Whether you’re working from home, or the office, the use of Wi-Fi continues to expand. Internet traffic is rising, with 50% increases seen in global regions, cities, as well as 228% growth of VoIP and video use, with much of that traffic going over Wi-Fi. Our connected world and economy is clearly relying heavily on Wi-Fi technology. Prior to the coronavirus pandemic, Wi-Fi was already becoming bogged-down with the increase of mobile devices, IoT, new applications like 4K video and VR/AR. Wi-Fi 6 was released to help satisfy the needs of the hungry Wi-Fi ecosystem, but the growth of wireless always continues to outpace whatever is capacity gains are invented.
Source: Cisco Annual Internet Report, 2018–2023
Thank you to the FCC
Today, on April 23rd, the FCC Commission voted to approve 1,200MHz of additional spectrum to Wi-Fi. The information superhighway is getting supercharged with a whole host of additional high-speed lanes. As Ajit Pai, Chairman of the FCC, mentions:
“[The 6GHz band] would effectively increase the amount of spectrum available for Wi-Fi almost by a factor of five”
With these new approvals, Cisco Meraki is excited to help build the internet of the future. In fact, when I was interviewing for the role that I currently hold, our SVP & GM Todd Nightingale asked me what got me excited about Wi-Fi. I told him: ‘6 Ghz’. This was back in Nov 2018 and Ajit Pai had just announced his commitment to 6GHz. Fast forward and here we are, it is real!
Wi-Fi 6’s growth into the 6 GHz spectrum is a game-changer for two reasons – the availability of the additional channels and the ability to finally use 160Mhz for high bandwidth applications like AR and VR. 6GHz provides enormous opportunities to build new applications and experiences for both consumers and businesses.
In addition to new applications, newly available channels will translate to less RF issues and simplicity of maintenance. At Meraki, we look forward to supporting networks as they see significant increases in IoT, wearables, industrial sensors, 4K/8K video, critical telehealth, and remote learning in the coming years.
For more information about our Wi-Fi CERTIFIED 6™ access points, read more here.
As we enter the middle of 2020, the year is shaping up to be an interesting one for Wi-Fi. With the explosion in remote work, we have seen increases in both video collaboration and Wi-Fi calling. On April 1st, AT&T saw an increase of 105% above average Wi-Fi calling. WPA3, the next generation of Wi-Fi security, is rolling out to deliver better encryption for sensitive data. Wi-Fi 6 continues to proliferate as new Wi-Fi 6 clients, such as the 2020 iPad Pro, enter the market.
To take full advantage of the new Wi-Fi trends and new clients in 2020, a Wi-Fi 6 network infrastructure needs to be in place. Deploying Wi-Fi 6 access points will ensure 802.11ax clients experience high-quality and low-latency performance.
Official Wi-Fi 6 certification
The MR36, MR46, and MR56 have now received official certification status for Wi-Fi 6 from the Wi-Fi Alliance.
Whether you are on a call or video conference, Wi-Fi 6 can help enable high levels of efficiency and low latency. OFDMA and MU-MIMO in both the uplink and downlink direction help support a multitude of devices with up to 75% lower latency. While working from home over a secure Meraki Wi-Fi 6 access point, you can experience seamless video conferencing or VoIP calls, while your family watches Netflix in the next room. Hospitals and financial services organizations can offer critical connectivity while supporting the highest security standards, with WPA3.
To hear more about recent Meraki Wi-Fi updates, listen in to episode 22 of Meraki Unboxed, which discusses:
Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.
Joe is a small business owner. He begins and ends his day with multitasking. Checking emails, inventory, employee logins, customer service, and more is his routine. But every day is different. At times, supplies don’t arrive on time, fraudulent activities and physical break-ins happen, and customers are disappointed when transactions don’t go through. There are days when Joe needs to be away for work. Unplanned leave and staff shortage is another source of worry. And all this is just on the surface.
