Meraki

Sarv · ‎Jun 13 2023

If you have the default L3 rule "allow all" and no L7 rules doing any kind of deny. Then you should be good. The problem has to be on the other end (SQL side). Typically for this you want 1433/1434 UDP/TCP open (default ports) for communication to SQL (however that's up to whoever setup SQL on the other end) but as stated you are not denying outbound traffic so you should be good on your end. I would check with the other side to see if they are blocking inbound connectivity to the SQL instance.

DannyR76 · ‎Feb 1 2023

I did. I didn't like the answer and thought I would check here to see if anyone else had run across this.

RaphaelL · ‎Oct 13 2022

Hi , https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Layer_3_and_7_Firewall_Processing_Order MX Series Security Appliances are processed in a top down fashion, with Layer 3 rules being processed, followed by Layer 7 rules. Unless traffic is explicitly blocked by at least one rule, it will be allowed through by a default allow all rule. On the MX, if traffic matches an allow rule on the L3 firewall, it can still be blocked by an L7 firewall rule.

PhilipDAth · ‎Apr 22 2022

Good plan. I don't know specifically why it was allowed. It may be that the SNORT rule has low confidence (so a high chance of a false positive and blocking legit traffic). It may be that the CVSS score is not high enough to meet the threshold to take action so it is only reported.

KarstenI · ‎Mar 21 2022

“If the application on the server is secure” is the first misconception. There is no secure application. A DMZ is not that complicated, it’s best practice and you really should implement the server in a DMZ.

DannyR76 · ‎Feb 24 2022

Great idea. I will do that.

Meraki

Community

About DannyR76

DannyR76

Community Record

Badges

Re: MX-84 L7 Rule to allow inbound/outbound traffic to ODBC on a SQL Server

Re: Geoblocking Sint Maarten

Re: MX-84 Order of Rules

Re: MX-84 Passing traffic to a Meraki AP

Re: Practical Differences - 1:1 NAT vs. DMZ

Re: Writing a FW Rule Meraki M-84

Re: Geoblocking Sint Maarten

Re: MX-84 Passing traffic to a Meraki AP

MX-84 Passing traffic to a Meraki AP