What's the order of operations on how an MX filters or allows a website?

[ShadowoftheDark]

Hi,

I'd like to know how an MX filters or allows a website whenever a user tries to access it.

Let's say I have a user and she wants to access www.instagram.com.

How does MX decide if she's allowed to access it or not? 

What's the order on how MX checks if she's allowed to access the website?

I have created a diagram below to further illustrate my point although I might be forgetting other filtering methods. Please let me know.

Thanks

[CptnCrnch]

Looks pretty much spot on from my point of view.

[ShadowoftheDark]

Oh, I didn't think that was the order it checks if the website is allowed I just put it randomly in there. 

Is that really the correct order when it checks a website (Group Policy --> Firewall Rules (Ooutbound), Firewall Rules (Layer 7),etc..)?

Also, is there a way to check which is causing the blockage? 

In the logs I can only see the following causes:

- Content Filtering (doesn't say if its Category Blocked or URL Blocked though, doesn't say if its from GP as well)

- Firewall Blocked (doesn't say what rule)

Thanks

[PhilipDAth · Accepted solution]

Some of the info is contained here:

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Layer_3_and_7_Firewal... 

[ShadowoftheDark]

Thanks, I'll check it out.