Creative Networks

Cisco Meraki

Cisco Meraki provides cloud-managed networking and security solutions for businesses. Offering wireless access points, switches, security appliances, and mobile device management tools, all centrally managed through a user-friendly dashboard, Meraki delivers simplicity, scalability, and enhanced security for organisations of all sizes.

Features

• Cloud-managed networking: Simplify control with intuitive cloud management.
• Wireless access points: Ensure seamless wireless connectivity.
• Switches: High-performance for efficient data transfer.
• Security appliances: Advanced protection for network security.
• Mobile device management: Easy device management from anywhere.
• Scalability: Effortlessly expand network as business grows.
• Centralised management: Control all devices via single dashboard.
• Analytics and insights: Gain valuable data for informed decisions.
• Automated updates: Keep systems current with automatic updates.
• Integration: Seamlessly integrate with existing IT infrastructure.

Benefits

• Efficient management: Simplify network administration for greater effectiveness.
• Enhanced security: Protect data and devices with advanced measures.
• Seamless connectivity: Ensure uninterrupted access to network resources.
• Improved productivity: Optimise workflows with reliable networking solutions.
• Cost savings: Reduce expenses through efficient resource management.
• Scalability: Easily expand network infrastructure to meet growing needs.
• Remote accessibility: Manage network from anywhere for convenience.
• Informed decisions: Utilise data for knowledgeable choices and enhancements.
• Automated tasks: Save time with automated configuration and updates.
• Integration capabilities: Seamlessly merge with existing systems for smoother operations.

£350.00 to £1,250.00 a unit a day

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at aj@creative-n.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

573740594094280

Contact

Azeem Javed
03303337337
aj@creative-n.com

Service scope

• Service constraints: There are no constraints to this Service.
• System requirements:
  • Stable internet connection for access and management.
  • Use supported browsers for optimal performance.
  • Check device compatibility and firmware requirements.
  • Purchase appropriate licensing for full functionality and support.
  • Ensure network switches and routers support necessary features.
  • Implement additional security measures as needed for protection.

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Support response times - 08:30 - 18:00 Weekdays, excluding Bank Holidays. Out of hours support available where necessary. 30 minutes to 8 hour response dependent on priority call, P1 - 30 mins, P2 - 1 hour, P3 - 4 hours, and P4 - 8 hours.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 A
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.1 A
• Web chat accessibility testing: We have not conducted any testing of web chat accessibility with users employing assistive technology.
• Onsite support: Onsite support
• Support levels: End-user training can be provided at an ad hoc cost. We provide a UK based Service Desk for support. Out of hours support is available. Our helpdesk is made up of 1st, 2nd and 3rd Line technical expertise. A Technical Account Manager will be assigned as standard as a part of our standard and premium IT Support, see our pricing schedule and SFIA Rate Card for details.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We assist users in adopting our service through a variety of resources tailored to their needs. Our user documentation offers step-by-step guides, FAQs, and troubleshooting tips for independent learning. Additionally, we provide interactive online training sessions and webinars led by experienced instructors to guide users through setup and configuration processes effectively. For those preferring personalised assistance, optional onsite training sessions can be arranged to address specific organisational requirements. Our dedicated technical support team is readily available to assist users with any inquiries or challenges they may encounter, offering prompt resolution via email, phone, or online chat. With these resources and support channels in place, we aim to ensure a smooth onboarding experience and empower users to harness the full capabilities of the service for their communication needs.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Exported upon request. Contact the Support Helpdesk or Technical Account Manager.
• End-of-contract process: At the end of the contract services will continue on a rolling 30 day agreement until either party serves notice. If it is decided the client will exit, Creative Networks will assist in transitioning and migration of services ensuring continuity and a smooth handover. We will, where applicable deliver an Exit Plan which sets out the proposed methodology for achieving an orderly transition of Services on the expiry or termination of the contract. The Exit Plan will contain at minimum: Separate mechanisms for dealing with Ordinary Exit and Emergency Exit. The management structure to be employed during both transfer and cessation of the services and a detailed description of both the transfer and cessation processes, including a timetable. Document how the Services will transfer including details of the processes, documentation, data transfer, systems migration, security and the segregation of technology components. Specify the scope of the Termination Services that may be required and any charges that would be payable for the provision of such Termination Services and detail how such services would be provided. Provide a timetable and identify critical issues and set out the management structure to be put in place and employed during the Termination Assistance Period.

