Introducing NBAR Blocked event type in event log :
In the red box, you can see DNS queries going out to OpenDNS and MX is blocking these requests with the help from NBAR.
Youtube and Netflix is configured among the L7 deny rules - hence, NBAR Blocked events.
As you can see, NBAR Blocked events showcase granular details on destination port, protocol, destination IP, NBAR ID, classification, block type, ...
In the blue box, you can see Youtube is making a direct connection via IP (bypassing the DNS request) and MX is blocking this request with the help from NBAR.
Most applications nowadays have this failback condition to establish a connection.
As you can see, Youtube opened a TCP connection and NBAR Blocked this flow per L7 firewall rules.
With the introduction of NBAR Blocked events, you can experience the blue and red 😉
Meraki is amplifying its traffic analytics experience by bringing critical information to our customers - live troubleshooting, client tracking, security enforcement, app visibility, ...
THIS IS JUST THE BEGINNING!
For more information regarding the NBAR integration, please refer to the following documentation:
