Skip to content

Meraki

Meraki

Hal connects to Cisco Meraki to read each client’s network reality: which IPs are theirs, how their sites connect, and what’s a VPN peer versus a stranger.

What Hal reads:

  • Network topology and per-site WAN IPs
  • Site-to-site VPN peers
  • VLAN structure and device inventory

Why it matters: an “impossible travel” or “unfamiliar IP” alert is only meaningful if you know the client’s real network. Cross-referenced against Meraki, Hal can say this IP is the client’s branch office (close it) or this IP belongs to no site of theirs (escalate it) — instead of guessing.

Hal checking whether a flagged IP is one of a client’s known Meraki sites before escalating