Enable Meraki two-factor authentication (2FA)

The platform identifies disabled or non-configured two-factor authentication (2FA) in Meraki dashboard and recommends enabling 2FA for all administrator accounts. Failure to implement 2FA leaves administrator accounts vulnerable to credential-based attacks, unauthorized access, and potential security breaches.

Recommendation Impact Across KPIs

KPIImpactCalculated?
Reliability:No significant impact on system reliability❌
Security Compliance:PRIMARY REC - Enhances authentication security and meets NIST compliance requirements✅
Economic:No direct economic impact measured❌
User Experience:No significant impact on user experience❌
Environment:No environmental impact❌

Score Calculation

1. Data Ingestion

  • Organization ID
  • Current 2FA status
  • Administrator account details
  • Login security settings

2. Data Enrichment

  • Mapping to NIST compliance requirements
  • Authentication method compatibility
  • Security policy alignment

3. Health Score

  • Calculate the Security Compliance score using: 
    (NIST Score * NIST Asset Weight) * Multiplier for length of compliance
  • Source: DataTable-NIST

Example Graph

Pie chart showing the percentage distribution of organizations with MFA enabled versus disabled, providing a clear visualization of current security posture across the organization's Meraki infrastructure.

 

Business Opportunities

Product Sales Opportunity

As a provider this recommendation provides an opportunity to sell Meraki advanced security licenses and additional security features. The platform will identify specific licensing requirements as part of the recommendation.

Professional Services Opportunity

The recommendation provides an opportunity for professional services to implement and configure Meraki 2FA, including user training and documentation. The estimated effort includes initial setup, user enrollment, and policy configuration.

Remediation Guidance

To resolve the recommendation the following steps are recommended:

  1. Develop a 2FA Implementation Plan
    • Identify all administrators requiring 2FA
    • Ensure authentication app availability
    • Verify backup recovery methods
  2. Communicate with Stakeholders
    • Notify IT administrators
    • Provide setup instructions
    • Establish support process
  3. Enable 2FA in Meraki Dashboard
    • Access Organization Settings
    • Configure Authentication settings
    • Enforce user enrollment
  4. Post-Implementation Monitoring
    • Verify administrator setup
    • Monitor authentication logs
    • Adjust security policies
  5. Ongoing Maintenance
    • Review 2FA compliance
    • Maintain recovery options
    • Update security practices

Supporting Information

Supported Data Sources

  • Cisco Meraki

Recommendation Categorisation

  • Security
  • Compliance
  • Access Control

Supported Instances

  • Meraki Dashboard
  • Organization-level configuration
  • Network-level administration

Planned Instances

  • Additional authentication methods
  • SSO integration
  • Advanced security features

For more information