client block policy on Meraki MX devices

[carlto]

Hi Guys

When you apply the "block" policy on Meraki MX devices to a client connected directly to them, what exactly does this block policy do?

We had an issue yesterday whereby a device was in block, we then moved it to the normal policy, however the device (a printer) would not work, we could ping it but not print. A reboot was then performed on the printer and it then started working again.

What does the block policy actually do? 

Do you need to reboot the device then for it to work again even if you put the policy back to normal?

[ww]

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Blocking_and_Allowing...

Sometimes it need a reconnect to force the change. 

https://documentation.meraki.com/General_Administration/Tools_and_Troubleshooting/Troubleshooting_Gr...

[PhilipDAth]

Removing the block might take 10 minutes.  You have to wait for the existing cached flow entries to time out of the Meraki MX cache.

[GIdenJoe]

If your client is wired, then the policy will apply on the MX.  That means the client could connect fine to the switches but will have no luck in connecting to internet or other VLANs.

If your client is on an MR access point, it will apply there and the client won't have any connection.