To stay ahead of his competitors, Joe uses different gear and apps to perform routine tasks and address these concerns. While these tools are helpful, it also results in divided attention that saps Joe’s passion for his business. Thus, using the right set of tools becomes critical. For a small business, that means supporting anything and everything from tablets to kiosks and other smart devices.
Just enough, and not too much
As many small business owners know, the way Joe’s business and other small businesses run has changed over the years. Maybe you like to keep an eye on your business with WiFi-enabled security cameras. Almost certainly, your customers are constantly using multiple WiFi-connected devices.
Remember that one time when your first-time customer walked in, right as your point-of-sale lost its WiFi connection? The result was not just limited to a single lost sale. It took you a while to figure out what went wrong. You contacted the help center, went through a few troubleshooting cycles, and manually downloaded the required software. Over time, problems like these compound, leading to lost productivity.
Do you recall the day when your important client visited your small office? You were all set for a breakthrough presentation. But your showstopper video started buffering. Yikes!
Sometimes compromised WiFi hardware tricks you into downloading malicious software which slows down your internet connection.
These setbacks take place because most devices in any business environment are WiFi enabled. While most WiFi solutions are designed for users who have network expertise, not all small businesses are able to hire a technical expert. In fact, only 19% of small businesses have dedicated personnel who handle IT issues.* So what do the rest of the 81% end up doing? Often, they compromise with a generic home WiFi box which was not designed to meet their business needs such as creating guest WiFi or managing WiFi usage. Or, they’re stuck with complex WiFi equipment that they struggle to understand how to use. None of these routes is optimal for small businesses.
Because every second you’re managing or fixing WiFi, you’re not making money.
So why make WiFi complex for small businesses? Why not have something that’s easy to set up, use, and manage and even looks great while doing it?
What does WiFi for small businesses look like?
What if you could block a website that’s slowing down your business in just a few taps on your smartphone? What if watching over all your connected devices was as easy as glancing at today’s weather forecast on your smartphone? Wouldn’t it be useful if your WiFi hardware were updated automatically with better technology and security features — just like the apps on your smartphone? And what if setting WiFi usage limits was as easy as setting the brightness on your phone?
These are the tasks a time-strapped small business owner can easily do without losing focus from business-critical tasks.
All these conveniences add up!
At Cisco Meraki, simplicity and security are at our core. That’s why Meraki Go is designed to work for a time-pressed small business owner looking to ramp up business productivity with limited resources.
Meraki Go Indoor and Outdoor Access Points offer fast and reliable WiFi built for business-critical tasks, and the mobile app is designed to be managed by anyone. Setting up Meraki Go needs no technical expertise and takes less than 5 minutes. The Meraki Go Mobile App subscription enables automatic security, software, and firmware updates to prevent financial loss caused by security breaches and business downtime.
Fast and reliable WiFi together with the ability to easily manage and monitor your WiFi networks from anywhere results in customers spending more time at your business, critical tasks like payment and contract signatures going through smoothly, better experience encouraging repeat visits and so on. With the cloud-based Meraki Go App, you’re just a few taps away from taking real-time actions that impact your business — all through a single device and from anywhere.
Watch a 2-minute video to learn more about how you can do it all and get your business going.
*According to research conducted by Cisco Meraki in association with Wakefield Research, August 2018.
Readers of this blog will be excited to learn that Meraki has recently launched a new WiFi solution for small businesses in single-site locations. Today, we are introducing Meraki Go, a set of WiFi access points tailor-made for small and home businesses, with features to get a business going, all managed by a new easy-to-use app.
Meraki Go enables small business owners to manage their own WiFi needs. With a simple guided onboarding process, users can configure multiple WiFi networks in minutes. This allows shops, restaurants, and cafes to segment their guest and corporate traffic for added security. Meraki Go users can also quickly set usage limits on applications, and block clients from accessing certain websites. This way, small offices with limited bandwidth can prioritize business traffic, and make sure video streaming doesn’t get in the way of work.
As Meraki expands our product offerings, we want to make sure that we’re listening to the needs of our users. This is why we have built the Meraki Go experience from the ground up. With features made for business but an app designed for humans, Meraki Go has the best of both worlds, and we’re excited for you to try it.
