USB cellular modem.   AnyConnect Client Download and Deployment Change: Added AnyConnect / Secure Client download and configuration example for iOS.   AnyConnect Azure AD SAML Configuration Change: Added note "If a port other than the default 443 is used the URLs should include the custom port"; added note "If a custom hostname is utilized the Identifier and Reply URLs should contain this custom hostname and not the Meraki DDNS name".   MX Sizing Guide & Principles Change: Added warning that the Performance metrics detailed in this document are based on the Current Firmware Version listed above. It should be noted not all platforms can support MX 18.2x.   Security and SD-WAN (MX,Z) Features Directory Change: Added "SD-WAN and SD-Internet APIs".   Border Gateway Protocol (BGP) Change: Added requirement for routed mode BGP: MX must be running MX 18.205 or higher firmware.   Troubleshooting a Faulty MX Appliance or Z-Series Teleworker Gateway Change: Added another troubleshooting step "Try performing a factory reset on the device and reconfigure its management IP as needed" to section "Appliance has a solid orange power LED".   Firewall Logging Change: Added note to leave the Ports section of the Firewall Log empty for ICMP filtering.   IPSec VPN Port Overlap with Manual Port Forwarding rules Change: Added section "Firewall Port Forwarding".   Auto VPN Port Change FAQ Change: Updated cutover date to April 30, 2024.   MX Templates Best Practices Change: Update note "To manage Client VPN users across all networks bound to a template, you can do so in the User Management section of the Security & SD-WAN > Client VPN page of said template. If you would like to manage Client VPN users for a specific network bound to that template, you can do so in the Network-wide > Configure > Users page of that network".   Z4C Installation Guide Z4/Z4C Series Hardware Installation Guide Change: Added "2x External LTE Antenna".   MS: Switch Ports Change: Added note that MAC addresses for "MAC allow list" or "Sticky MAC allow list" can be separated by a space, comma or by entering a new MAC on each line.   MS125 Overview and Specifications Change: Updated Features table: "4x 1000/10000 Mbps SFP+ ports".   Product Firmware Version Restrictions Change: Added maximum firmware version MS 15.23 for MS420.   MR: Automatically Integrating Cisco Umbrella with Meraki Networks Change: Added note that the Automatic Umbrella provisioning behavior for organizations using the Co-termination licensing model changed.  Automatic Umbrella is no longer automatically provisioned when MR Advanced licenses or MR Enterprise + MR Upgrade licenses are claimed into a co-term organization (as of Jan 2024).   AP Neighbors Change: Added note that AP Neighbors is an Early Access feature and can be enabled by browsing to Organization > Configure > Early Access.   Wireless Encryption and Authentication Overview Change: Added section "Opportunistic Wireless Encryption".   MR57 Dual Uplink High Availability Change: Added Link Aggregation state table regarding Power Sharing and High Availability.   MV: Mobile App - Camera Experience Change: Added section "Camera-only Administrator".   MT: MT11 Probe Sensor Installation Guide MT15 Installation Guide - Indoor Air Quality w/CO2 MT20 Installation Guide - Open/Close Detection Change: Added / updated unboxing video.   SM: Windows BitLocker Encryption with Meraki Systems Manager Change: Added note that Bit-Locker Keys are not stored in Dashboard and it is up to the administrators to securely store them. They cannot be stored on the managed endpoint's drive(s) that is being encrypted.   Deploying Powershell and Shell Scripts in Systems Manager Change: Added section "macOS - Add timestamp text to a file on desktop (schedule script test file)"; added note "Some features and user interface screenshots referenced in this document may change or be unavailable during the early access stage".   General Administration: China Region Cloud Maintenance New IP Ranges 2023 FAQ Change: Updated deadline to add the new IP ranges to March 31, 2024.   