Meraki MX - Viewing traffic logs

[LeAnts]

Hi All,

new setup on meraki.. we have the following outbound rules.

LAN -> Internet allows ports http(s), dns, ntp, ping - very basic

Then i have another rule to with any any allow..

is there a way i can audit what traffic is being passed over the any any allow rule? i see hits but unable to determine what ports/dest IPs are still going out.

no syslog configured at this stage as in POC testing atm.

thanks

[alemabrahao]

You have to enable the syslog configuration.

https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Syslog_Server_Overv...

[alemabrahao]

Explaining better, you need to send the logs to a syslog server, the dashbord does not have detailed information.

[CptnCrnch]

In release 18.2, you could use Firewall Logging: https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Firewall_Logging

[LeAnts]

thanks for the info.. guess i will configure syslog then...

[LeAnts]

ah.. i like the logging tool option.. but we are running version 18.107.2

if i were to upgrade, what is the most stable release in 18.2 to use?

many thanks

[ww]

Latest rc is MX 18.211.0.1