Maximum 3000 clients blocked by Group Policy

[BorjaGarcia11]

Hello,

I am developing a tool via API for our Cybersecurity team in order to detect non-allow clients connected to our SSIDs via PSK and then, block it automatically if they do not reach some requisites, like "Manufacturer" BUT, right now we reached the max of 3000 clients blocked by Policy because the team did it manually for the last year.

There is any way to see the entire list of these blocked devices and "clean" it? I want to delete old devices so that there is no longer a need to block and make room for new ones.

The dream would be to have control of this list and put some automatic deletion by date (If the device was blocked 2 months ago and I didn't see it connected since then, delete it from the list)

Thanks in advance

[alemabrahao]

You can list clients with this API:

https://developer.cisco.com/meraki/api/#!get-network-clients

But on the example body, I just saw a groupPolicy8021x, so maybe it won't help you.

For the second question, the answer is no, there is not a native feature on the dashboard to automate it, maybe with API.

[BorjaGarcia11]

Hello! Thanks for the reply but in this case, the groupPolicy8021x doesn't help me.

[PhilipDAth]

From the dashboard you can filter on the "blocked" group policy.

You could look at using this API to get the group policies by client.  Note this uses pagination, so you have to setup to process multiple pages.

https://developer.cisco.com/meraki/api-v1/#!get-network-policies-by-client