Meraki End-of-Life (EOL) Products and Dates Change: Added Meraki Insight (MI) Licenses.   Blocking and Allowing Clients Change: Added note that Security Appliance policies applied for clients connected to a SSID with Meraki DHCP will not have an effect, as the client MAC and IP address will get NATed at the MR before reaching the Security Appliance.   Using Tags to Manage MR Access Points Using Tags to Broadcast SSIDs from Specific APs SSID Availability Manage Tags Change: Added note that although tags are case sensitive, it is advised to avoid using multiple capitalization variants and use completely unique tags per use-case.   Cisco Meraki Canada Region Change: Added note "Per-Device Licensing (PDL), the Meraki mobile app and the Meraki Umbrella SDWAN Connector are currently not supported in the Meraki Canada Region".   Misc: MX - Security & SD-WAN Change: Added references to free online training courses on the Meraki Learning Hub. ... View more

  New articles: Using Umbrella Multi-org with Cisco Secure Connect Change: New article.   Secure Connect: Cisco Secure Connect Account Setup FAQ Change: Added note that Umbrella customers with the Multi-org can continue to use Multi-org with Cisco Secure Connect. To do this, they must order Multi-org at the same time when they order Secure Connect. It's crucial to note that there is no direct integration between Secure Connect and Multi-org. Customers can access Multi-org via their existing Multi-org dashboard. Furthermore, the use of Multi-org will remain limited to DNS content and security policy management.   Cloud Monitoring for Catalyst: Cloud Monitoring for Catalyst Onboarding Change: Added note that when onboarding a stack, the single management IP should be entered which will onboard the entire stack.   MX/Z: MX Cold Swap - Replacing an Existing MX with a Different MX Change: Added section "Re-generate AnyConnect custom certificate (optional)".   MX Routing Behavior Change: Added note that the mentioned behavior is specific to traffic initiated by the MX appliance itself, any Meraki devices connected downstream will always adhere to the route priority of the MX, added ports for management traffic and AMP registration and file disposition lookups.   Configuring Active Directory with MX Security Appliances Change: Added note that communication with the server will originate from the highest numbered VLAN included in the VPN, if the Server IP address is located over a VPN Tunnel.   AnyConnect on the MX Appliance Change: Updated note that custom hostname certificates require MX firmware version 16.16+.   AnyConnect Authentication Methods Change: Added note that TLS is required to communicate with the Domain Controller for Active Directory authentication.   Client VPN Overview Change: Added note that MX utilizes LCP (Link Control Protocol) to assign IPs to clients, thus DHCP and Static Assignment are not supported.   MX75 Hardware Installation Guide Change: Added MA-PWR-100WAC-A to Accessories.   MX250/450 Series Hardware Installation Guide MX95/MX105 Series Hardware Installation Guide MX85 Series Hardware Installation Guide MX85 Datasheet MX75 Datasheet MX67 and MX68 Datasheet Z3 and Z3C Overview and Specifications Change: Updated throughputs.   Z4C Installation Guide Change: Added Verizon (US) to certified carriers.   Meraki MX/Z Security and SD-WAN Licensing Change: Added Z4 license SKUs.   MG MX/Z Cellular TAC Range Change: Added Z4C TAC Range.   MS: Switch Port View Change: Added "Topology changes" to packet counter table.   MS Switch Access Policies (802.1X) Change: Updated RADIUS Testing. If unreachable, the switch would transition into an alerting status to indicate a failure. Actual server failover is based on the client authentication requests. Failed client authentications will have the switch failover to the next available configured server.   FAQs: Migrate to Meraki management mode Change: Updated FAQ "If I already have DNAC essential/advantage licenses, do I need to purchase another license to use the Meraki dashboard today?", "Can I access the console after I initiate the migration?" and "What do I need to do if I want to migrate back to DNA management mode?".   