permission WhatApp

Gian666
Comes here often

permission WhatApp

Hi , meraki MX84 .

I have active in Layer 7 the blocking of all social web and photo sharing. The block also includes Whatsapp. Is it possible to bypass whatsapp only? Thank you

10 Replies 10
CptnCrnch
Kind of a big deal
Kind of a big deal

Unfortunately: no. There's no "allow-listing".

Gian666
Comes here often

Ok,

Thank you

 

kchand
Meraki Employee
Meraki Employee

Hello,

If you need to allow the Whatsapp application only for a specific set of users/VLAN then you can create a group policy with the desired rules and apply the policy to the respective end devices.

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Creating_and_Applying...

If you found this post helpful, please give it kudos.
If my answer solved your problem, click "accept as solution" so that others can benefit from it.
Gian666
Comes here often

Hello,

 I know. Unfortunately, the policies in layer 7 are only deny.

Thank you

MattJ
Meraki Employee
Meraki Employee

Hi @Gian666 

In the Meraki Dashboard, Group policies supersede Layer 7 rules. What this means is that you can continue blocking the category "Social web and photo sharing" for users on your network. Blocking their access to WhatsApp and other services that fall into this category. 

 

You can then create a Group Policy, and use it to allow access to WhatsApp, for a group of users you would specify. This would allow you to block WhatsApp and other Social web and photo-sharing services to all, except a group of users you specify.  

If you found this post helpful, please give it a kudos. If my answer solved your problem, click Accept as Solution so that others can benefit from it.
Gian666
Comes here often

Hello,

Sure
But I can't create a allow policy.
What I've done is create a deny policy of Badoo, facebook ect except Whatsapp.

Policy.jpg


Thank you

MattJ
Meraki Employee
Meraki Employee

In the Group Policy, there will be a section at the bottom titled "Allow list URL patterns". Set this section to override and then add whatsapp.com to the box on the right. This setting will supersede the L7 Rules created. 

 

MattJ_0-1720703027892.png

 

If you found this post helpful, please give it a kudos. If my answer solved your problem, click Accept as Solution so that others can benefit from it.
Gian666
Comes here often

Hello,

Unfortunately I don't have that section

 

Policy.jpg

 

MattJ
Meraki Employee
Meraki Employee

This feature is only available for MX devices with an Advanced Security License. If your MX device is using an Enterprise License then this feature will not be available.

 

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Creating_and_Applying...

If you found this post helpful, please give it a kudos. If my answer solved your problem, click Accept as Solution so that others can benefit from it.
Gian666
Comes here often

Ok,

thank you

 

Best

 

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels