- 23 Jul 2024
- 3 Minutes to read
- Print
- DarkLight
- PDF
Cisco Meraki
- Updated on 23 Jul 2024
- 3 Minutes to read
- Print
- DarkLight
- PDF
Cisco Meraki solutions include wireless, switching, security, EMM, communications, and security cameras, all centrally managed from the web.
Related Enforcement Actions:
Types of Assets Fetched
This adapter fetches the following types of assets:
- Devices
- Software
- Application Settings
- SaaS Applications
- Networks
- Accounts
- Firewall Rules (if selected in Advanced Settings)
Parameters
Cisco Meraki Domain (required) - The hostname or IP address of the Cisco Meraki server. The domain is: https://api.meraki.com
API Prefix (optional) - An API prefix. Either use the default value displayed or leave empty.
API Key (required) - An API key for a user account that has the Required Permissions to fetch assets.
VLAN Exclude List (optional, default: empty) - Enter a list of VLANs from which devices are not fetched.
- If supplied, Axonius will not fetch connected devices from specific VLANs.
- If not supplied, Axonius will fetch connected devices from all VLANs.
Exclude No VLAN Clients (required, default: false) - Select to not fetch devices which are not associated with a VLAN
- If enabled, Axonius will not fetch connected devices if not associated with a VLAN.
- If disabled, Axonius will fetch connected devices even if not associated with a VLAN.
SSID Exclude List (optional, default: empty) - Specify a comma-separated list of SSIDs.
- If supplied, Axonius will not fetch connected devices from specific SSIDs.
- If not supplied, Axonius will fetch connected devices from any SSID.
Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.
To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.
Advanced Settings
Advanced settings can either apply for all connections for this adapter, or you can set different advanced settings and/or different scheduling for a specific connection, refer to Advanced Configuration for Adapters
- Fetch clients URLs history (required, default: false) - Select this option to fetch clients URLs history.
- Time in seconds to sleep between each request (optional, default: 0) - Specify sleeping time in seconds between each API request Axonius sends to this adapter.
- Fetch MDM devices (required, default: true) - Select this option to fetch MDM devices from Google Workspace.
- Fetch additional data for MDM devices - Select this option to fetch the following data for Cisco Meraki MDM devices:
- Device profiles
- Restrictions
- Security centers
- Installed software
- Fetch client policies - Select this option to fetch client policies.
- Fetch firewall rules - Select this option to fetch firewall rules.
- A licensed version of Systems Manager is required for this option to work.
- 'Fetch MDM Devices' requires the Meraki adapter specific field 'Device Type' to be populated with 'MDM Device'. Without the MDM Device value present in this field, the 'Fetch MDM Devices' advanced option will not work.
For details on general advanced settings under the Adapter Configuration tab, see Adapter Advanced Settings.
Required Permissions
The value supplied in API Key for a user account that has permissions to fetch assets.
- The minimum permission required to fetch assets in Meraki is called Organization (Read).
- A non-SAML admin with the Organization privilege in Meraki must enable Dashboard API Access under Organization > Settings > Dashboard API access.
- If an organization has SAML enabled, admins with SAML access cannot generate an API key (these are accounts with a SAML administrator role in Meraki's nomenclature). The account with the Organization (Read) privilege used for generating the API key must be a non-SAML account.
Creating an API Key
To create an API key:
Navigate to the Admin panel. After logging into the panel, click the username in the top right of the screen and then on My profile:
Click My Profile.
Under the API Access section, click Generate new API key and save it to a secure location (you will need it later when configuring the adapter).
Refer to Enabling APIs for further information.
Troubleshooting
If your Meraki uses IP restrictions, then make sure you add the IP address of the Axonius instance to the Permissions list.