Catalyst 9300-M Datasheet MS390 Datasheet Change: Added warning about MS390s existing in the same co-term Organization will require the same license edition (either Enterprise or Advanced) as the Catalyst 9300-M. License types cannot be mixed and will result in an incompatible license error (and vice versa).   MR: HTTP CONNECT Proxy Support on MR Access Points Change: Added notes for correct formatting for using the "Option 43" method.   Wi-Fi Personal Network (WPN) Change: Added CW9163E.   Scanning API for Location Analytics Solutions Change: Added differences 4, 5 and 6 to FAQ "What are the fundamental differences between V2 and V3 versions of the Scanning API?".   RF Profiles Change: Updated regarding Wi-Fi 6E / 6 GHz wireless.   NAT Mode with Meraki DHCP Change: Added note that a Lease Time of 24 hours will be given to wireless clients.   Meraki Local Authentication - MR 802.1X Change: Added note to consult vendor-specific documentation to determine the exact path to a device's certificate store or IdenTrust Commercial Root CA 1.   High Density Wi-Fi Deployments Change: Added note that once an antenna is detected by the AP it cannot be changed in dashboard until the antenna is removed and AP is rebooted.   MT: MT Frequently Asked Questions Change: Added section "2 Free MT Licenses with MR Advance License".   General Administration: Behavior during Connection Loss to Cisco Meraki Cloud Change: Added reboot behavior for different MX firmware versions.   Managing Multiple Networks with Configuration Templates Change: Added note that Firewall rules on Template networks do not show a hit counter column, which is expected behavior for this column to be missing.   Changing the Dashboard Network Time Zone Change: Added note that Winter and Summer time (Daylights savings time) is automatically applied by the dashboard.   How to do a License Transfer in Cotermination Change: Added note that transferring between a Co-Termination Licensing Organization, to a Per-Device Licensing Organization or vice-versa is not possible.   Organization Split Overview and FAQ Change: Added "Secure Connect Organizations" to section "Limitations of Organization Splits".   Managing Dashboard Administrators and Permissions Change: Added note that Read-Only admins can perform switch port cycles and cable tests.   SM: Windows Enrollment Change: Added section "Version 4.x+ with Bulk Enrollment Token"; updated section "Version 3.5.x - 3.9.x".   Misc: MV - Smart Cameras MX Quick Start Getting Started with Meraki Change: Added references to free online training courses on the Meraki Learning Hub. ... View more

  New articles: MX Sizing Guide & Principles Change: New article.   Systems Manager Wi-Fi Settings Payload Change: New article.   Cisco Secure Connect: Cisco Secure Connect Data Center List Change: Added note that Site to site interconnect is not yet available for specific sites.   Cisco Secure Connect - Non-Meraki IPSec Tunnel Change: Added FQDN for all sites; added additional site in all regions.   Cisco Secure Connect - IdP Okta SAML Configuration Change: Added note to ensure that traffic to the IdP bypasses the proxy to avoid an authentication loop if you are using an on-premises identity provider (IdP) such as ADFS.   MX / Z: Network Objects Configuration Guide Change: Added note that Network Groups with FQDN objects can only be applied to Layer 3 Outbound Firewall Rules; added note VLAN Objects may also be used within networks that are not bound to a template.   VPN Full-Tunnel Exclusion (Application and IP/URL Based Local Internet Breakout) Change: Added note that an exclusion for the IP address(es) in the DNS query response will not be generated if an MX does not observe an unencrypted DNS query response matching the FQDN.   Site-to-Site VPN Settings Change: Added note that IPv6 peering requires firmware version 18.2 or greater.   AnyConnect Client Download and Deployment Change: Added new steps 5 and 7 to "Always On VPN".   AnyConnect SAML Troubleshooting Guide Change: Added "Authentication failed due to problem navigating to the single sign-on URL" to "Possible error message".   