Content Filtering Not working

[Riser]

Hey fam,

We are trying to test the URL Filtering on Meraki to see how it works but it doesn't seem to block any sites. 

Someone suggested I do this: content filtering relies on the client using HTTP for web traffic, but your client uses the QUIC protocol instead. To resolve the issue, you can create a Layer 3 firewall rule that blocks UDP ports 80 and 443 (which the QUIC protocol uses) which also didn't seem to work.

Any idea. Images are attached

[alemabrahao]

Is it not working to access via App or Web Browser?

[Riser]

I can still access the sites on the Web Browser.

[alemabrahao]

Try using these URLs.

*.facebook.com

*.akamaihd.net 

*.fbcdn.net

*.fb.me

*.fbsbx.com

[Riser]

Facebook is still working. No, any luck.

[Riser]

[alemabrahao]

Are you sure that it's not web browser cache?

[Riser]

I cleared the cache but no luck at all. 

[Inderdeep]

here you can troubleshoot 

https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Content_Filtering/Conten....

[ww]

Looks like the content filter block url list is broken in latest firmware

[Riser]

I kind of think so too because its not blocking an URL.

[ww]

Hmm it does seem to work, but not consistent after i put in or remove urls.

Could you try inprivate browser tab.

Also try maybe reboot mx if possible. 

[RaphaelL]

yeah I was going to suggest to reboot the MX to clear the active sessions / flows.

[Riser]

Did reboot but still didn't work.

[alemabrahao]

I would suggest you open a support case.

[Inderdeep]

but any notification and anything heard from Meraki on this ??

[haupt]

Hey community members, thank you for bringing this to our attention. Can you please open a support case so that we can investigate? At the moment, we are not aware of any widespread issue causing these problems.

[Brash]

No comment on the content filtering specifically, but one thing to note about firewall rules is that when using an FQDN, the MX must intercept a DNS lookup for that domain before the rule will apply.
For example, if the client already has the domain resolved in its cache and you add the firewall rule, the rule won't apply until the MX see's a DNS lookup for the domain.
Solved: Meraki MX Firewall with FQDN - The Meraki Community