Do you have any vpn connections on the edgerouter itself.  If yes thats your problem.   ... View more

Well I was on the phone with the support guys from Meraki when I had the Advanced License.  So basically what they said was if you have a layer 3 firewall rule 1 to 1 nat or port forwarding that allows IP addresses from any the Layer 7 Firewall Rules will ignore the country you are blocking, since the layer 3 comes first.   A work around will be to get the offending IP or IP's and place it in the Cisco Meraki Switch ACL Rules.  I know  its stupid ... ... View more

I have the same issue with voip... We expose port 5060 for our soft clients,  now China is blocked but we can still see registration attempts from china.  Our PBX has an internal firewall and blocks the Attempt but seriously what is the point if the MX does not stop it.   Another way to stop it from hitting our pbx is to create a Rule in the switch. ... View more