All Meraki Go access points will require a subscription (1, 3, or 5 years), which provides access to in-app support, as well as security and app updates.
Check this out on meraki-go.com today, or watch our launch video below.
The pace at which new security threats are being introduced and propagated online has reached exponential levels, gaining speed with each passing year. Organizations have more locations and devices to protect, and threats are using many different ports to try to gain access or exfiltrate data. Security teams are often understaffed and struggle with complex, siloed systems that do not integrate or share intelligence in a programmatic way. These teams need solutions that are easy to deploy, simple to manage, can scale exponentially, and can integrate with other tools.
Securing your wireless users from malicious attacks — particularly these “DNS blind spots” that exist in many networks and are exploited by 97% of advanced malware — is of paramount importance. Unfortunately, recent surveys indicate that 75% of organizations do not actively monitor and apply security for DNS.
It is within this context that we are excited to announce support for integration between Meraki MR wireless access points (APs) and Cisco Umbrella (formerly OpenDNS).
Umbrella is the industry’s first secure internet gateway, a cloud-delivered first line of defense against threats like malware, ransomware, and phishing. Umbrella enforces security at the DNS layer by identifying requested web domains hosting nasty stuff — malware, phishing, etc. — and block end user access to them. Umbrella also enables more secure DNS querying through a tool called DNSCrypt, which automatically encrypts DNS queries between your network and Umbrella’s servers, effectively eliminating the chance that your queries will be the victim of eavesdropping or man-in-the-middle (MITM) attacks. This secures the “last mile” of a client’s internet connection, which is often left exposed and vulnerable.
There is no additional cost or charge for taking advantage of this integration (which is available to all Meraki wireless customers who have upgraded to our latest MR26.x firmware), but Meraki wireless customers who wish to integrate with Umbrella will need a separate Umbrella license and account with that service.
Enabling Umbrella integration
So, what does this mean for admins of Meraki wireless networks? This integration with Umbrella enables Meraki admins who obtain Umbrella licenses (WLAN, Professional, Insights, or Platform) to seamlessly assign DNS filtering via Meraki group policy or SSID to specific subsets of wireless clients, or to them all.
Enabling Umbrella integration takes only a few steps. First, the Meraki and Umbrella dashboards must be linked via the Umbrella Network Devices API key. Once this API key is generated from within the Umbrella dashboard, it needs to be copied into the Meraki dashboard by navigating to Network-wide > General.
Enabling Meraki + Umbrella integration within the Meraki dashboard.
Once the Meraki and Umbrella dashboards have been configured, linking a Meraki SSID or group policy to an Umbrella security policy is easy (note: Meraki group policies must be set to use ‘Custom SSID Firewall & Shaping Rules’ to link an Umbrella policy to them). After this initial setup, a unique identifier is generated behind the scenes for the specified Meraki SSID or group policy and is used by Umbrella to determine how to evaluate traffic from that Meraki network moving forward.
To link a Meraki SSID to an Umbrella policy, navigate to the Wireless > Configure > Firewall & Traffic Shaping section of the Meraki dashboard. There, you will find a button to link Umbrella policies.
Linking an Umbrella policy to a Meraki SSID.
By default, the last policy physically listed in the Umbrella dashboard’s ordered policy list will be inherited by a Meraki SSID unless a different policy is selected from the dropdown list.
To link a Meraki group policy to an Umbrella security policy, navigate to the Network > Configure > Group policies page in the Meraki dashboard and choose the specific Meraki group policy that you want to link. Under the ‘Layer 7 firewall rules’ section of that policy, you’ll be able to choose which Umbrella policy you’d like to apply.
Applying an Umbrella DNS policy to the Meraki ‘VIP Umbrella Clients’ group policy.
