NAT Visibility

[RichardDeckart]

Our guest network is Meraki NAT (DHCP). We have an upstream Palo Alto, but all the traffic is NAT'D with the AP IP to the firewall. Is there any work around other than to use bridge mode and our DHCP server?

[PhilipDAth]

There is no work around.  You either use NAT mode or bridged mode.  I can't even think of any other option that could even be created.

[MilesMeraki]

You could attempt to create a specific VLAN for guest users off the firewall and obviously control what they can talk to within your network from the firewall itself using firewall rules. That way you gain full visibility of Guest clients at the firewall.

Never the less, visibility of guest clients can be seen from the Mearki dashboard. IMO if you can implement security closer to the edge of the network the better. I'd stick with your Meraki Guest NAT SSID.