MX250 Firewalling and logging

[JED2021]

Seeking a quick start document for  basic subnet firewalling

WAN1 / WAN2 / Site to SIte VPNS/ Client VPNs

MX250 HA

VLAN A VLAN B VLAN C

Goal

Stop inter VLAN for A and B

Permit VLAN A AND VLAN B. Specific URLs

Permit VLAN B goes over Site to site Tunnels

Deny remaining VLAN A AND VLAN B

VLAN C. goes anywhere

VPN CLIENTS go anywhere ( NON SPLIT TUNNEL)

Is there a way to log Firewall hits to a syslog sever to watch  success or failure for troubleshooting.

Thanks

[PhilipDAth]

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Using_Layer_3_Firewal... 

[alemabrahao]

Hi,

I think these links can be useful.

https://documentation.meraki.com/MX/Networks_and_Routing/Configuring_VLANs_on_the_MX_Security_Applia...

https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Firewall_Settings

https://documentation.meraki.com/MX/Client_VPN/Client_VPN_Overview

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Creating_and_Applying...

Meraki Cloud Logging: Configuration, Events, and Analytics

Meraki MX Design: Designing and Configuring Warm Spare Mode

[JED2021]

Which rulebase has priority

IE

L3

VLAN A. deny  Destination ANY.

L7

VLAN A.  Allow. WEBSITE.SAFE.COM

[alemabrahao]

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Layer_3_and_7_Firewal...