I feel where you are coming from @CarlT , as the Meraki approach seems different. As @ww has said, you can create firewall rules in a group policy and apply them to a VLAN. HOWEVER, these are stateless. You have to have rules that allow return traffic. As @alemabrahao has mentioned, you can do this with the outbound firewall rules. These are stateful. I use this approach the most. You can also take a more holistic view, and if you have mostly Meraki kit with C9300 switches, you can also use Adaptive Policy. This lets you apply tags to devices, and then the traffic is filtered as it enters the port of the network. This is the info on using ACLs with Adaptive Policy. https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Adaptive_Policy_Configuration_Guide#Creating_Custom_ACLs Personally, for my larger clients, I am going to start using Adaptive Policy as the primary mechanism for policy enforcement. Then, outbound firewall rules, and lastly, group policy attached to a VLAN for simple cases (like a guest network, an IoT network, etc.).
... View more
