Hello - we have seen this issue across multiple locations. We have a combination of MX68s (approx. 100) and an MX450 across multiple circuits, providers, etc. We had the same L7 country code block list for all locations but not all experience the issue making it harder to troubleshoot. In general, I understand other countries might be involved in Internet traffic but we have not updated these rules in years and the issue seems to have surfaced over the past few months. The fix was to delete the L7 rules from the affected firewalls and I have slowly been adding back countries to the block list. Also, it would be nice to be able to report what rule is blocking traffic but apparently (according to Meraki support) we are not able to get granular detail. The MX68s are generally at MX 18.107.7 and the MX450 is at MX 18.107.9. I should also mention that one of the sites inbiz.in.gov did fully load after about 4 minutes. Once we removed the L7 rule it loaded in about 1-2 seconds. The HAR file did not indicate any sites external to the US that I could find.
... View more
