Meraki’s Systems Manager teams have been hard at work, and we’ve been delighted to receive your feature requests from the built-in “make a wish” button at the bottom of every page in the Meraki dashboard. I’m happy to share a handful of new features we’ve recently rolled out in Systems Manager: enrollment restrictions, HTTP global proxy, granular profile installation, and additional privacy settings.
Enrollment restrictions allow you to set the IP ranges from which a device may enroll into Systems Manager. This restriction only applies during the enrollment phase, and, once enrolled, the device can receive monitoring and management commands while connected to any network.
Enrollment of devices that are connected to a Meraki network can be streamlined through automatic discovery and enrollment into Systems Manager, but a simple checkbox prevents devices from enrolling without a code.
HTTP global proxy
Proxies force HTTP traffic through a particular server, which makes them popular solutions in schools and healthcare providers to ensure CIPA or HIPAA compliance as well as in corporate environments that filter web content. You can now configure the proxy in Systems Manager either manually or by using an automatic .pac URL, and you can push those settings to your supervised iOS devices.
Granular profile installation
Profiles let you create different policies for different groups of devices. For example, the profile below is only applied to devices that have the “marketing” and “ipad” tags.
The device details page now shows a detailed report of the profiles installed, checks the device’s compliance state, determines if a device is supervised, and enables granular debugging and controls.
In BYOD environments, IT must carefully balance device security with employee privacy. Our new privacy settings allow you disable location or SSID tracking on a per-profile basis. Since profiles can be applied selectively to devices, Systems Manager now allows tracking of some devices but not other, more sensitive ones. IT departments can manage BYOD or corporate-owned devices while still protecting end-user privacy.
All of these features are currently live in the Meraki dashboard. If you don’t have an account already, you can sign up for free online.