Category blocking

[Patrik73]

Can you set Category blocking on a WiFi SSID (or it's VLAN) that is set as Bridge on its own VLAN without Umbrella?
I have a VLAN 130 that has 192.168.10.0/24
The SSID is set as Brigde Mode with VLAN 130.

But all I can set seem to be Layer 7 Firewal Rules.

I would like to use the Category blocking on that SSID.

[Johnfnadez]

If you have an MX upstream you can set a group policy with the filtering in the VLAN in question and all devices thru the same vlan will be under that policy.

If you do not have an MX firewall I don’t think if that’s possible due SSID has some L7 firewall it but is more oriented to apps than website categories

here you can find more info

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Creating_and_Applying...

[Patrik73]

Sorry, forgot to mention.

I do have an MX84 upstream.
The MX has Advanced Security and the MR has Enterprise.

When I look at the policy I created, under Security appliance only I have the option to configure Blocked website categories.

But to they really work on my WiFi SSID that is set in Brige Mode with its own VLAN?

[Johnfnadez]

Yes it works, just double check that you are tagging the traffic from SSID with the VLAN ID in question and it should work 

[Patrik73]

Thanks, I will try it out.

Has not been able to test it on the site yet.

Just configured it remote so far.

Still confused though.

I have read the link you provided, and it says under Applying Group Policies that it can not be applied to VLAN on MR Access Points.

At least there are no checkbox in MR Access Points under By VLAN.

[Johnfnadez · Accepted solution]

Yes, you must apply the policy on the VLAN, in the same chart where you define the Gateway IP

[Patrik73]

Thank you, 🙂

Can you somehow see or get reports on what pages has been blocked?
Some kind of statistics.

[Johnfnadez]

Yes, under Organization -> Summary Report you can see a report, or under Network Wide -> Event Log you can see detailed logs

if you consider my answers as a solution I’d appreciate if you mark them as solution 🙂

[Patrik73]

Thanks again.
I will set your answer as solution and then try this out when i'm on site. 🙂