Block IP address for inbound \ outbound traffic

[Mad_Dog_82]

Hi All,

I have MX68CW-WW.

Could you please advise how to block IP address for inbound \ outbound traffic.

Thanks. 

[DarrenOC · Accepted solution]

Hi @Mad_Dog_82 , the firewall is stateful (edited @CptnCrnch 😉) so all inbound traffic is blocked by default.  For outbound traffic you need to add a Layer 3 firewall rule.

[DarrenOC]

Take a look here for config guidance:

https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Firewall_Settings#:~:text=The%20....

[CptnCrnch]

Sorry @DarrenOC, but it's stateful in that case. 😉

[DarrenOC]

Thanks for keeping me inline @CptnCrnch 

[jimmyt234]

If you happened to have inbound NAT/PAT rules configured with any source allowed then I would use the Layer 7 firewall to block Remote IP Range, this should block those IP's coming in on your NAT rules.