MX Webfilter

[Daniel24]

I will be moving to the MX's soon for firewall and web filtering needs. I believe I have read that the web filtering solutions within the MX devices do not provide a splash page to alert users of a blocked page. If this is true is there anyway to resolve this with additional software/license add on? Is this something Cisco Umbrella license resolves?

[GreenMan]

This is true, for sites using HTTPS (which is a lot of sites, these days):   https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Content_Filtering/Conten...

Blocked sites using HTTP will generate a block page back to the client:   https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Configuring_the_Defau...

To my knowledge the issue with HTTPS can't be resolved natively with the Meraki solution alone but, whilst I'm no expert on Umbrella specifically, I believe that can address this, provided the clients trust the cert which Umbrella uses for the block page:   https://support.opendns.com/hc/en-us/articles/227987007-Block-Page-Errors-Installing-the-Cisco-Umbre...
This is likely to be a problem if your clients are unmanaged (e.g. Guest users)

[alemabrahao]

On Umbrella you can use SSL decryption. On Meraki, the HTTPS Inspection feature was announced, and It's is still in development and in beta.

[Daniel24]

Will I be able to have the SSL Decryption at the Umbrella Secure Internet Gateway Essentials or do I need a different level of licensing for this feature?

[GreenMan]

HTTPS decryption is part of the Intelligent Proxy component of Umbrella SIG, which is included with Essentials.  Check out the first line of this ready comparison:
https://umbrella.cisco.com/products/umbrella-enterprise-security-packages