Cisco Secure Access Help

Meraki Registration

Updated: August 24, 2026

Want to summarize with AI?

Describes Meraki Registration in Cisco Secure Access. For Meraki administrators, once you have deployed the Cisco Security Connector (CSC), use the Meraki dashboard to deploy the app to devices using the instructions in the Meraki document Apple Volume Purchase Program (VPP).

For Meraki administrators, once you have deployed the Cisco Security Connector (CSC), use the Meraki dashboard to deploy the app to devices using the instructions in the Meraki document Apple Volume Purchase Program (VPP). When your endpoints have registered with Secure Access, they will appear in the dashboard. For support, contact Meraki support.

Anonymization

Secure Access provides you with the option of anonymizing mobile devices for reporting and administration purposes. When you anonymize a mobile device, its label is hidden and replaced by your device's serial number. The label name is anonymized both in the Secure Access dashboard and in the CSC app UI. For information about how to anonymize your device, see Anonymize Devices.

Register with Meraki

Note

Meraki's Hide App Feature Incompatibility

The Cisco Security Connector is not compatible with Meraki's hide app feature.

Before you begin

You must log in to your Secure Access dashboard as an administrator.
Review and ensure that you meet the Cisco Security Connector requirements.
Have a Meraki API key. For more information about acquiring a Meraki API key, see Cisco Meraki Dashboard API.
Install the Cisco Security Connector app on your iOS device (typically through MDM).
Configure Meraki as required so that it can push configuration information to both CSC and Secure Access. For information about configuring Meraki, see the Meraki documentation.
If deploying to a supervised device, ensure that the names in Secure Access match the Meraki portal name, enable device name updates under Restrictions > iOS Restrictions (Supervised) > Allow Modification of Device Name (Enable) > Keep Device Name Up-to-Date with Dashboard (Enable).

Procedure

Navigate to Connect > End User Connectivity and click Internet Security. Click the iOS tab.
Under the MDM Managed Devices section, click Download.
In the Configure Managed iOS Clients window, click Link MDM.
Add your Meraki MDM API Key, optionally add an Administrator Email, and click Link.

This email address is where diagnostic reports are sent when a user clicks the I icon from within the iOS device. Once set, this email address is automatically added when managing an MDM.

Note

You acquire a Meraki MDM API key from the Meraki dashboard. For more information, see Cisco Meraki Dashboard API.
In the Provision through Meraki MDM modal, select your MDM Profiles.

Note

While you can deploy more than one profile to an iOS device, if you try to deploy more than one profile with Secure Access applied, an error will occur and the second profile will not be applied. You can safely deploy a second profile with only Secure Access applied to a device that has an existing profile that only has Clarity applied.
Check Provision Cisco Secure Access Root Certificate.

The root certificate is required to perform SSL decryption for the intelligent proxy and also helps avoid error messages when visiting blocked pages.
Click Save.

If successful, your mobile device registers with Secure Access and is listed at Resources > Roaming Devices > Mobile Operating Systems. CSC on your mobile device updates to connect to Secure Access so that your iOS device is protected by Secure Access.

Verify Push of Profile Config

Once you have provisioned Secure Access, verify the push of the Secure Access Profile Config on your Meraki dashboard.

Procedure

In Meraki, navigate to Systems Manager > Settings.

You'll see an Secure Access DNS Proxy profile with configuration settings populated from Secure Access.

What to do next

Anonymize Your Device

Procedure

In Meraki, navigate to Systems Manager > Settings and then select your profile.
Under Value for anonymizationLevel, type 1.

Note
If anonymizationLevel is not listed, click Add Setting and add a Key with the value anonymizationLevel and Number with the value of 1. A value of 0 turns anonymization off.
Click Save.

Meraki pushes settings to Secure Access, and Secure Access hides the device's true label name by replacing it with the device's serial number. Existing active devices anonymize with 24 hours. New devices anonymize immediately.

Verify Secure Access on Your Device

On your iOS device, verify that Secure Access is operational.

Procedure

In the CSC app, click the Status icon and confirm that it shows Protected by Secure Access.
For protection details, tap Protected by Secure Access.

Verify Secure Access with Meraki

You can verify the configuration and operation of Secure Access on your Meraki-administrated device.

Prerequisites

Meraki is registered in Secure Access. See Meraki Registration.

Procedure

In the Meraki SM, your profile now has a new setting: “Umbrella DNS Proxy”.

This setting was pushed from the Secure Access dashboard.

Verify Local Operation on the iOS Device

Check the Meraki Profile.

Procedure

On your phone, tap Settings > General.

The MDM profile is listed under Device Management.
Tap Meraki Management.

Verify that Web Content Filter is now listed. This is your confirmation that the updated profile has been pushed to the iOS device.
Tap More Details.
Tap Cisco Umbrella DNS Proxy.

Notice the App: com.cisco.ciscosecurity

The Provider Bundle: com.cisco.ciscosecurity.CiscoUmbrella

These indicate that the profile is working correctly.
Navigate back to Meraki Management and tap Restrictions.
Tap Web Content Filter.
Review the Plugin Bundle ID com.cisco.ciscosecurity. This indicates that the profile is working correctly.

Verify Secure Access

Procedure

In the Cisco Security Connector (CSC) app, tap Status.
Tap Protected by Secure Access.

CSC lists connection details.

Note
IPv6 is listed as Unprotected because this device does not have an IPv6 address.

Verify Clarity

Cisco Security App

Procedure

In the Cisco Security app, tap Status.
Tap Protected by Clarity.

The CSC list connection details.

Note
If CSC is enabled and registered, but not connected, generate some new web traffic and try again.

Upgrade the Cisco Security Connector

When an updated version of the Cisco Security Connector is available, it will be pushed to the App Store and updated from there.

Uninstall the Cisco Security Connector

For information about removing apps from managed devices, see Meraki SM's documentation.

Meraki Documentation

For more information about Meraki, see the following:

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.