Cisco Meraki Cloud Management
Version: Cisco Meraki Cloud Management.
Cisco Meraki cloud-based management provides centralized visibility and control over Meraki’s wired & wireless networking hardware, without the complexity of wireless controllers or overlay management systems. Integrated with Meraki’s entire product portfolio, cloud management provides feature rich, scalable, and intuitive centralized management for networks of any size.
Netsurion Open XDR manages logs from Cisco Meraki Cloud Management. The alerts, reports, dashboard, and saved searches in Netsurion Open XDR are enhanced by capturing important and critical activities of Cisco Meraki Cloud Management.
The following are the key Data Source Integration available in Netsurion Open XDR.
Alerts
Type | Name | Description |
---|---|---|
Security | Cisco Meraki CM – Authentication failure | Generated whenever a failure to connect to the AD server is detected in Meraki. |
Security | Cisco Meraki CM – Wireless attack detected | Generated whenever a suspicious wireless attack is detected in Meraki. |
Security | Cisco Meraki CM – Rogue DHCP detected | Generated whenever rogue DHCP is detected in Meraki. |
Security | Cisco Meraki CM – Switch loop detected | Generated whenever a loop on switch is detected in Meraki. |
Security | Cisco Meraki CM – Switch mac flap detected | Generated whenever a MAC flap on switch is detected in Meraki. |
Security | Cisco Meraki CM – Content filtering blocked URL | Generated whenever a URL is blocked by content filtering in Meraki. |
Security | Cisco Meraki CM – Intrusion detection rules update | Generated whenever an update is made to intrusion detection rules in Meraki. |
Security | Cisco Meraki CM – VPN registry status changed | Generated whenever a VPN Registry status is changed in Meraki. |
Security | Cisco Meraki CM – Wireless packet flood detected | Generated whenever a packet flood on wireless is detected in Meraki. |
Compliance | Cisco Meraki CM – Wireless multiple DHCP servers detected | Generated whenever a multiple DHCP servers on wireless is detected in Meraki. |
Reports
Type | Name | Description |
Security | Cisco Meraki CM – Login activities | Provides information about all the authentication activities in Meraki. |
Security | Cisco Meraki CM – DHCP activities | Provides information about all DHCP activities. |
Security | Cisco Meraki CM – Intrusion detection activities | Provides information about intrusion detection activities. |
Security | Cisco Meraki CM – Content filtering blocked URL | Provides information about blocked content filtering activities. |
Compliance | Cisco Meraki CM – WiFi authentication activities | Provides information about all WPA authentications. |
Operational | Cisco Meraki CM – VPN connection activities | Provides information about all VPN connection activities. |
Operational | Cisco Meraki CM – Port role change actions | Provides information about port role change. |
Operational | Cisco Meraki CM – Device activities | Provides information about the Meraki’s Enterprise Mobility Management. |
Dashboards
Type | Name | Description |
---|---|---|
Security | Cisco Meraki CM – Content blocking by filter | Displays the device blocked by content filter. |
Compliance | Cisco Meraki CM – Authentication activities | Displays the authentication activities. |
Compliance | Cisco Meraki CM – WiFi authorization actions | Displays the WiFi authorization actions. |
Compliance | Cisco Meraki CM – 802.1x associated actions | Displays the associated actions. |
Operations | Cisco Meraki CM – VPN Activities | Displays the VPN activities. |
Operational | Cisco Meraki CM – Port role change activities by port number | Displays the port change activities. |
Operational | Cisco Meraki CM – Events by device type | Displays the events by device type. |
Saved Searches
Type | Name | Description |
Security | Cisco Meraki CM – DHCP activities | Provides information about all DHCP activities. |
Security | Cisco Meraki CM – Intrusion detection activities | Provides information about intrusion detection activities. |
Security | Cisco Meraki CM – Content blocked by filter | Provides information about blocked content filtering activities. |
Security | Cisco Meraki CM – Device activities | Provides information about the Meraki’s Enterprise Mobility Management. |
Compliance | Cisco Meraki CM – Authentication activities | Provides information about all the authentication failures detected in Meraki |
Compliance | Cisco Meraki CM – WiFi authentication activities | Provides information about all the WPA deauthentications detected in Meraki. |
Operational | Cisco Meraki CM – VPN connection activities | Provides information about all VPN connection activities. |
Operational | Cisco Meraki CM – Port role changes | Provides information about port role changes. |
Operational | Cisco Meraki CM – WiFi association activities | Provides information about all WPA association and disassociation activities. |
Documentation
The configuration details are consistent with Netsurion Open XDR 9.3 and later, and Cisco Meraki Cloud Management.
Download the Integration Guide for configuration instructions and more information.