Meraki MX NAT enable and open port 80

[AYEN]

Hi Everyone,

       I have a concerns with Meraki MX security rules. I used NAT configuration and I allowed some Port 80, 443 etc which are needed to inbound. So since I allowed only specific IP outside why in alert centre continuously send us an alert notification. And how I assured the other IP outside which trying to penetrate in our network not traverse in my local

LAN network.

Thank you.

[alemabrahao]

If you only allowed specific IPs, other IPs were unable to access them, but if you run a port scan you can know that they are open.

For security reasons, I would not open the ports without a WAF solution filtering this.

What I advise is to use a site to site VPN or VPN client to allow access.

[AYEN]

Hi, using a site to site VPN not possible because currently setup the user outside can only access their webserver and other resources via internet only by their Laptop or tablet. So WAF is another solutions that should I buy or existing in Meraki MX solution?

[alemabrahao · Accepted solution]

It's another solution.

https://www.f5.com//glossary/web-application-firewall-waf

[AYEN]

Thank you for the link I'll try to check this one