MFA - Allowing URL

[RahulPrasadh]

We need to allow certain URL for accessing new MFA url, I have added URL to layer 3 outbound policy and whitelisted in content filtering and still unable to access, Is there any different config we need to do for allow new MFA url? 

am-landing.i2.automate-webservices.com/?hac=H90AAWOK&userFullName=Amy Scaggs&username=awruck01

[alemabrahao]

Have you run a URL test to validate the category in which the URLs are classified?

Remember that after adding the URLs to the whitelist you need to wait a few minutes for it to actually be applied.

[alemabrahao]

Check it out.

https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Content_Filtering#Patter...

[RahulPrasadh]

Yes, tested category and it's allowed and added to allow URL but still we are unable to access.

[alemabrahao]

Try another way to add the URL, without HTTPs, with an asterisk in a part of the URL without pointing to the entire URL.

one of these ways will surely work.

[MaghM]

If you notice the shared link shows the New URL which is:  https://fde-nonceapi-b2b-prd-na-gkf3gmc8amfbckcy.a01.azurefd.net

 

For example: " *fde-nonceapi-b2b-prd-na-gkf3gmc8amfbckcy.a01.azurefd.net/health "

Here is the documentation for reference:

https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Content_Filtering

Allow 10-15min to make sure the changes took affect. 

If the issue is still ongoing, change the policy to one of the affected clients to be allow-list as this will bypass all the Meraki rules, check the below documentation if you are unsure how to apply it, scroll down to "using client list":
https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Blocking_and_Allowing...

Wait 10-15min and recheck if it works then check the other applied policies in the network. If still the same check the upstream devices.