I'm doing 2 things. Because I'm seeing attacks from those countries, I'm blocking them. 2nd item, because we moved our exchange from Azure to on prem, we have a nat that I'm adding the IP addresses microsoft provided,... kind of,. I'm adding the IPv4 addresses. I'm seeing Meraki does not like the IPv6 addresses in the NAT filter. I did the "Traffic to/From" this morning before people came in and it works fine. After going through documentation and posts, I learned the way it works is: Traffic "not to/From" would be your only allow these countries Traffic "to/From" would be countries to block The way I had read it at first was don't allow incoming traffic unless it is initiated by outgoing traffic which is wrong.
... View more
