L7 firewall rules for Internet traffic only?

[suneq]

Hi,

We learned the hard way that L7 firewall rules will be applied for both VPN and Internet traffic. Is there a way to configure so that L7 firewall rules will be applied for Internet traffic only please? Thanks.

[KarstenI · Accepted solution]

At least I am not aware of a way to do that. I filed a "wish" for this inconsistent behaviour to stop some time ago.

[BlakeRichardson]

Not currenty no. This is one of the reasons why I wasn't able to choose Meraki as a Firewall vendor, there is just to many features missing or that are simply on or off and not configurable enough to be used in our environment. 

While I love Meraki gear I think in the MX space they need to pay more attention to what competitors are doing. 

[MilesMeraki]

I have a funny feeling that the MX Firewall/Advanced security features will be shifted to Umbrella and the MX will be sold as a SASE/SDWAN appliance

[Inderdeep]

@MilesMeraki : That will never happen i am sure.

[suneq]

Thanks all for your sharing.