Once a Meraki SSID or group policy has been successfully linked to an Umbrella security policy, clients connecting to that SSID or who have been applied that group policy will have their DNS queries encrypted (if the AP supports 802.11ac) and verified against the corresponding Umbrella policy. Encrypting DNS queries between Meraki APs and Umbrella DNS endpoints helps secure the ‘last mile’ of client web browsing and protects against devastating MITM attacks or packet snooping that can reveal which websites client devices are browsing.
An example Umbrella policy may prohibit access to known malicious web domains or websites that host specific types of content, like gambling or peer-to-peer domains. If the client’s request for access to a given website is allowed, Umbrella will return an encrypted DNS response with the appropriate IP address. If the request is denied, then an encrypted DNS response pointing to the Umbrella block page will be returned instead.
Taken together, Meraki wireless and Umbrella integration provide a significantly more robust security framework for IT admins looking to protect clients from web threats in a more proactive way. Instead of waiting for a malicious site to infect a machine and then using tools like antivirus to detect and remediate, Meraki MR customers can rest easy knowing that they are protected from ever reaching harmful sites in the first place.
Interested customers should contact Meraki Support to have this feature enabled. This feature requires an early-release MR firmware version that can be enabled with Meraki support assistance.
1:00 pm: Students trickle back into class after a well-deserved lunch break. Eager to get started with their next lesson, they grab their school-issued laptop out of their emptying backpack, log on, and start their next assignment while patiently waiting for the teacher to bring attention to the front of the room. Unbeknownst to the students and teachers actively participating in classroom activities, the network deployment team paces the halls, double checking that each new access point has a home, and that each switch will be comfortable in its new closet.
3:30 pm: The bell rings. Students rejoice; jumping, dancing, and skipping out of the building, excited to get to their study group, sports practice, or friend’s house. Some stay behind to attend an after-school course, work on homework, or attend a teacher’s office hours. Behind the scenes, the deployment team sneaks inside empty classrooms and offices, unmounting old access points and seamlessly swapping them for brand new, inconspicuous access points to take their place. From the gym to the cafeteria, no space can be left unconnected. With great attention to detail and swift hanging capabilities, the team goes room by room, replacing and adding APs, making sure no classroom is left behind.
4:30 pm: The last of the students head home for the day, with tired eyes, full brains, and superb stories. Once everyone has left the campus, and the school buildings start humming in their normal emptied silence, the real fun begins. Operation: the complete switchover. The deployment team speeds through the remaining AP installation. They move onto the closets, and in a sea of cables, sweat, and servers, they unrack and uninstall the legacy switches, tossing them into a corner of their already forgotten memory. Installing the new switches is faster than a cheetah lapping the school, with an organized, lit up rack of switches foreseeable on the other end.
5:00 pm: Testing. Testing. 1, 2, 3, testing. The devices are online. The computers are connecting. The tablets are connecting. Even the phones are connecting! The intrusion detection system is working. The security cameras are on. We are a go! Network complete.
This nonfiction tale tells the story of Orange County Public Schools (OCPS), the 9th largest school district in the United States, with around 208,000 students spread across 200 schools. And yes, they continue to flip schools left and right in four hours, moving them off of their legacy equipment and onto a Meraki network of MR access points and MS switches. Originally a project that David Overton, Senior Director of Information Security, thought would take several years to finish, is on pace to finish in under two years, with the deployment team transitioning three schools a week. And, for the schools that have already moved onto Meraki, not only has student learning through their 1:1 device program continued to work without a hitch, but the simplified management through the Meraki dashboard has been a lifesaver for the IT team.
To learn more about OCPS and their Meraki deployment, watch a webinar recording with David and a Meraki product specialist. They discussed why David chose Meraki, how they are able to install a new network in 4 hours, and why a robust network is imperative to supporting their 1:1 device program. Watch here!
Cisco Meraki customers can easily future proof their networks for the needs of their business with the new Meraki MR32 and MR72 802.11ac access points (AP) that include built-in Bluetooth Low Energy beacon technology. These APs can be integrated seamlessly into any standard WLAN deployment, while giving customers a Bluetooth Low Energy beacon-enabled network, ready for the future. We see this being especially important in retail where iBeacons and other customer Bluetooth engagement technologies are rapidly growing in adoption.
What are Bluetooth Low Energy Beacons?
Bluetooth Low Energy is a recent enhancement to the Bluetooth standard which allows for the wireless protocol to be applied to new use cases which were previously not feasible. This is primarily due to the energy saving techniques implemented in Bluetooth Low Energy which reduce power consumption when compared to previous Bluetooth standards.
With the ability to efficiently utilize limited power sources, Bluetooth Low Energy is now used in a number of devices which need to communicate small amounts of data over wireless. It is now possible to have devices with battery life measured in months and years rather than days or weeks, while also making them smaller.
This has led to the development of beacon technology and its application in a number of situations. Beacons are very simple Bluetooth Low Energy messages which are transmitted or heard by compatible devices. This device could be a computer, a phone, a wireless AP, or a tag, to name just a few possible devices.
This message has three basic components:
Universally Unique Identifier (UUID)
These components of the beacon can be configured with information the operator wants to communicate to other Bluetooth Low Energy-compatible devices. Typically this is in a non-human friendly form but it can be interpreted by a listening device. For example, in a retail environment it could be interpreted as:
Retail Brand (UUID)
Shop Location (Major)
Product Category (Minor)
When a compatible device hears one of these messages, a user-installed app which is beacon aware can interpret the information in the UUID, Major, and Minor identifiers. This could be used to trigger functionality in that app, for example it could display information relevant to a particular product in that shop, a discount to be redeemed at purchase, or a customer service interaction.
Is it worth using Bluetooth Low Energy Beacons?
Bluetooth Low Energy beacons are a simple way to provide mobile apps with location awareness that is specific to your organization. The low energy features allow mobile devices to use this functionality with minimal impact on battery life. The benefit of this is that apps can enable bluetooth on devices with little negative side effects and a positive experience to end users.
The downside for organizations wishing to implement Bluetooth Low Energy beacon devices is the scale at which they could be deployed creates a significant administrative burden. With a thousand, or ten thousand of these devices, even a year long battery life would lead to a large number being replaced every week.
It also means that when it comes to configuration, it can require extensive pre-staging and visits to site. Should this need to be updated in the future to meet new business needs, the costs of doing this may outweigh the benefits of making the change.
Meraki has solved the physical and configuration challenges of implementing beacon technology by integrating it into the new MR32 and MR72 APs. These APs have fully integrated Bluetooth Low Energy radio chipsets that works in parallel to the three WLAN radios that are inside.
Bluetooth Low Energy and beacon compatible Meraki MR32 and MR72 APs
Hear from Adam Weiss, one of the Meraki engineers responsible for the development of the Bluetooth Low Energy functionality in the APs, on the possible uses cases of this technology and the importance of an integrated solution.
By integrating the Bluetooth Low Energy technology into the PoE compatible MR32 and MR72 APs, the problems associated with maintaining a widely distributed inventory of battery powered beacons is completely eliminated.
The unique cloud-managed architecture of the Meraki MR32 and MR72 means that they can be remotely deployed and configured for zero-touch deployments. The APs can broadcast Bluetooth Low Energy Beacons with a configured UUID, Major, and Minor that is only set once for a whole network of APs. If these identifiers need to be updated, it can be done quickly and remotely through the Meraki dashboard for all APs, all sites, or even different countries.
The rapid software development cycle of the Meraki cloud management solution means that as and when new Bluetooth Low Energy Beacon features are needed, these can be delivered seamlessly at no cost to existing deployments. This ensures your investment in APs can provide the greatest value for the longest period of time.
We are very excited to announce two new enterprise 802.11n access points: the Meraki MR12 and MR16. These new APs offer across the board upgrades over their predecessors, the venerable MR11 and MR14: improved performance, sleeker design, and even a lower price!
Meraki MR16 ($649)
Dual Concurrent 802.11n for Enterprise/Campus
Single Radio 802.11n for Small Branch/Teleworker
These are the slimmest enterprise 802.11n APs. Measuring in at under 1″ thin, they blend seamlessly into their environment.