Security and SD-WAN (MX,Z) Features Directory Change: Updated status of MX 18.2.X to Stable Release Candidate.   Border Gateway Protocol (BGP) Change: Added note that IPv6 is currently only supported in One-Armed Concentrator mode; added note that you will require the MX to be put into No-NAT mode to enable BGP on WAN. Please reach out to support to have this enabled; added section "Neighbor Security" as well as scenarios "Scenario 4: Routed mode - eBGP peer on WAN of spoke" and "Scenario 5: Routed mode - eBGP peer on LAN".   Z4/Z4C Series Hardware Installation Guide Change: Added "Verizon Wireless (US), AT&T FirstNet (US)" to certified carriers.   Z4 Datasheet Z4C Datasheet Z4 Installation Guide Z4C Installation Guide Z4/Z4C Series Hardware Installation Guide Change: Updated recommended amount of clients to "15 devices".   Meraki and Cisco Collaboration Teleworker Solution for Businesses Change: Added Z4(C).   MS: PoE Support on MS Switches Change: Added information that PoE consumption and budgeting details can be located under Switching > Monitor > Switches > Select the desired switch > Select the "Power" tab. Port-specific details can be located by selecting the specific switch port and scrolling down to the "Status" section.   MS130R Datasheet Small-Form Factor Pluggable (SFP) and Stacking Accessories Change: Updated compatible SFP modules for MR130R.   MS130 Series Installation Guide Change: Added sections "Rack Mount" and "Wall Mount".   MS390 Datasheet Change: Added table "PSU configuration and PoE budgets".   Catalyst 9300-M Datasheet Change: Added power budget for C9300-24U-M using a 715W Secondary PSU.   MS Layer 3 Switching and Routing Change: Added note that "Configuring an IPv6 interface" is only supported on the MS390 and C9300-M models.   Small-Form Factor Pluggable (SFP) and Stacking Accessories Change: Added uplink modules C9300-NM-2Q-M, C9300-NM-8X-M and C9300-NM-2Y-M.   MS Warm Spare (VRRP) Overview Change: Added note that the C9300-M series switches currently do not support MS Warm Spare (VRRP) functionality.   Key Switch Features Change: Added note that support for IPv6 addresses for switch management is available on firmware MS 15.1+.   Loop and MAC Flap Detection on MS Change: Added MS130.   Product Firmware Version Restrictions Change: Updated Minimum Runnable Firmware Version for MS130 to MS 15.23.   Configuring Spanning Tree on Meraki Switches (MS) Change: Added section "Interoperability Terms and Guidelines".   MR: Frequently Asked Questions for Cisco Meraki Access Point Antennas Change: Updated for CW access points and their antennas; added "Can New WiFi-6E Antennas Be Used On Older Pre-6E Access Points?"; added "Can Older Antennas Be Used On New WiFi-6E Access Points?"; added "What are the details regarding the newer CW-ANT-O1-NS-00 antenna?".   CW9163E Installation Guide Change: Added Self-Identifying Antenna (SIA) capability to antenna port B, C and D.   CW9163E Datasheet CW9166 Datasheet CW9164 Datasheet CW9162 Datasheet Change: Added / updated "Reliability" incl. Mean Time Between Failure (MTBF).   MR57 Datasheet Change: Added note minimum firmware support for Dual Uplink High Availability is MR30.1.   Approximating Maximum Clients per Access Point Change: Added theoretical maximum clients for all Wi-Fi 5, Wi-Fi 6 and Wi-Fi 6E models.   Device Posturing using Cisco ISE Change: Added note that WPA3 encryption is required in wireless networks that implement Wi-Fi 6E.   MV: MV Cloud Archive Change: Added note that onboard storage does not apply to the MV2.   Meraki Display Introduction Change: Added note that users will also be logged out once every 30 days and will be required to log in on the Meraki display.   Meraki Vision Portal Changelog Change: Added release notes for up to v1.16.2.   Motion Alerts Change: Updated wording that motion alerts can configured to be sent "always, never, or only during a scheduled trigger event".   MT: MT10 Installation Guide - Temperature and Humidity MT14 Installation Guide - Indoor Air Quality MT15 Installation Guide - Indoor Air Quality w/CO2 MT30 Installation Guide - Smart Automation Button MT40 Installation Guide - Smart Power Controller Change: Added unboxing videos.   