iMessage multimedia being blocked on Meraki wifi

[DBlum]

We are getting reports from users in different organizations that iMessage is getting blocked when sending images or videos when connected to Meraki access points.  This is even with the client being whitelisted as well as turning off AMP/Content Filtering/etc as well as when the SSID is either using corp lan or meraki guest.  Users have no problems sending via Whatsapp the same images/videos.

[alemabrahao]

Do you have any firewall in your network?

Do you have any Layer 7 firewall rule configured on your SSID?

Give us more details about your network.

[DBlum]

Various MX's (MX68, MX75, MX95)...no layer 7 firewall rule.  I had read something about making sure icloud wasn't blocked but issue is happening at several locations where networks are both flat layer 2 and layer 3 networks.  It is just iMessage send/receive video and pictures.  Setup local is MX95 connected to MS125 and MR46 AP with client whitelisted.

[alemabrahao]

If you don't have any firewall rule, the way is open a support case.

[DBlum]

Case is open, they have no idea right now and  wanted to see if anyone else was having the same issue.

[DarrenOC]

Hi @DBlum , out of interest do you get the same behaviour on both wired and wireless networks?

[DBlum]

So in talking with Meraki support it seems that subnet 17.250.96.0/22 is being associated to Taiwan for Apple and doing a correction with Maxmind to correct since they use them for geolocation. Weird thing they are still checking on is that whitelist is also being affected by Geolocation layer 7 rules.

[4TireFire]

We had to add Taiwan to our allowed countries list in the MX. iMessage pictures sent immediately.

[DBlum]

You can use MaxMind to determine location:

https://www.maxmind.com/en/geoip-demo

This is what Meraki uses, I did get confirmation that it will be corrected to USA on their next update cycle next Tuesday

[TBHPTL]

Check the AP's firewall.... and AP group policies... If MX, also make sure no policy is applied to the actual MX interface.