Content filtering question

Solved
LakesideLion
Getting noticed

Content filtering question

When I have a URL that's explicitly blocked, sometimes I get the Meraki message in the browser tab saying the network operator blocked it and sometimes I just get the browser message "this site can't be reached".   I haven't been able to figure out why the 2 different behaviors.  Can someone explain?

1 Accepted Solution
RaphaelL
Kind of a big deal
Kind of a big deal

Hi ,

 

https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Content_Filtering/Conten...

 

Why is the Meraki block page not displayed?

If the website you are trying to reach is using HTTPS/SSL (rather than HTTP), the browser will display an error page rather than the Meraki block page. Because HTTPS/SSL traffic is encrypted, the MX cannot decrypt and redirect HTTPS traffic to the block page. Instead, the request will simply time out (as seen in the image below).

 

That is probably the reason why.

View solution in original post

3 Replies 3
DarrenOC
Kind of a big deal
Kind of a big deal

Hi @LakesideLion , is that behaviour seen using the same browser?

Darren OConnor | doconnor@resalire.co.uk
https://www.linkedin.com/in/darrenoconnor/

I'm not an employee of Cisco/Meraki. My posts are based on Meraki best practice and what has worked for me in the field.
RaphaelL
Kind of a big deal
Kind of a big deal

Hi ,

 

https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Content_Filtering/Conten...

 

Why is the Meraki block page not displayed?

If the website you are trying to reach is using HTTPS/SSL (rather than HTTP), the browser will display an error page rather than the Meraki block page. Because HTTPS/SSL traffic is encrypted, the MX cannot decrypt and redirect HTTPS traffic to the block page. Instead, the request will simply time out (as seen in the image below).

 

That is probably the reason why.

DarrenOC
Kind of a big deal
Kind of a big deal

Behaviour similar to what you’re seeing:

 

https://cantechit.com/2015/07/06/meraki-mx-the-block-page-and-dns/

Darren OConnor | doconnor@resalire.co.uk
https://www.linkedin.com/in/darrenoconnor/

I'm not an employee of Cisco/Meraki. My posts are based on Meraki best practice and what has worked for me in the field.
Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels