Layer 7 Firewall rule "Allow"

[SEANK5]

We have roughly 1000 MR-33's in one network, with a Template assigned to it. In the Layer 7 firewall rules, we have setup a list of specific sites and applications we want to block, Miscellaneous Video is one of these. 

Now we need to be able to allow Video for a specific site to get through, an external CBT. 

I'm looking where I put a rule that would supersede the Layer 7 firewall rules, and allow video for this this one site through.

[NolanHerring]

Hmm...not sure if this is possible. Unless my brain is still frozen from my recent trip to Minnesota, the L7 firewall rules operate in the top down approach, with the only option being 'Deny' by default. Group Policies would be the way to get around it but that seems counter to what you really want to do since this is global.

From here:

https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/...

Layer 7 Firewall Rules
Best practice design for Layer 7 rules is to ensure that the category you have selected to block does not fall under the traffic flow for applications you may use. For example, if you choose to block the category for "File Sharing," and you block all options, you may cause a disruption in service for an application such as Microsoft OneDrive. It is best to try and configure Layer 7 rules as granular as possible, to avoid such scenarios.

[Nash]

I think @NolanHerring is right here. L7 is only deny, and I believe that's the rules that get hit first. If you're blocking video there, you're not going to be able to override that with an allow.

Can you test allowing misc video through on a subset of your APs using a cloned-but-tweaked template? Namely, block everything in the Video category _except_ misc video.