Cisco Meraki

Purpose

The Meraki connector uses the Meraki Dashboard API to collect organization, network, device, client and security appliance event data across MX, MS and MR product lines without requiring device-level credentials.

Requirements

• Meraki Dashboard organization with API access enabled
• A read-only Dashboard API key generated from an account with Read-only organization access
• Outbound HTTPS to api.meraki.com from the AssurIQ Cloud Connector

Permissions

• Dashboard administrator with the Read-only organization role
• API key scoped to that read-only administrator

Setup

1. 1
   Enable API access

   In Organization > Settings, enable Dashboard API access for the organization.
2. 2
   Create a read-only administrator

   Add a Dashboard administrator with Read-only organization access.
3. 3
   Generate an API key

   Generate the API key under that administrator's profile and copy it once (Meraki does not display it again).
4. 4
   Add the key to AssurIQ

   In Integrations, add the Meraki organization and paste the API key into the Credential Vault.
5. 5
   Select networks to sync

   Choose which Meraki networks map to which AssurIQ sites.

Verification

• Meraki devices (MX, MS, MR) appear in Network Map with model and firmware
• Security appliance events populate under Attack Surface for MX devices
• Client inventory matches the Meraki Dashboard client list

Data collected

• Organization, network and device inventory and firmware versions
• Client inventory and connection history
• MX security appliance events (IDS/IPS, content filtering, VPN status)
• Switch port and wireless AP configuration

Security model

The API key is scoped to a Read-only administrator role, which cannot change configuration through the API regardless of the calling application. AssurIQ calls the Dashboard API exclusively over HTTPS with the key stored encrypted in the Credential Vault.

Common errors

• AIQ-INT-001Integration disconnected
  The connector token expired or was revoked. Data from this system is stale.

Troubleshooting

• If only some networks sync, confirm the read-only administrator has access to every network in the organization, not a subset.
• Meraki Dashboard API rate limits can delay large-organization syncs; this is expected and resolves automatically.

Disconnect

1. Remove the organization from AssurIQ Integrations.
2. Revoke or delete the API key from the read-only administrator's Dashboard profile.