Meraki Community

ChrisIreland · ‎Aug 1 2023

Hi, After various tests and packet captures, we have found that we need to add the ephemeral port range and restricted them to the recommended autopilot FQDNs. And its now working! A classic of Microsoft documentation not listing everything needed. Investigating the non-Meraki firewalls, it would appear that they were doing something under their "stateful" badge and allowing these ports even though not directly listed in the rule set. Thanks for your help.

ChrisIreland · ‎Aug 1 2023

Thanks for the reply. I'll do some more testing today and try Fiddler. The rules allow any destination unfiltered so it should be ok for that.

ChrisIreland · ‎Aug 1 2023

Hi, Thanks for the reply, there is nothing in the TP logs, but its worth a try! I'll do some testing today.

ChrisIreland · ‎Aug 1 2023

Thanks for the reply, nothing in the event logs and no Geo rules on this MX.

ChrisIreland · ‎Aug 1 2023

Hi, Thanks for the reply. We have tried a 'permit any any' rule and it works, but due to the environment, we can't leave that in place. The ports we have open are the MS recommended ones. We are just a bit stumped about what is being blocked.

ChrisIreland · ‎Jul 31 2023

We have found an issue with trying to use MS Autopilot when behind an MX firewall. We have created two rules (one for TCP, the other UDP) from the build VLAN to any destination on ports 123,53,80,443,3544. Every time we try to deploy a laptop using Autopilot it gets stuck. We have tested these rules on two different non-Meraki firewalls and have not had the issue. Has anyone else seen this issue?

Meraki Community

About ChrisIreland

ChrisIreland

Community Record

Badges

Re: Autopilot Issues when behind an MX

Re: Autopilot Issues when behind an MX

Re: Autopilot Issues when behind an MX

Re: Autopilot Issues when behind an MX

Re: Autopilot Issues when behind an MX

Autopilot Issues when behind an MX

Re: Autopilot Issues when behind an MX

Re: Autopilot Issues when behind an MX