Traffic being blocked, no events to research...

[UBI_Jonathan]

Hi all, 

I have a MX84 and it has recently started blocking traffic to a few specific URL's. I know this because if I whitelist a client, they can get to the site without issue. After, if I de-whitelist (make "normal") the client, they can continue to access the site. To me, this is indicative of the certificate being blocked, not the site itself. I had a similar issue a few years ago where a client cert was being blocked, and as soon as I would whitelist the client, it would become active again, then de-whitelisting the client allowed the client to continue to connect securely. Eventually, I traced the issue down to the layer 7 firewall rule I have to not allow traffic to anything but the US (we are a very small community-based company). Adding the country where the CA cert was based out of fixed the issue. 

The thing is if I go to Network Wide > Event Log > Filter by the client, there's no events saying anything is being blocked.

Does anyone know how I can accurately troubleshoot this issue and see why this traffic is being blocked?

[alemabrahao]

Did you do the URL test to see the category the sites are being placed in?

You can request a change of category.

What firmware are you running?

https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Content_Filtering/Conten...

[UBI_Jonathan]

It's on 18.107.2

Yeah, it passed the URL test.

To further test this, I pulled the country rule out of the layer 7 firewall, and the issue resolved, but I don't want to leave that removed. I wish the firewall would log the event so I knew what country it was matching to. 

[alemabrahao]

I suggest you make a feature request.

[UBI_Jonathan]

While I appreciate the comment, I'm sure that'll get tons of traction and help my immediate situation. Why denied traffic wouldn't get captured to begin with.

Meraki: I'm gonna block this traffic!

Me: OK. Why?

Meraki: ¯\_(ツ)_/¯

[jOMeraki2]

I prefer utilizing Google Chrome to troubleshoot content filter issues. By using this browser, you can easily view all requested URLs and identify any that are being blocked. Recently, I encountered a problem with a website where the styling was not working properly. After inspecting the site using Chrome Developer Tools, I discovered that the site was requesting Bootstrap files from an external source, which were being blocked. I resolved this issue by adding the URL to the allowed list, and now the website is functioning correctly.