Security & SD-WAN > Configure > Firewall > Security Appliance Services --how to configure it?

[CharlesIsWorkin]

Hi all,
What do you guys typically set this thing to? Does this really need to be configured at all?

This is for web apps using the API to access my Meraki, right? Or perhaps the status page would be available to all the world if I left it at any....so what do you set yours at if you're not checking it at all from the outside?

https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Firewall_Settings

There is the link for reference.

[jdsilva]

Not for API. Those all go to the dashboard, not to a device. 

I generally just leave at defaults. I open the local status page one when I need to hit that remotely, but always close it again when I'm done.

[CharlesIsWorkin]

So typically, would an ISP need access to the MX's SNMP info or anything like that? I'm thinking of putting "None" in all of those fields.

[jdsilva · Accepted solution]

The only people who need access are those responsible for Mgmt.

If you're not use SNMP then yup, close it down.

Personally, I allow ICMP for pinging, but some paranoid people like to shut that down too.

Keep web closed unless you need it for something. Then only allow what you need.

[CharlesIsWorkin]

Ok sounds good. Since I would look at the Meraki dashboard for status anyway, I think I'll set ICMP to "None" as well.

Thanks!