Using the service

• Web browser interface: Yes
• Using the web interface: Using Cisco Meraki's web interface, users can seamlessly set up and manage their network infrastructure. Initial setup involves creating a new network in the dashboard and adding devices, with guided processes simplifying deployment. Through intuitive menus and wizards, users configure network settings like SSIDs, VLANs, and firewall rules. Real-time changes to configurations, such as adjusting access points or updating security policies, can be made effortlessly. The interface also offers monitoring tools for tracking network performance and traffic usage, alongside reporting features for insightful analytics. Whilst the web interface provides extensive control, it may have limitations for highly customised configurations or advanced settings requiring direct access to device CLIs. Complex setups or integrations with third-party systems might necessitate additional steps outside the web interface, potentially involving scripting or API integrations. Overall, the web interface streamlines network management tasks, empowering users to efficiently set up, monitor, and adjust their network infrastructure, though some advanced configurations may require additional expertise or tools beyond the dashboard's capabilities.
• Web interface accessibility standard: WCAG 2.1 AA or EN 301 549
• Web interface accessibility testing: Creative Networks have not done any web interface testing with assistive technology users.
• API: Yes
• What users can and can't do using the API: Through the Cisco Meraki API, users can automate various network management tasks, including setting up services and making configuration changes programmatically. This includes creating and configuring networks, adding devices, and defining network policies. Users can also retrieve network information for monitoring and integrate Meraki services with third-party systems. However, while the API provides extensive capabilities, it may have limitations. Complex configurations or advanced features may not be fully accessible, and some settings available in the dashboard interface may lack full API support. Additionally, users must adhere to rate limits and authentication requirements, and compatibility with older Meraki devices or firmware versions may vary. Despite these limitations, the API offers flexibility and scalability, empowering users to streamline administrative tasks, integrate Meraki services into their workflows, and enhance operational efficiency. It serves as a powerful tool for automating network management processes, but users should consider their specific requirements and the API's capabilities when leveraging it for their network infrastructure.
• API automation tools:
  • Ansible
  • Terraform
  • Puppet
• API documentation: Yes
• API documentation formats: PDF
• Command line interface: Yes
• Command line interface compatibility:
  • Linux or Unix
  • Windows
  • MacOS
• Using the command line interface: With Cisco Meraki's command line interface (CLI), users can automate setup tasks and manage network configurations efficiently. Initially, users can automate the deployment of devices and network settings by scripting interactions with the Meraki Dashboard API. This allows for streamlined provisioning of devices, configuration of network parameters, and creation of policies, particularly beneficial for large-scale deployments.; ; Through the CLI, users can also make changes to existing network configurations and implement policy updates by issuing commands or API calls. This facilitates tasks such as modifying device settings, adjusting firewall rules, and provisioning wireless networks. Additionally, users can retrieve real-time network information for monitoring and troubleshooting purposes, enhancing network management capabilities.; ; Despite its extensive functionality, the CLI may have limitations compared to the web-based dashboard interface. Not all features or configuration options may be supported, and complex configurations might require additional scripting or API integration. Users should also adhere to rate limits and authentication requirements to ensure uninterrupted access to the CLI. Overall, the CLI provides a powerful tool for automating network management tasks and accessing network functionality programmatically, enhancing efficiency and scalability for users.

Scaling

• Scaling available: Yes
• Scaling type: Automatic
• Independence of resources: Hosted on cloud scalable solution.
• Usage notifications: Yes
• Usage reporting: Email

Analytics

• Infrastructure or application metrics: No

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Cisco

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: Less than once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Physical access control, complying with another standard
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Backup and recovery

• Backup and recovery: No

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: The level of availability guaranteed by Cisco varies depending on the specific SLA agreed upon with the customer.
• Approach to resilience: Cisco Meraki ensures network resilience through redundant hardware, cloud-based management, and automatic failover features. Devices are equipped with dual power supplies and WAN ports, minimising downtime in case of hardware failures. Cloud management offers redundancy and fault tolerance across multiple data centres, ensuring continuous operation even during data centre outages.; ; Auto-failover capabilities enable seamless traffic rerouting in case of link failures or congestion, maintaining connectivity and performance. Built-in security features such as firewalls and intrusion detection/prevention enhance network integrity and protect against threats. Real-time monitoring and alerting enable proactive response to issues, while the system's scalability allows for easy expansion to meet growing demands.; ; Regular firmware updates provide bug fixes, security patches, and new features, ensuring ongoing reliability and security. Overall, Cisco Meraki's resilient design prioritises uninterrupted network operation, offering businesses reliable and high-performance network infrastructure.
• Outage reporting: Email alerts.