SM: Apple MDM Push Certificate Change: Added note that not using the original Apple ID (and therefore the original Apple Push certificate) would result in losing management of the previously enrolled devices.   MDM Commands in Systems Manager Change: Added notes about OS and agent requirements to "Desktop Live Tools".   Configuring EAP-TLS Wireless Authentication with Systems Manager Sentry Wifi Change: Added note that Systems Manager cannot simultaneously support third-party-signed SCEP CA certs and Sentry Wifi. This means third-party-signed SCEP CA certs are not compatible with Sentry Authentication.   General Administration: IPv6 Device Compatibility Change: Added note about support for DHCPv6 and IPv6 RA guard is available on MS starting firmware version MS 16.1.   Mapping Layer 7 Firewall Rules to NBAR IDs Change: Updated NBAR ID for "eset" in category "Software & anti-virus updates".   Meraki Subscription Licensing - Subscription Claim Change: Added note that organizations that currently use PDL will need to open a support case to claim a Subscription License Key.   Cisco Meraki Firmware FAQ Change: Added FAQ "Why are there multiple firmware versions to upgrade to?".   Using Google OAuth Splash with a Walled Garden Change: Updated to include separate configuration instructions for Access Points and WAN Appliances.   Configuring SAML SSO with Azure AD Change: Added note about handling of a IdP X.509 certificate renewal.   Resetting a Dashboard Administrator's Password Change: Added note that this article outlines the password reset of Dashboard admins, not SAML admins.   Dashboard Alerts - Connectivity Issues Change: Added note that accessing the Cisco Meraki Device Local Status Page (LSP) may be required to perform offline troubleshooting steps, such as reviewing offline status details and alerts, configuring a static IP assignment to regain network connectivity, or gathering the Support Data Bundle (SDB) diagnostic logs to share with Cisco Meraki Support.   Status Icon Meanings Change: Updated icons. ... View more

  MX: Site-to-Site VPN Settings Change: Updated phase 2 authentication types to MD5, SHA1 and SHA256 and phase 2 PFS groups to 1, 2, 5 or 14.   Client VPN Overview Change: Added note that for RADIUS server authentication, the Server IP addresses are sorted in ascending order from lowest IP to highest IP. RADIUS traffic towards the servers are prioritized in the same manner, starting with the lowest IP address first. This behaviour cannot be modified.   Meraki MX ThousandEyes Configuration Guide Change: Added supported regions; added warning that the Meraki Dashboard Account and ThousandEyes Accounts must belong to the same region.   vMX Comparison Datasheet Change: Updated operating capabilities for all public cloud providers (start/stop machine, configure static IP etc.).   MS: Switch Ports Change: The option for Mac allow list and Sticky Mac allow list for MS390s is currently under limited release.   MR: MR Overview and Specifications Change: Added MR PDF datasheets.   CW9166 Installation Guide Change: Updated note regarding Dual 5 GHz mode. The operating channels are restricted to UNII-1 and UNII-2 for the first 5 GHz radio and UNII-2e and UNII-3 for the second 5 GHz radio.   MV: MV63 Installation Guide MV93 Installation Guide Change: Added note about Flashing Red LED state (insufficient PoE power).   SM: Enrolling and Supervising iOS Devices using Apple Configurator 2.5 or Later Change: Updated minimum macOS version to macOS 14 or greater.   General Administration: Packet Capture Overview Change: Added note that the capture will fail if packet capture is set to be taken on "All Access Points" and the number of access points in the network (both online and offline) is larger than 100.   Alerts and Notifications Change: Added instructions on how to have email alerts forwarded as an SMS to a phone number.   Meraki Licensing FAQs Change: Added FAQ "What permission level do I need to add or modify licenses?".   ... View more