MV Cloud Archive Firewall rules

[KSanderson]

Hi.

The suggested rule for Cloud Archive is to open port 443 to destination ANY.  That is far too broad for us to implement so is there a URL that the cameras use to upload the footage to cloud storage?  There must be something set as it can't just broadcast the footage to all addresses 🙂

Any help is appreciated.

[alemabrahao]

Unfortunately it is Meraki's recommendation, in which case you can open a support case.

[Ryan_Miles]

I've been testing a tighter ruleset for my CA enabled MVs. It appears allowing 443 to *.vision.meraki.com is working (in addition to the other cloud destinations needed for mgmt, streaming proxy, etc).

They appear to also need port 80 to 142.250.0.0/15 which must be part of the broader port 80 to any suggested rule.

[Ryan_Miles]

Been a long time since my previous post. Always reference the Firewall info page in your dashboard to see the current list of IPs, FQDNs, protocols, and ports required for your deployment as that list can/does change over time.

[Dunky]

I believe the correct dst FQDN for Cloud Archive is dependant on region which is why the 'Firewall Info" page says ANY.  In reality there is an FQDN for each region, e.g.

cloud-archive-upload.euc.vision.meraki.com

cloud-archive-upload.apa.vision.meraki.com