Information for Cisco Meraki for Government users
Overview
Cisco Meraki is investing significant resources into launching “Cisco Meraki for Government” to provide Meraki services to US Federal agencies, US government contractors, and critical infrastructure customers. We are "In-Process" for our Authorization to Operate (ATO) under the Federal Risk and Authorization Management Program (FedRAMP) and are currently designated as “In PMO Review.” This is a requirement for any cloud service provider to operate a service for the US Federal Government to use.
This document will cover key technical information for customers looking to get started with the Meraki for Gov service or migrate their existing Meraki networks.
Creating Organizations in Cisco Meraki for Government
Cisco Meraki for Government dashboard is currently live at dashboard.gov-meraki.com. Users can create an account at Cisco Meraki for Government on this page. You can find step by step instruction on Creating a Dashboard Account and Organization in Cisco Meraki for Government.
Supported Meraki Devices
The following lists out the hardware devices supported by the Cisco Meraki for Government service
SD-WAN |
Wireless |
Switching |
Cellular |
MX67, MX67W, MX67C-HW-NA** |
MR36, MR36H |
MS120* |
MG21, MG21E |
MX68, MX68W, MX68CW-HW-NA** |
MR44 |
MS125 |
MG41, MG41E |
MX75 |
MR46, MR46E |
MS130 |
MG51, MG51E |
MX85 |
MR56 |
MS355 |
|
MX95 |
MR57 |
MS450 |
|
MX105 |
MR76 |
C9300-24T-M C9300-24P-M C9300-24U-M C9300-48T-M C9300-48P-M C9300-48U-M C9300-24UX-M C9300-48UXM-M C9300-48UN-M C9300-24S-M C9300-48S-M C9300L-24T-4X-M C9300L-24P-4X-M C9300L-48T-4X-M C9300L-48P-4X-M C9300L-48PF-4X-M C9300L-24UXG-4X-M C9300L-48UXG-4X-M C9300X-24HX-M C9300X-48HX-M C9300X-48HXN-M C9300X-48TX-M C9300X-12Y-M C9300X-24Y-M |
|
MX250 |
MR86 |
MS390 |
|
MX450 |
CW9166I-MR |
|
|
CW9164I-MR |
|
||
CW9162I-MR |
* MS120 has limited TAA Compliance
** MX67C-HW-WW & MX68CW-HW-WW devices are not supported at this time
In order for certain features to work as expected, the following minimum product firmware versions should be used for nodes hosted in Cisco Meraki for Government:
-
The Cisco Meraki for Government service requires FIPS encryption therefore all devices will need to be running at least the minimum version with FIPS enabled device-to-cloud connectivity. You can find them under “Certifications” on the following link https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Meraki_Device_to_Cloud_Connectivity_-_FIPS
When migrating devices below the minimum version you will see a delay in time required for the device to check in. The device will reach out to the Cisco Meraki for Government service, try to connect, and will be redirected to upgrade their firmware to a newer version. During this time, the device will not be providing any data to Dashboard and will appear offline. This can take upwards of 20 minutes. If the device does not connect by then please reach out to Meraki support.
Supported Features
-
MX, MG, MR, and MS Enterprise Tier features
-
Select MX Advanced Security features
-
Geography based firewall rules
-
Intrusion Detection and Prevention System (IDS/IPS)
-
Content Filtering powered by Talos Intelligence
-
Cisco Advanced Malware Protection (AMP)
-
YouTube Content Restriction
-
Web Search Filtering
-
Cisco Secure Malware Analytics Integration (formerly know as Threat Grid)
-
Adaptive Policy
-
-
MS Advanced Licensing tier
Unsupported Features
NOTE The following features are not supported for devices that are configured in the Cisco Meraki for Government Cloud service :
-
SM
-
MV
-
MI
-
MT
-
MR Advanced Licensing
-
vMX
-
Select MX Advanced Security features
-
Trusted Traffic Exclusions powered by NBAR
-
Umbrella DNS Integration
-
ThousandEyes Agent Integration
-
-
MX SD-WAN+
-
Cisco Catalyst Monitoring
-
Z4 Series
-
Meraki Mobile App
-
SIG-Connector
-
HTTP proxy for cloud communication
-
Configuration fetch using HTTP (devices must use HTTPS for configuration fetch)
Note that these services are subject to change
Firewall Requirements for Cloud Connectivity
Please note that the standard firewall allow list requirements for cloud connectivity are different for Cisco Meraki for Government. The requirements for Cisco Meraki for Government connectivity can be found on the Firewall info page.
For the tests that monitor the connectivity status of MX Appliances in Cisco Meraki for Government, you can simply grant ICMP access to the IP addresses of our test servers. You no longer need to use Google’s 8.8.8.8 as a test destination.
API Endpoints and Considerations
For the Cisco Meraki for government environment, use api.gov-meraki.com as the end point URL.
Support
Overview:
Cisco Meraki for Government is supported by a dedicated group of specialist Network Support Engineers (NSE)
-
US Person/Soil: All Cisco Meraki for Government Network Support Engineer's (NSE) meet strict US Person/Soil requirements
-
Direct Support: Case are addressed by the Network Support Engineers (NSE) with no intermediate/triage tier
-
24/7, 365 Days: We are available 24/7 year-around to support the Meraki for Government Dashboard and its users.
Opening a Case:
Online -
Cases can be submitted directly within the Dashboard. This option helps Support quickly locate your network and resolve issues more quickly.
To submit a case in Dashboard:
- Log-in to Dashboard.
- Navigate to "?" (top-right on green ribbon) > Get help > Still need help? > Submit an email case.
- Use the provided fields to explain the question or issue. Please include any relevant details.
- Click Submit.
You will receive a confirmation email, and a Support Engineer will get back to you as soon as possible. You can update the case if needed by visiting the "?" > Get help > View full case history page in Dashboard.
Phone -
Phone support is available for customers experiencing high-impact issues where quick resolution is a top priority.
When contacting Cisco Meraki Support via phone, please have your customer number and support passcode ready. These can both be found at the "?" > Get help > Still need help? > Call the Meraki Support team page.
The Meraki For Government Support number is +1-415-432-1374.
-
Real time availability: Mon-Fri 9am to 3pm EST.
-
(24 / 7 / 365) On-Call: w/ 1 Hour response goal
Escalating a Case -
Support treats all Severity 1 cases with at the highest level of escalation by default.
To escalate case priority, Call the support hotline and simply make the request. +1-415-432-1374
FAQ
Are free trials for products available?
Free trials of Cisco Meraki for Government products are not currently available. Customers may not claim a free trial on any dashboard organization set up on the Meraki for Gov service.
Can I migrate my licenses from the Commercial Dashboard to the GovCloud Dashboard?
1-Way license conversions from Commercial Dashboard to the GovCloud Dashboard are available with limitations and subject to Terms and Conditions. To inquire about a license migration:
- New or inquiring Meraki for Government Customers: - Please reach out to your sales representative who will be able to assist you with this process.
- Existing Meraki for Government Customers: - Please open a case with support to learn more!
Can I see my Meraki for Gov Organizations and Non-Meraki-for-gov Organizations on the same dashboard/logged into the same account?
No. The accounts created on the Meraki for Gov dashboard are totally separate from non-Meraki-for-gov accounts and do not cross over or share any information or org membership information.