MX Running Firmware MX 16.16 is Blocking Google Drive

[Mike6116]

I upgraded  Some MX to the latest MX  16.16 firmware  and then they started to block  Google Drive  it seems  MX is identifying all traffic as youtube traffic

i have added the exception  to the whitelist url pattern  but it is not working at all

Seems new firmware identify  google drive as   Video & Music  wich i have all blocked  under L7 policy

[alemabrahao]

It's a little strange, can you try to allow this URL list?

https://support.google.com/a/answer/2589954?hl=en

[ww]

Afaik the whitelist is for content filter. So you have to remove the full layer7 fw "all" group and add more specific ones.

[Mike6116]

I can do that , but one of the issues is that I need YouTube to be blocked , so if the mx identifies all google traffic as YouTube how to block YouTube only ?

[DavidLeBoeuf]

I am seeing similar behavior. Upgraded to 16.16 on 4/4 and now I see a bunch of traffic in my logs being blocked due to the layer 7 firewall rule which is:

I am even seeing some internal -> internal traffic being blocked by this rule.

[Mike6116]

I still have the issue,  some work warround i found was to only list Facebook, instagram and twitter, because if i list All the social web & photo sharing category  then google drive does not work...

[MDF_AshcK]

im confused that's solve the problem or not?

[Mike6116]

Use te workaround posted above 

[Mike6116]

Any one having this behavior with 16.16 FW,  i understand this is regarding Nbar  function as it is identifying drive as youtube as Nbar ID 82

[FCFC]

Yep

similar problems here too, the categories make no sense at all

[AlfredoAF]

Hello. Did you solve your problem?

[Mike6116]

Not yet, but i have a workarround posted above 

[Mike6116]

Use the workaround posted above , issue will be there until a new firmware is released , the L7 rules posted as workaround work fine in the meantime

[Dunky]

The entire NBAR implementation in terms of usability is a total mess.  I am being asked to look into alternate suppliers for firewalls due to this debacle.  And once we start with firewalls, that's the start of the slippery slope to leaving Meraki altogether.

If only they had thought it through and given us the ability to have L7 ALLOW rules and specify src/dst then we would live with it.

[Mike6116]

i think they will  add the functionality to allow L7  in the very near future,  i agree  Nbar is a total mess right now,  a lot of Meraki users have been reporting all kinds of L7 blocking   

[DonnieTri]

I have MX Running on MX 17.10.2 still have these issue.

[NeoSkeeze]

Hello, I still have exactly the same issue on MX 17.10.2 except it happens out of nowhere during the day. I have to reboot the MX and then we have access again to Google Drive - Google Classroom ... It is very frustrating.

I changed my layer 7 rules as someone mentioned here so I will know soon enough if that work around works for me. 

Besides, you will notice I have a burst of events each time the issue shows up.... 

I'll keep you updated.

[alemabrahao]

It's look like a L7 rule configured. Have you tried removing it?

[NeoSkeeze]

Hi, 
I changed my Layer 7 rules as mentioned above. I did it 5 minutes ago so, I will have to wait now to see is the issue shows its nose again 🙂
My new setup: i'm not blocking "all" social, etc anymore.

Is there a way to see what rule is blocking that traffic? Thanks!

The Nbar ID 2572 is related to Google Advertising though... 

I will keep you updated.