I opened a ticket and got this response…not sure if this means the feature only blocks by domain and dies or if a malware operator plants malware on my network…the out bound transmission port is blocked …I’m thinking not for the later.
——————————————————
Thank you for contacting Meraki Go Support!
The security subscription blocks access to websites and domains known to host malware. I can't confirm what specific ports are blocked, but well known malware threats would be blocked by the feature.
Regards,
Meraki Go Support