We built these APs with the network administrator in mind, making them as fast and easy as possible to deploy. The industrial design makes for easy, 1-handed mounting. Each box contains a complete accessory kit, with gear for wall, drop ceiling, and desktop mounting. No pre-configuration is required – just plug the AP in, and it automatically assumes gateway or mesh mode, and downloads its configuration from the cloud.
Despite its slim profile and lower price, the MR12 and MR16 are actually more powerful than their predecessors, featuring both increased transmit power and receive sensitivity. Highlights include:
Layer 7 Traffic Shaping
Line rate deep packet inspection engine for application QoS
High Capacity Design Memory capacity for 100+ simultaneous users
Built-in Policy Firewall Guest, User and Group Acces Control
4th Generation Chipset Top of the line 2×2 MIMO with spectrum analyzer and transmit power control
Client Enhancements Beamforming, Voice/Video QoS, Band steering
To top it all off, these are green little APs, with 100% recyclable packaging, 90% recyclable components, and a multi-tenant cloud hosted controller that is far more energy efficient than traditional hardware controllers.
We’re incredibly excited about these APs, and the response we’ve received from our beta testers has been very encouraging. We hope that you like them too!
Meraki’s AutoRF technology performs automatic cloud-based, system-wide network optimization to ensure peak network performance in any environment. Each AP on a Meraki network continually monitors its environment for interference from other APs and feeds this information back to the Cloud Controller. Last month we added Spectrum Analysis, mitigating interference from non-WiFi devices like microwave ovens and Bluetooth headsets.
AutoRF has always run quietly in the background. But now, our new Radio Settings page gives you more visibility into what’s happening behind the scenes, and exposes new controls for advanced configuration.
The new Radio Power selector either allows the Cloud Controller to automatically dial back transmit power if it detects adjacent access points stepping on each others’ toes, or allows you to maintain full power for all APs.
The Channel Planning Report sheds light on how AutoRF is tuning your network, providing visibility into the current channel and transmit power settings for each AP, as well as the interference sources that were avoided. If you click on the “Details” link next to each row in the table, you will find a detailed report for all of the APs in your network on a particular channel.
Regular users of the Cloud Controller will notice that some settings previously found under Network Wide Settings have moved to this page, where they fit naturally.
We hope that you find this Radio Settings page helps you better understand how the Cloud Controller is optimizing your network, and helps you to make more informed decisions about how to use the Cloud Controller’s RF controls. Please let us know what you like, what you don’t, and what you’d like to see next!
TEDGlobal 2010, themed “And Now the Good News”, wrapped up with some good news for Meraki and TEDGlobal attendees using the conference WiFi. As part of the British Telecom Sponsorship team, fellow Meraki engineer Robert Shanks and I were on site to deploy and support the wireless network for this 4-day conference. To make a long story short, the wireless network performed flawlessly, with just over a 1,000 people connecting throughout the conference and transferring over 250 gigabytes of data.
The conference venue, located in Oxford, UK, had its fiber backhaul brought in by BT. The backhaul was then distributed to wireless users in the two main venues of the conference, the Oxford Playhouse and the gala rooms of the Randolph Hotel, through fifteen MR14 dual-radio access points.
We leaned heavily on the Cloud Controller to quickly deploy the network with a small team. Rogue AP detection and automatic channel spreading maintained performance while TEDsters blogged, tweeted, browsed and streamed all at once. While we trusted the Cloud Controller’s real-time alerts to let us know about unexpected changes (there weren’t any), we also kept tabs on the network’s summary report, giving us a good understanding of the overall usage and performance of the network.
Along with performance and usage information, the summary reports confirmed that the device-of-choice for TEDsters was the iPad, with well over 100 using the network. In fact, hand-held devices accounted for over 50% of clients connecting to the network.
We had a great time at TED, and were happy to see the Meraki network being used so heavily. Thanks to the team at British Telecom for including us!