How to make group policy to stop internet access

[Vipul]

Hello techs,

I am not much familiar with Meraki. We have an environment where I want to block internet access on some computers/Laptops. Is there a way to create a group policy and assign it as per requirement?

I appreciate any help you can provide.

[RaphaelL]

Yes

Create a GP , make some firewall rules : 

Allow RFC1918 ( 10.0.0.0/8 , 172.16.0.0/12 , 192.168.0.0/16

Deny Any

[Vipul]

Thank you, @RaphaelL, for your quick response. I missed mentioning one thing. I have set up a site-to-site VPN. to access our data center. Is that will be impacted?

[RaphaelL · Accepted solution]

As long as anything you want to reach over the Site-To-Site VPN is included in those ranges : 

Allow RFC1918 ( 10.0.0.0/8 , 172.16.0.0/12 , 192.168.0.0/16

You will be fine. You can add more stuff if needed.

You should probably test this group policy beforehand.

[Vipul]

Thank you, @RaphaelL 

It's working.