IPS/IDS demo on Meraki MX

[Avdhesh]

Hi All,

we have to present a demo to one of our client looking for Meraki SDWAN . the catch is they want to see IPS/IDS functionality as well. how do we show them the Hits against IPS/IDS rules.

also please suggest if MX devices have anti-bot features as well.

[Brash]

A common method to test IPS is download the EICAR test file. You would then be able to see the detection/prevention in the security center logging.

Additionally some other methods have been mentioned in the following post

https://community.meraki.com/t5/Security-SD-WAN/Simulate-Intrusion-Attack/m-p/82116

As for your other question, IPS does include identified botnet traffic

https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Threat_Protection#Intrus...

[PhilipDAth]

@Brash has the best answer.

Shorter answer, the IPS should block this URL.  It is a standard test virus (it's not really a virus, just a test one).

http://www.eicar.org/download/eicar.com.txt