Connect. Secure. Manage.
Meraki Air Marshal Configuration
Review Meraki wireless threat detection and Air Marshal settings, distinguishing alerting from active containment and checking authorisation before enforcement.
Devices supported
across the UK
Client locations
supported
Traffic handled
at peak time
Average
response time
Average response is not a resolution time or a contractual guarantee. Support scope and response commitments are agreed for each engagement.
Meraki Air Marshal configuration helps teams review wireless threats and unexpected access points. We plan supported detection and a clear response process for findings. Passive monitoring is kept separate from active containment. Any action that may affect radio traffic needs an authorised scope, with care for legitimate neighbouring networks and a named decision-maker.
Coverage and capacity
Design Wi-Fi around the spaces, devices and traffic that depend on it.
Secure access
Align authentication, segmentation and guest access with the wider network.
Measured performance
Validate roaming, interference and user experience instead of relying on signal bars.
Define the environment and the response authority
An office may see access points belonging to neighbouring businesses, personal hotspots and other legitimate systems outside its control. We establish the premises, authorised infrastructure and people responsible for investigating alerts. The customer should know who may classify a device, contact another tenant or authorise a response. A security feature does not itself establish permission to interfere with a third party’s service.
We check the site’s rules for personal hotspots and temporary wireless kit. A device may break an internal rule without being an attacker. Equally, a familiar network name may need investigation. The process distinguishes these cases and sets out the evidence needed before escalation, so each detection receives a proportionate response.
Standards & partnerships
Confidence in the team behind your network.
Cisco Partner
Cisco Meraki
Cyber Essentials
Cyber Essentials PlusMCI Network Services is operated by Proxar Ltd. Certifications apply to the certified legal entity and the scope of its certificates. View accreditation information
Check platform visibility and coverage
We review the access-point models, software and monitoring setup to establish what the deployed system can observe. Detection coverage depends on the physical setup and supported radio behaviour. We do not assume that a dashboard feature provides continuous, complete visibility of every channel and every device across an entire building under all operating conditions.
The assessment also considers the relationship between RF observations and the wired network. Where the platform provides information that helps classify a potential rogue, that evidence is interpreted within its limits. An unfamiliar radio detected outside a window should not be declared connected to the corporate LAN without supporting information. The report separates observed facts from the classification that still requires confirmation.
A useful starting point
Not sure where to start?
Bring the requirement. We will help you define the engineering work.
Establish a reliable authorised-device baseline
We reconcile known access points, site locations and approved wireless arrangements. The baseline should include legitimate temporary or specialist rollouts so they are not repeatedly treated as unexplained threats. It also needs a process for new equipment and decommissioning. A static allowlist becomes less useful as the estate changes.
Naming alone is not enough for trust. We assess the identifiers and supporting records available for the platform, and identify who maintains them. Where several suppliers operate wireless systems in the same premises, the baseline and escalation route are agreed across the relevant teams. This prevents a legitimate contractor installation from triggering an uncoordinated response by someone who was never told it existed.
Different environments. The same care.
Built around the work
your network supports.
Finance, banking and the wider private sector. We start with the systems and people that depend on your connections.
Finance & banking
Market-data paths, routing and provider coordination on clients’ behalf.
Financial-market services ↗Offices & multi-site teams
Reliable access between people, workplaces and business applications.
Office network design ↗Data centres & cloud
Network boundaries, workload connections and operational ownership.
Data centre networks ↗Separate detection from containment decisions
Active containment can disrupt radio traffic. It requires a clear right to act, an agreed scope and review of applicable rules and effects on others. Our default assessment does not turn on broad automatic containment. Any proposed enforcement must first be approved through the customer’s security and legal process.
Where an authorised containment use case is considered, we check the exact supported behaviour and limitations before rollout. The plan defines when the action may be taken, who can stop it and how legitimate services will be checked. We do not provide a guarantee that containment defeats every threat or substitute it for stronger authentication, wired access controls and ordinary incident-response procedures.
Make alerts actionable and investigate safely
Alert routing should identify the people who can review the evidence and the urgency associated with different events. We agree the information to retain and how it will be handled, taking account of the sensitivity of wireless identifiers and captures. The aim is enough context to investigate, not indiscriminate collection without a defined operational purpose.
A typical investigation compares the observed device with the authorised inventory, physical location and relevant network evidence. Where uncertainty remains, we use approved passive observations or coordinate an on-site check. Disruptive testing is not the first response to an unfamiliar identifier. The incident record explains the conclusion and any policy or change to the settings that follows.
Validate the configuration and review it over time
Testing uses controlled, authorised scenarios to confirm visibility and alert delivery. We check that the response team can distinguish a test event from a real incident and knows the escalation process. Any enforcement testing requires its own approved scope and safeguards. Results describe the conditions tested rather than claiming complete wireless threat coverage from a single demonstration.
MCI can review Air Marshal alongside Meraki dashboard access control and broader wireless security. The handover includes the baseline, monitoring policy, duties and limitations. It leaves the customer with a considered detection and response process, while keeping active interference decisions separate from routine network administration.
Technical references
- Air Marshal — Cisco / Cisco Meraki
- Meraki enterprise wireless security — Cisco / Cisco Meraki
Talk to a specialist
What does your network need next?
Tell us what you are planning, changing or trying to improve. We will help define a practical next step and the engineering scope.
+44 203 196 6566Choose option 1
sales@proxar.co.ukUK-wide service.
Most of our engineers are based in Kent, with a focus on London, Sussex, Essex and Berkshire.
Existing customers should use their agreed support and escalation channels. This form is for service enquiries, not a monitored emergency ticket.
Tell us what you need.
A short outline is enough. Please do not include passwords or sensitive network details.
Thank you. Your enquiry has been submitted.
Please check your name, email and message, then try again.
Your form session expired. Please try again.
Please wait a minute before sending another enquiry.
We could not submit your enquiry. Please call or email us instead.