- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
MX Webfilter
I will be moving to the MX's soon for firewall and web filtering needs. I believe I have read that the web filtering solutions within the MX devices do not provide a splash page to alert users of a blocked page. If this is true is there anyway to resolve this with additional software/license add on? Is this something Cisco Umbrella license resolves?
- Labels:
-
Other
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This is true, for sites using HTTPS (which is a lot of sites, these days): https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Content_Filtering/Conten...
Blocked sites using HTTP will generate a block page back to the client: https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Configuring_the_Defau...
To my knowledge the issue with HTTPS can't be resolved natively with the Meraki solution alone but, whilst I'm no expert on Umbrella specifically, I believe that can address this, provided the clients trust the cert which Umbrella uses for the block page: https://support.opendns.com/hc/en-us/articles/227987007-Block-Page-Errors-Installing-the-Cisco-Umbre...
This is likely to be a problem if your clients are unmanaged (e.g. Guest users)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
On Umbrella you can use SSL decryption. On Meraki, the HTTPS Inspection feature was announced, and It's is still in development and in beta.
Please, if this post was useful, leave your kudos and mark it as solved.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Will I be able to have the SSL Decryption at the Umbrella Secure Internet Gateway Essentials or do I need a different level of licensing for this feature?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
HTTPS decryption is part of the Intelligent Proxy component of Umbrella SIG, which is included with Essentials. Check out the first line of this ready comparison:
https://umbrella.cisco.com/products/umbrella-enterprise-security-packages