Identity and authentication

• User authentication: Username or password
• Access restrictions in management interfaces and support channels: Supplier defined controls.
• Access restriction testing frequency: Less than once a year
• Management access authentication: Username or password
• Devices users manage the service through: Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: Less than 1 month
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Less than 1 month
• How long system logs are stored for: Less than 1 month

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: UKAS
• ISO/IEC 27001 accreditation date: 24/10/2022
• What the ISO/IEC 27001 doesn’t cover: Areas not covered by ISO/IEC 27001 certification include specific business processes unrelated to information security, certain third-party services or suppliers, or compliance with other industry-specific regulations.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Organisations adhering to ISO 27001 establish robust information security practices. They develop policies aligned with ISO 27001 requirements, covering areas like access control, data protection, and incident response. Through risk assessments, they identify and prioritise security risks, implementing controls to mitigate them. Employees receive training on security policies and procedures to enhance awareness and compliance. Monitoring and review processes ensure the effectiveness of security controls, with regular audits and assessments conducted. A designated individual or team oversees the implementation and maintenance of the Information Security Management System (ISMS), reporting to senior management or the board. To ensure policy adherence, organisations employ various mechanisms such as audits, reviews, and ongoing monitoring. Non-compliance issues prompt corrective actions and improvements to the ISMS. By following these practices, organisations demonstrate their commitment to information security and continuously strive to enhance their security posture in line with ISO 27001 standards.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Creative Network's have in place a Change Management Process that follows the ISO 20000 Standard. A change is proposed with the Change Manager and then added to the Changes-overview. The change is scheduled to be executed and a roll back plan is created (if necessary). Rollback is actioned immediately upon confirmation as per following the rollback matrix, resources are freed and announcements are published. Periodically, the overview of archived changes is checked.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Creative Network's have a Vulnerability Management process that implements the following: Receives information about zero day threats from the National Cyber Security Center; subscribe to newsletters from vendors and used products, in contact with special interest groups; Technical vulnerabilities are handled either using the Incident management process or the Change management process; Patches are tested following the Installation of software on operational systems.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: All devices have a monitoring agent on them which can identify potential issues and report back to our service desk. If an issue is identified we have an internal 4 hour SLA to ensure remedial actions are carried asap, the seriousness of an incident will be assessed on discovery so that any priority issues can be responded to quickly.
• Incident management type: Supplier-defined controls
• Incident management approach: Fully developed Business Continuity and Disaster Recovery management process developed in line with ISO 22301. Creative Network's have a pre-defined Incident Management Process in place where by an incident is reported with the Incident Manager and then added to the Incidents-overview. After which, relevant log files (from all systems affected) and evidence is gathered. The incident is corrected by implementing a patch, temporary fix or workaround. It is determine whether future occurrences of the incident can be prevented, e.g. by modifying/strengthening one or more controls. Periodically, the overview of archived incidents is checked for apparent trends and effectivity of corrections.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
• Who implements virtualisation: Third-party
• Third-party virtualisation provider: Hyper-V
• How shared infrastructure is kept separate: Each instance is virtualised using Hyper-V.

Energy efficiency

• Energy-efficient datacentres: Yes
• Description of energy efficient datacentres: Our Data Centre follows the ISO 14001 standard. We have in place a robust environmental management system • Procuring consumed energy from sustainable energy sources wherever possible

Social Value

• Social Value:

  Social Value

  Fighting climate change

  Fighting climate change

  Cisco Meraki's services contribute to fighting climate change by promoting energy efficiency, enabling remote management and monitoring, supporting scalable and resource-efficient solutions, and facilitating data-driven decision-making to reduce environmental impact.

Pricing

• Price: £350.00 to £1,250.00 a unit a day
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: During a limited-time free trial, users access Meraki's cloud-managed networking features, including device provisioning, monitoring, and basic security. Advanced functionalities and premium support may be restricted, and the trial typically lasts for 14 or 30 days before users must subscribe to continue.
• Link to free trial: https://meraki.cisco.com/form/trial

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at aj@creative-n.com. Tell them what format you need. It will help if you say what assistive technology you use.