Meraki

holmesjrh · ‎Aug 25 2020

I have not found a way to do this myself. We also tried to ban all countries except USA then allow facebook.com (with destinations outside of USA) and could not find a way to override the L7 block traffic no to/from USA rule for the facebook.com rule. Whitelist Content Filtering url's, L3 rules allowing facebook.com domains, and AMP whitelist allowing their domains were attempted. We are forced to spend resources on creating VDI's to remote access through citrix type of services located in USA to access facebook.com as those VDI's are not L7 Meraki secured, but the site needing additional protection is L7 firewall secured. Meraki needs to create a method explicitly allow traffic patterns before deny rules in the L7 firewall set.

holmesjrh · ‎Jul 30 2019

Had submitted a case with Meraki support and they stated it was not support at this time, but that it would be a "feature request" We have an ARIN IPv6 routed by our ISP. I realize using another device in front of the Meraki MX would allow us to take advantage of some of the IPv6 addresses... However, we would really like to do IPv6 native in our Meraki MX equipment. Anyone know what the best way to make Meraki understand how important IPv6 support is to us? Sales Rep, Feature Request through Dashboard, Email Meraki support every month to request IPv6 so they can analyze the support database and see that IPv6 is in the subject of many of the support calls...? I've already subscribed to the official IPv6 thread on here as of today... Was making this post to let Meraki know the importance of IPv6 to customers as ARIN is giving us nice big blocks of addresses with plenty to spare and some ISP's are now routing those blocks to their customers... Thank you.

Meraki

Community

About holmesjrh

holmesjrh

Community Record

Re: Security Appliance Layer 7 Firewall Rules

IPv6 on Meraki MX 250 or other MX devices.