Hello,   we would like to use the content filtering. For this we would like to work with group policies. We are currently looking for a way to prohibit individual clients from accessing the Internet. Unfortunately, the "block list" is not a solution, as internal access is also blocked here. Therefore we have defined a group policy "block all" with a catch-all (*). However, access to internal websites is also blocked here (e.g. via VPN).   We are looking for a solution to block internet access for individual clients, although access to internal web services should still be possible.   This is our current setup:   all clients are wired. We are using site-to-site vpn. We have a layer 3 switch behind the MX. The clients are connected to the Layer 3 switch. The MX has a static route to the subnet on the switch. 1. - some clients are allowed to access the internet directly, works with a firewall rule 2. - some clients are allowed to access the internet via a proxy server (squid proxy), which also does the content filtering 3. - all other clients are not able to access the internet   Now we want to use the content filtering of the MX. The clients from point 1 and 2 should go directly to the internet, content filtering does the MX with a default set. To implement this, the firewall rule from point 1 is changed, so that the entire subnet is allowed to access the internet.   Now i need a solution, how to block the clients which are not allowed to access the internet.   I am grateful for any help   Thanks Oliver ... View more

Hello,   last year we introduced a new meraki environment. Everything works fine. Now we would like to activate the content filtering. The Active Directory connection is set up and group policies have also been configured. However, I cannot whitelist some clients. I have a guess what the problem is:   A MS120 is connected to the router of our provider. Our MX250 cluster is attached to the MS120. The MX250 is connected to our core switch, a Dell S4048T-ON. So that the MS120 can access the internet to connect to the Meraki Cloud, the MS120 is connected to the Core via a separate VLAN. The subnet on the core is allowed to connect to the internet.   Because the MS120 is connected to the core, the topology shows that all clients are behind the MS120. The Clients are also shown as offline / disconnected. Thats wrong.   The right way would be Core, MX250, MS120. For all affected clients, the policy section is missing under network-wide/Clients. The subnets connected direct to the MX250 are not affected by the problem.   How can I fix this?   I am grateful for any help.   Thanks, Oliver ... View more

Hello,   since we switched to cisco meraki we have had a problem with our sip-trunk. Inside our network we have a pbx which set up the sip trunk to our provider. Mainly at night, if not so much is called the problem appears.   The registration of the sip trunk possibly get lost. when the PBX registers again with the provider, everything works fine.   Whats the problem? Any help is appreciated   thanks Oliver ... View more

Hallo,   we've setup a new meraki envirenment.   Site A: MX250, working as Hub Site B: MX250, working as Spoke Site C: MX65, working as Spoke   vpn between Site A an Site C is working fine.   vpn between Site A and Site B has a problem: the direction from Site B to Site A is working fine, but the direction from Site A to Site B not. For example, if we copy a file from Site B to Site A it is working. But if we copy a file from Site A to Site B it does not work or is extremly slow. in general the connection from Site A to Site B is very bad.   We have checked all internet connections on every site, everything is ok. Also client vpn on Site A and Site B is working fine.   We have deleted all rules on the site to site firewall. Also the networks are routed through the vpn. But it is not working.   Has anybody an idea whats the problem?   Any help is appreciated. Thanks a lot.   Oliver     ... View more