Content Filtering white list

[Matt_C]

Hi all,

Does the white list allow the URL to be visited if that URL is covered by a Content Category defined in the Category blocking section of content filtering, also does it allow a URL to be accessed if it is in the black list?

Manythanks for your time and help.

Kind regards

Matt

[RaphaelL]

Hi ,

https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Content_Filtering

If any of the above steps produces a match, then the request will be blocked or allow listed as appropriate. The allow list always takes precedence over the blocklist, so a request that matches both lists will be allowed. If there is no match, the request is subject to the category filtering settings above.

I would supose that it also takes precedence over the Content categories & Threat categories

Hope that helps !

[Matt_C]

Hi there,

Many thanks for the reply, yes it looks like the white list trumps the black list and the content categories if I have understood the document correctly.

Many thanks for your time and help

[alemabrahao]

Allow List

Applies the following settings to a client:

• Is exempt from all firewall rules, both Layer 3 and Layer 7 (Applies to both the MX Security Appliance and the MR Access Points)
• Bypasses AMP 
• Bypasses a Click-through splash page 
• Bypasses a Billing (paid access) splash page and access the network on an SSID without paying or authenticating
• Bypasses a Sign-on splash page without authenticating (applies to both the MX Security Appliance and the MR Access Points)
• Is exempt from Per-client bandwidth limit (applies to both the MX Security Appliance and the MR Access Points)
• Is exempt from Traffic shaping rules (applies to both the MX Security Appliance and the MR Access Points)
• Bypasses Content filtering on MX Security Appliance 

• Restricted Youtube content will NOT be bypassed by allow listed clients as it is NOT considered part of Content Filtering.
• IDS/IPS under Security & SD-WAN > Configure > Threat Protection will NOT be bypassed.

Note: The device is still subject to association requirements and per-SSID bandwidth limits on MR access points, as well as Uplink Configuration and Security Filtering on a MX security appliances. RADIUS attributes that would assign a bandwidth limit to a client