I stand corrected.  I was sure when I set mine up that local lan access was defined the way I thought, but clearly that is not the case.  Any chance the APs couldn't connect up to the cloud to be updated so they never received your firewall rules? Jeff ... View more

I believe the "Local LAN" destination is a bit misleading in the Meraki firewall rules.  It only means access to the subnet the SSID is on.  The only traffic hitting the deny rule is traffic on the subnet of the guest network.  Everything else is allowed.   If you want to block traffic to 192.168.0.0/24, 192.168.1.0/24, and other devices on the guest subnet, but allow access to everything else (and your proxies) you would need:   allow 80 192.168.0.17/32 TCP allow 443 192.168.0.17/32 TCP deny any 192.168.0.0/24 any deny any 192.168.1.0/24 any deny any Local LAN any allow any any any (default rule)   If they would need access to DNS servers in LAN 1 or LAN 2 you would need to create access rules for that as well.   Jeff ... View more

I tend to doubt that it would support other probes.  I think Cisco stretches the word integration a bit in regards to Meraki and Cisco ISE.  The Meraki dashboard simply uses ISE as a radius server, so all you get at the ISE end are radius authentication and accounting information. That said, I do not use the profiling feature of Cisco ISE, but since there is no mechanism for the Meraki to send other information besides standard Radius information, I tend to doubt you will have anything else to profile off of.  ... View more

In the Meraki dashboard, under Network-Wide select Group Policies.  This is where you can create a group policy that assigns clients to a specific vlan, as well as add firewall and traffic shaping rules.  You will need to create a group policy for each OS (Apple MAC OS X, Apple IPAD, Apple IPhone, Chrome,Windows, etc.) that you want to assign to a VLAN.  To assign a VLAN, next to VLAN select Tag VLAN from the drop down box, and then put the vlan number in the box next to Tag VLAN.  In the Meraki Dashboard, under Wireless select SSIDs.  Edit the settings of the SSID you want to use for the group policies.  About halfway down the page you should see an entry for Assign Group Policies by device type.  Click the drop down to select Enabled: assign group policies automatically by device type.  Click add group policies for a device type.  Select the device OS and select the group policy you previously created.   Hope that helps.   ... View more