topic Re: MR30H in Wireless

MR30H

Billy254 — Wed, 10 Jun 2020 18:47:24 GMT

Does MR30H device support intrusion detection?

Re: MR30H

adam17210 — Wed, 10 Jun 2020 19:15:34 GMT

It looks to, according to the MR30H datasheet which you can find here:

https://meraki.cisco.com/lib/pdf/meraki_datasheet_MR30H.pdf

Re: MR30H

jdsilva — Wed, 10 Jun 2020 19:42:30 GMT

All Meraki AP's have support for Air Marshal.

https://documentation.meraki.com/MR/Monitoring_and_Reporting/Air_Marshal

But the better question is do they have a dedicated scanning radio, or do they have to do opportunistic scanning with their main radios? The datasheet @adam17210 linked to shows the MR30H's have a dedicated radio, which is by far the better option.

Re: MR30H

CMR — Wed, 10 Jun 2020 20:12:08 GMT

I thought @Billy254 was referring to physical security, like a server or corporate PC has, which I don't believe the MR30H has.

Re: MR30H

Philip D'Ath — Wed, 10 Jun 2020 23:47:01 GMT

The MR30H does not have IPS for general Internet traffic.

What the others are referring to is WiFi protection, but I'm not sure that s what you meant.

Re: MR30H

BrechtSchamp — Thu, 11 Jun 2020 06:31:15 GMT

Yup

WIPS aka Air Marshal: yes

IPS as in Snort: no, you need an MX with an advanced license for that

Re: MR30H

Billy254 — Sun, 14 Jun 2020 07:22:37 GMT

Hi phylip and thanks,

Whats the alternative for that ? Which model can offer an intrusion detection patch and other security features? Whats the differnce between MR and MX models?

Re: MR30H

CMR — Sun, 14 Jun 2020 08:56:21 GMT

I'm pretty sure that none of the MRs have IDS. MRs are intelligent wireless access points with some security features, mainly based around content access control. i.e. controlling what the wireless clients of them can access.

MXs are firewalls and with the advanced or better licensing they include many of the features you are referring to including intrusion detection.

A 'full stack' Meraki deployment would have MRs providing wireless access, MSs to connect them up, power them and allow wired device access and MXs to protect the solution from the outside world. MXs can of course also control outbound traffic. MSs do have security features to control what devices are able to use each port and how their traffic is routed and controlled.