Thanks in advance for any help you can provide a Meraki Noob. I inherited a system with a MX75 and I'm missing something.
If I create a group policy with a level 7 firewall rule blocking social media, it works fine. These are applied on a per-client basis and sites are blocked as intended. However, if I then go into Client details for a specific client and change the policy back to normal or even whitelisted, the websites remain blocked for that client. Clients who never had the Group policy changed retain access.
Also, i can go into the group policy and remove the level 7 firewall rule, returning access to all clients including the whitelisted/normal client. It seems that even though I'm choosing a different policy option in client details, once I have applied a group policy to a client, it remains applied.
I'm sure I'm missing something super obvious, but cannot figure it out. Any help would be much appreciated
Did the client reconnect the network after you changed the policy?
Have you tested it on an incognito tab to see if it's not the browser cache?
@MrMatt : make sure you did it right
could you please follow these steps and give us the updates :
First of all, I appreciate all the information. However, I feel I may have explained poorly. I will try to do better.
example:
I create a GP with a single lvl7 rule blocking, say FB, then apply that GP to a client, it will block FB as intended. However, when I change that client back to normal, or even whitelisted, FB remains blocked.
If I edit the GP and remove the lvl7 rule, FB becomes accessible to the client that is no longer assigned to that GP. It's like there's an "update policy" button I'm missing, but that doesn't seem to be the case.
I am selecting the Group Policy to apply via the drop down in client details.
This is the only Group Policy that has been created.
My test group policy contains nothing but a single level 7 rule.
I am disconnecting from the network after changes are made.
I can reproduce this on other clients, as well as by recreating the Group Policy.
I am on the latest FW version.
I looked through the documentation you folks kindly provided, but am not seeing the issue there.
Any help is much appreciated
I suggest you to open a support case.
Bummer, I was afraid of that. Just hoped it was something I had obviously done wrong that would be apparent 😞
Thanks to everyone who took the time to offer suggestions all the same.