First time deploying a Meraki firewall

Mgopar
Conversationalist

First time deploying a Meraki firewall

Hi, I am new to the firewall world.

So I wan t to ask you if there is a starting document with simple questions to ask to the IT department or someone else in the company in order to know what do they want to block, specially content web filtering.

 

Thank you for your attention.

 

18 REPLIES 18
Cmiller
Building a reputation

Not sure of the model you purchased but here are the installation guides:
https://documentation.meraki.com/MX/Installation_Guides

The content filtering Overview:
https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Content_Filtering

I would install it and only enable the "protection" categories like Malware, Botnet, Porn, Know SPAM sources, ect. Let the users work a week and run a report via the summary reporting tool:
https://documentation.meraki.com/MX/Monitoring_and_Reporting/Summary_Report_Overview

Then you can have the IT/management decide what needs to be blocked and for who. This is usually one of the hardest things to figure out if they don't already know. You find out real quick who has pull at the company and they will give you some of the most ridiculous excuses to explain why the "NEED" access to facebook even when they work in the shipping department. Thank you bandwidth shaping! https://documentation.meraki.com/MR/Firewall_and_Traffic_Shaping/Traffic_and_Bandwidth_Shaping

Hope this helps

Also keep in mind, the content filtering is something that only comes with the Advanced Security License (which is ORG wide). Meaning if you purchased it, or want to, then all your MX will need to have the same license as well.

https://documentation.meraki.com/zGeneral_Administration/Licensing/Cisco_Meraki_Licensing_Guidelines...

Nolan Herring | nolanwifi.com
TwitterLinkedIn

Yes, we got the Advanced Security License on our MR53E, MR70 and 5 MR42 devices.

7 licences in total for 3 years.

BrechtSchamp
Kind of a big deal

That's hard to believe :).

 

The MR (access points) only has one license tier. I'm assuming you mean you bought 7 x LIC-ENT-3Y.

 

It's the MX (firewall/router) that has the two licenses. Lets say for example you bought an MX100. You would then either buy LIC-MX100-ENT-3Y (enterprise) or LIC-MX100-SEC-3Y (advanced security).

Perhaps you already had some MX appliances in your Dashboard organization with Advanced Security icensing, and then you purchased additional licenses for APs.  That might give the impression that all the Meraki devices in an Org have the Adv Sec license, but that really just applies to the MX devices.  Today. the licensing is either Enterprise or Advanced Security, at the Organization level.  If you're confused by your Organization > License Info page, PM me and I'll assist.

Yes, sorry. Forgot to mention an mx65w-hw and a lic-mx65-sec-3yr.

 

 

Mgopar
Conversationalist

Thank you so much.

 

I am waiting to the MX, meanwhile I am reading the documentation. 

 

Thanks. 

 

egg_found.png

Cmiller
Building a reputation

Welcome to the Meraki Family and good luck
JimL
Getting noticed

EGG FOUND!

NolanHerring
Kind of a big deal

noooooooooooooooooooooo
Nolan Herring | nolanwifi.com
TwitterLinkedIn

Dangit!

NolanHerring
Kind of a big deal

Ok @JimL 

 

What page was it on?  I was just finishing going through page 3 of old threads lol.

 

I feel like I was skimming so quick I didn't even notice it lol

Nolan Herring | nolanwifi.com
TwitterLinkedIn

I don't recall. I just happened to be on when the next clue was posted and I headed straight to MX, did a search for Firewall and scanned for a headline that indicated a newbie. It was the first I saw that fit the bill so I opened it. I am actually surprised I found it. 🙂

SamDaniels
Conversationalist

Egg found

egg found

egg found
ALD
Conversationalist

EGG FOUND

MeredithW
Meraki Alumni (Retired)
Meraki Alumni (Retired)

Thanks everyone for playing — as this egg has been found I'm closing this thread to new comments. Check back here tomorrow for clue #3!

Meredith W | Community Manager, Cisco Meraki


Found this helpful? Give me some Kudos! (click on the little up-arrow below) New to the community? Get started here
Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels