Hi there, first time sending a message to the Meraki Community!
Maybe it's a stupid question, but I didn't find a way to do what I want with my MX64 on the web:
I have to install wireless computers to employees, but I want to restrict access to only some websites (eg: the intranet to see their pay, emails and the insurance company to print out forms, etc.). How can I do that?
First, I created a group policy and assigned it to my 2 clients.
Thanks for your kind help!
Solved! Go to solution.
Use my method method. Use content filtering, black list *, and then add in the allowed URLs to the wihtelist.
Try using content filtering. Blacklist the URL pattern:
*
Then add in the URLs you want them to be able to get to. Note it only takes affects on new flows, so if you change it you don't always see the impact immediately.
I am not sure I understand you correctly, do you want to block everything except a couple of websites i.e. really locked down or do you want to allow most websites apart from a few?
Depending on what you want will depend on how its done.
I want to allow access to some websites and block the rest.
Use my method method. Use content filtering, black list *, and then add in the allowed URLs to the wihtelist.
Correct.
Note it only affects new TCP flows. Because of this it doesn't always appear to "kick in" immediately.
Yeah, used it a few times.
The thing that catches most people out is that it only applies to new TCP flows. So you make a change, and it doesn't look like it is working. You go away and get a coffee and then it is working.
Those URLs will very a little bit depending on where in the world you are. Does the below work?
*.windowsupdate.com
*.microsoft.com
This is what I need except with the twist that the two business owners want their computers (on the same LAN) to have full Internet access but the others to be restricted to business required only sites. ANyone have any thoughts on how to do that?
Thanks,
G
Apply the "whitelist" group policy to their two computers.
I finally used the "Blocked website categories" (nearly everything) with the following whitelist to let Gmail through (even if "Search Engines" is blocked):