Block IP Add for Meraki Dashboard

[Deniz]

Hi All,

I dont know if this question has been asked or makes sense, but I see that constantly someone is trying to access my Meraki dashboard with same IP add.

Any possibility to block a specific IP add, range etc that is trying to access dashboard?

Thanks,

Deniz

[rhbirkelund]

Organization > Settings > Security > Login IP ranges

[Deniz]

Thanks for respond, but this will allow access only from specific IP ranges, and block all others 🙂 

I was more looking at option to block a specific IP add who is trying to access the dashboard. 

Thanks,

Deniz

[NolanHerring]

Doesn't this mean that the person has an account of some fashion to even show up in the logs?

[MacuserJim]

I think adding a firewall rule to block that IP would do the trick for you.

[rhbirkelund]

I don't think that adding an inbound Firewall rule, will block the malicious IP from logging into the dashboard. The Inbound FW rule will block all packets incoming to the Firewall. The dashboard is a hosted service on Meraki(/Cisco) datacenters, which fetch information from the Meraki network.

[MacuserJim]

Oh you're right, sorry I was thinking local status page, I was doing some work with those this morning and had it on my mind.

[rhbirkelund]

I can't see a way to block specific IPs from accessing Meraki Dashboard. 

Personally, I don't allow specific IPs to login to dashboard. I allow all. Adding 2FA to the equation. Everyone can try to login, but it won't help them. Especially if you are using unique login credentials. Additionally, the dashboard will become less secure, the more administrators that you add. 

I've added my work IPs and my home IP to the allow list for accessing remote status pages of the MX, so that I can check things if needed.

[Deniz]

Thats correct! They are not trying to access your firewall, but dashboard which locates in the cloud 🙂 

Im not sure there is any way of doing this. Only solution is, of course, to let him try, and use strong passwords, two factor authenticator, and/or to let specific IP range access the dashboard. 

Still i am open for any discussion 🙂 

Thanks all for stepping in!