Meraki

AlexP · ‎Dec 9 2022

SFTP is all tunneled over SSH, which removes the need for such NAT hacks. Past experience has dictated that any sort of NAT considerations for FTP aren't likely to be implemented given that FTP is a cleartext protocol that transmits usernames and passwords unprotected. As for the the firewall rules, "implicit" implies that it's an unspecified behavior, which is not the case. Yes, there's a default allow rule, but it's very much explicit.

PaulF · ‎Nov 25 2022

@syang-IT : See my post at https://community.meraki.com/t5/Mobile-Device-Management/Pushing-Outlook-settings-to-iOS/m-p/176828/highlight/true#M9783

Stephan_W · ‎Feb 3 2022

Correct, use to do this before MX15 firmware and above. They appear to have removed a basic SD-WAN feature as there obviously wasn't a device/hardware limitation.

PhilipDAth · ‎Jul 12 2020

I've now created a script based system that lets you migrate a firewall rule base to Meraki that uses objects, object groups and service groups. https://community.meraki.com/t5/Dashboard-Administration/Meraki-Object-Groups-You-can-have-them-now/m-p/92382

PhilipDAth · ‎Dec 4 2019

What about getting them a little Z3, and plugging this device into that, and having the Z3 use AutoVPN back to your MX?

jdsilva · ‎Nov 6 2019

Hey @Aondio_Carlo , If I understand right, you have a layer 3 device between some clients and the MX? In that case you should be changing the way the clients are tracked from MAC to IP. If there's an L3 device in between then all the clients will appear to come from the same MAC, so applying policies ot MACs won't work as intended. For the MX, you really don't want to have a mix of directly connected clients, and L3 separated clients. Try to keep it to one or the other.

AndreasE · ‎Apr 4 2019

Ha, I would be so glad if I could configure it manually at all -- not to dream of a template...

AshwiniSharma · ‎Aug 2 2018

I am facing the same issue. In past, we are using Cyberoam firewall and through that, I have applied policy's to users, not on the systems. why CISCO don't this type of feature. is there any solution for this?

Adam · ‎Feb 2 2018

In addition to what the others suggested you may also need to set the Security Appliance>Firewall>Web (local status & configuration) with the IP(s) you'll be connecting from.

MilesMeraki · ‎Jan 31 2018

Are you using a Static or Dynamic public IP on the MX? As per @Adam comment above their might be a firewall/host-based firewall on the web server side which is blocking connectivity from your IP.

wey2go · ‎Jan 27 2018

Z3 is not even able to connect to the Telstra 4G with the same USB modem.

Meraki

Community

About Aondio_Carlo

Aondio_Carlo

Community Record

Badges

Re: ftp outbound on meraki mx

Re: Microsoft Outlook for iOS and Android App Settings

Re: In Meraki Z1 & Z3 which LAN port works as secondary WAN port

Re: Object group on mx

Re: Telnet session from internet to internal AS400

Re: Clients on router subnet

Re: change mtu on wan interface

Re: Active directory group policy

Re: local page MX from remote not display

Re: From LAN error access my external web site on mx64

Re: celular failover on a z1

Re: ftp outbound on meraki mx

Re: Active directory group policy