How to block port 445 at the Edge in a full mesh

[ktv-meraki]

Hello everyone, 

We have a full mesh topology so I am a little confused on how I would block port 445 or any port from that matter for inbound communication.  I am referencing the links below.  if 445 is still being used on the internal LAN, then how can we secure our environment with outside threats to 445.

https://www.tufin.com/blog/tech-how-to-configure-your-firewalls-to-block-the-wannacry-ransomware-att...

https://www.speedguide.net/port.php?port=445

[alemabrahao · Accepted solution]

All inbound traffic is blocked by default unless you have inbound NAT configured.

Note: In Routed mode, all inbound connections are denied except for ICMP traffic to the appliance, by default. If you want to allow additional inbound traffic, you will need to create a new port forwarding rule or NAT policy and explicitly allow connections based on protocols, ports, or remote IP addresses (see below).

Outbound connections are allowed by default. Customers may need to add a default deny rule for compliance and increased security.

https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Firewall_Settings

[ktv-meraki]

Thank you sir!

[DarrenOC]

Meraki firewalls by default block all inbound traffic.