Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About ScottPR
ScottPR
Here to help
Member since Mar 20, 2019
Mar 24 2021
Community Record
19
Posts
7
Kudos
0
Solutions
Badges
Mar 24 2021
11:29 AM
Content Filtering -> URL Blocking. put in youtube.com as a blocked pattern. After a while, remove it. User's still cannot get to it until I put it in the allowed list, and users reboot their workstations. Why is that?
... View more
Dec 10 2020
10:16 AM
If I have a Wireless LAN SSID that connects to the same ip range/vlan as the LAN subnet, do the LAN rules, specificly, content filtering, apply? Basically, if I blacklist a URL on a device that has both LAN and WLAN, does it block both, or do I need to configure something to affect both networks? thanks
... View more
Jan 16 2020
12:49 PM
Our current config is, we have an on-prem website living in the IIS of the on-prem MS Exchange server. No problem for the firewall, just forward all the ports to the Excahgne server's IP. But, we're moving to Exchange 2016, so we need the namespace for outlook anywhere. So, what I want to do is, split off the exchange server from the web site, and put them on separate boxes. The question is, can I setup host headers or something similar in the inbound rules of our Meraki firewall? So that traffic to www.domain.com goes to 192.168.0.10, meanwhile mail.domain.com goes to 192.168.0.20 Or should I just break down and get an external web site for public consumption?
... View more
Dec 17 2019
10:55 AM
In sonicwalls, there's an identifying string internal to the sonicwall firewall that's used in site-to-site vpns. In the VPN Settings, it would be "Unique Firewall Identifier".
... View more
Dec 11 2019
8:37 AM
2 Kudos
I would like the ability to apply content filters, layer 7 rules, etc across multiple devices simultaneously. For example, I put a rule in to deny traffic from Canada, I'l like to enter the rule once, then check multiple MX devices to apply it to, then click save, and all the MX devices are updated at the same time. Also would be handy with SSID setup in our company too, we use the same ssid names and passwords in multiple locations. If I need to change the passcode, it would be nice to change it once, and apply it to all the MR33 AP's that have that SSID on them
... View more
Dec 4 2019
12:33 PM
1 Kudo
I have six meraki appliances (1 mx84, 2 mx 67 and three mx64w) I have setup the site to site vpn so that: 1. There are two hubs: the mx84 and the mx 67. Those two talk to each other. Sort of. 2. The three mx64's are "spokes" and they connect to both "hubs" the mx84 and the mx67. They have to for DNS and AD use. 2a. All of the VPNs are reporting as up and running. 3. I CAN ping, by ip and by name (so DNS resolves). 4. I CAN rdp from the mx84 network to the mx67 network, then back. 5. I CANNOT do a "net view" on ANYTHING, including NAS devices. (I can get to the web GUI of the devices, with a browser.) 6. I CANNOT map network drives to remote networks 7. I CANNOT do a \\machinename\ from windows explorer. 8. My Active Directory is currently FAILING to replicate. Any Ideas why? It's like all the microsoft traffic is just being dropped. There are no rules on the VPN's to restrict any traffic, do I need to add an explicit allow? Never mind: Found the issue: Sonicwalls treat VPN traffic differently than Meraki. Sonicwalls bind the rules to a "zone" (LAN, WAN, VPN) and you can set different rules per zone. So I though the layer 7 rules on the Meraki were only for Lan -> Wan traffic, but it's also applying it to Site to site VPN traffic
... View more
Dec 4 2019
7:51 AM
So I have some network gear and servers in a remote office. When the servers run backup, they're supposed to email me that they finished, size of the backup, etc. Since installing the Meraki devices (64W), the emails from the remote offices have stopped. Is there some rule I have to add to allow the server to send emails? That office's IP isn't on our SPF list, but that hasn't been an issue until now. Thanks
... View more
Dec 4 2019
7:41 AM
4 Kudos
Ok, found it: We use GSuite and managed Chrome, the restriction was there, not in the Meraki device.
... View more
Dec 4 2019
7:30 AM
Other users can see whole channel, I'm going to do a reboot on the pc
... View more
Dec 4 2019
7:26 AM
No other restricting devices, services, rules, blacklist. Tried on my pc, and I can see them, but I'm the channel admin. The only thing that's there is the videos are unlisted.
... View more
Dec 4 2019
7:23 AM
No. Original post: "So I turned OFF youtube filtering." Tried Incognito windows to see if that got around google accounts, but it didn't.
... View more
Dec 4 2019
7:16 AM
What the subject says: Our company's Youtube channel, people trying to get to training videos get the "Video is restricted, try logging in with a Google apps account" So I turned OFF youtube filtering. But the device is still filtering the channel, and the videos.
... View more
Apr 5 2019
5:57 AM
Yes, it is straightforward, but It assumes the meraki has a non-nat IP address. My MX would be behind a nat device (the comcast router) so that won't work, unless the bridge mode on the comcast router gives me a non-nat ip
... View more
Apr 2 2019
12:12 PM
What about adding in a MX on the core, then going hub mode site to site? I've seen this discussed, but if I put an mx on our core, do I have to put it in parallel with the sonicwall and setup manual routing?
... View more
Mar 20 2019
1:39 PM
I'm replacing a sonicwall TZ100w with a Meraki MX64W. Have most of it setup, but I'm stuck setting up the VPN from the Meraki to our core Sonicwall: The Meraki lies behind a NAT device (Comcast modem) so the IP address isn't something I can put into the core sonicwall as a peer, since it will change. There appears to be some kind peer identifier for the Meraki, but I can't find where it's listed. Also, the TZ100w had an agressive mode, meaning the TZ100w would initiate the connection, so you didn't need a static on both ends, only the core end. Does the Meraki have something similar? I've seen some references to keepalive in a CLI, but I'm uncertain how to access that on the Meraki device. Thanks
... View more
My Top Kudoed Posts
© 2024 Cisco Systems, Inc.
