Hello,
We have a Meraki MX 105 set to passthrough mode that is behind a MX 100 on the edge. The MX 105 was put in place to isolate one major Windows system. On the Threat Protection page, it shows Protected networks and lists the default recommended network. My question is should the Protected networks only list the one subnet the windows box is part of or should it only contain the Windows x.x.x.x/32 address for the host itself. Our goal is to protect this system since it is no longer supported by Microsoft and will no longer have security patches available. Since its such a critical system for our company and they have kicked the can down the road for so long, we need to add this layer of security until the system is replaced. I appreciate any input from the community.
