Cisco SASE: Onboarding/Offboarding Cisco SASE with Meraki SD-WAN
Overview
The Cisco SASE with Meraki SD-WAN enables optimized, separate management experiences for NetOps and SecOps teams. The onboarding process involves integrating Cisco Secure Access with the Meraki dashboard by navigating to Organization > Configure > Integrations, selecting Cisco Secure Access. Users then add the Integration Meraki API Key from the Secure Access dashboard to complete the integration. After successful onboarding, a SASE tab appears in the Meraki dashboard for streamlined management.
Prerequisites
Before getting started with the onboarding process, there are a few important prerequisites and initial command steps to complete. These steps will ensure a smooth and seamless onboarding experience, setting you up for success right from the beginning. Refer to CISCO SASE: Getting Started Guide for detailed prerequisites.
After onboarding is completed addition API keys are generated in Secure Access dashboard. Do not remove any of the keys as it may cause system to get into stuck state.
Claim your subscription in Security Cloud Control (SCC)
Access to Security Cloud Control platform.
Create Secure Access Integrations Meraki API Key
This section explains how to create a Meraki API Key. You will use this key later in the onboarding process.
Navigate to the Cisco Secure Access dashboard. In the left navigation panel, click Admin, then select API Keys.
Access to Cisco Secure Access dashboard with Admin privileges.
Click the Add button at the top right corner.
In the new wizard, enter the API Key Name. Under Key Scope / Admin, select Integrations > MSA key. Set the authority to Read/Write, then click CREATE KEY.
Copy and securely save your API Key and Key Secret, as they will be shown only once. After saving, click ACCEPT AND CLOSE.
You have completed creating the Secure Access Integrations Meraki API Key. To learn more about Secure Access API Keys, use this link.
Integration Experience
Prior to onboarding flow, please check Platform Optimization section.
In Meraki dashboard, navigate to Organization > Integrations (In the Configure section).
Select Cisco Secure Access on the Integrations page.
- Click Connect at the top right of the Cisco Secure Access page.
Prior to selecting Next verify that your SD-WAN environment doesn't require spoke to spoke communication over Hub.
If spoke-to-spoke communication over Hub is required, please work with support to complete this integration.
Copy and paste the Secure Access Integrations Meraki API Key pair from the Cisco Secure Access dashboard and then click Add integration.
After completion, the page displays the user who added the integration, the integration date, and the organization ID from the Secure Access dashboard.
After onboarding is completed addition API keys are generated in Secure Access dashboard. Do not remove any of the keys as it may cause system to get into stuck state.
You will see the SASE tab in the left navigation.
The next you will attach sites to connect MX devices to Secure Access (document).
Disintegration (Disconnecting Meraki Dashboard from Cisco Secure Access)
To disconnect your Meraki Dashboard from Cisco Secure Access, follow belwo steps
Navigate to Organization > Integrations (from the configure section).
Click My integrations. Click Secure Access Integration on the new page.
Click Disconnect at the top right corner.
The disconnection is complete.