Security Issues with Cloud Network Devices like Cisco Meraki
A friend asked me to setup their Cisco Meraki device and here is why I told them no:
We can see that the device has a built-in webserver that reverse proxies to my.meraki.com which is a huge security risk. Let’s assume we are happy to blindly trust Cisco and the US government. Your device is exposed to the internet, at best, if the Meraki website or infrastructure is compromised then your internal network could be too.
A compromise is not at all far fetched given Cisco’s ASA’s ongoing history of exploitation issues: https://www.cyber.gc.ca/en/news-events/cyber-activity-impacting-cisco-asa-vpns
These devices make management easier for people without any IT knowledge or skills but for anyone who is security conscious, I would avoid these products.
