NBAR Blocked Events

Introducing NBAR Blocked event type in event log :

Screen Shot 2021-09-22 at 4.00.08 PM.png

In the red box, you can see DNS queries going out to OpenDNS and MX is blocking these requests with the help from NBAR.
Youtube and Netflix is configured among the L7 deny rules - hence, NBAR Blocked events.
As you can see, NBAR Blocked events showcase granular details on destination port, protocol, destination IP, NBAR ID, classification, block type, ...


In the blue box, you can see Youtube is making a direct connection via IP (bypassing the DNS request) and MX is blocking this request with the help from NBAR.
Most applications nowadays have this failback condition to establish a connection.
As you can see, Youtube opened a TCP connection and NBAR Blocked this flow per L7 firewall rules.


With the introduction of NBAR Blocked events, you can experience the blue and red 😉
Meraki is amplifying its traffic analytics experience by bringing critical information to our customers - live troubleshooting, client tracking, security enforcement, app visibility, ...




For more information regarding the NBAR integration, please refer to the following documentation:

Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.