Will Meraki MX has Application Controll or App ID for future?

[MakaraMEAS]

Dear Community,

As you NGFW nowadays we can use L7 to apply on Firewall rules, this option seem not available on MX  ( I am not sure if advantage license has that). As my experience with other vendor, with hardware warranty license only they can run L7 on Firewall rules. If you have any advise or how to enable L7 on MX( enterprise license), please kindly share.

Thanks,
Makara,

[Ryan_Miles]

MX supports layer 7 rules with any license level. https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Firewall_Settings#Layer_7_Firewa...

[MakaraMEAS]

I got you, you know we have thousands application. I cannot see that on MX. It is limitation? of required other setting backend?

[Ryan_Miles · Accepted solution]

We use the standard Cisco NBAR protocol packs. That includes 1500+ apps. You can create custom expressions in addition to that. https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Network-Based_Applica...

[MakaraMEAS]

I would review, it should be match the requirement. Anyway this require request backend to meraki team right?

[DarrenOC]

Hi @MakaraMEAS , what do you see when you go to :

Security & SD-WAN > Configure > Firewall

The Layer 7 rules are configured on this page.  If you don’t have that view then your admin account doesn’t have access and you need to speak to your team.

[MakaraMEAS]

I got you, I wish application or L7 here have more than 2 thousand apps.

[KarstenI]

I would assume the original question is to have the flexibility like on an FTD to deny and allow certain traffic based on the App and not only deny as in the actual implementation. Yes, that would be nice.

[BlakeRichardson]

Thats how I read the question as well. 

[MakaraMEAS]

You are right, it should be by default deny, and flexible to use App ID( more than 2 thousands app), other features...