Question on Site 2 Site VPN in Meraki

[merman01]

Question.

Are the following for internet traffic only or do they operate for S2S VPN links too.

Advanced Malware Protection (AMP)

Intrusion detection and prevention

Umbrella protection
Content Filtering
Snort Rules

Also if there is a direct connection to another site (not meraki s2s) do the above rules apply too.

Recently seeing restrictions on operations that upto a few days ago worked fine on S2S and now dont with no modifications made.

[alemabrahao]

Hello @merman01,

I think the answer to your question Is yes, look this:

https://community.meraki.com/t5/Security-SD-WAN/Threat-Protection-with-site-to-site-VPN/td-p/10213

But you can confirm It, opening a case on Meraki support.

[PhilipDAth]

I *think* "Intrusion detection and prevention/SNORT" operates on all traffic.

Everything else does not touch non-Meraki site-to-site VPNs.

[CptnCrnch]

From what I've tested (a while ago though), I can confirm.

[Bindhiran]

Intrusion Detection & Prevention is applicable for Inter VLAN traffics if it pass through the MX.

And the complete list is applicable for Internet traffic but not for Auto VPN and Non-Meraki peerings.