Cisco Meraki appliances and access points can be configured with Layer 7 firewall rules to block traffic by application or destination hostname. The MX can also perform "Content Filtering," which blocks access to websites based on their content. The MX can also redirect users to a "This website has been blocked by your network administrator" page, so a user understands why they cannot access a blocked site.
Pinging the Internet interface of a network edge device is a convenient way to ensure public-facing services such as Client VPN are functioning properly. However, this leaves the network vulnerable to an outside attacks on the LAN.
The MX Security Appliance has two uplinks. On the MX, load balancing can be enabled to use both uplinks for all traffic. By default, load balancing is disabled and all traffic will use the primary uplink (defaults to Internet/WAN 1) to forward traffic to the internet unless it is overridden by an uplink preference. The uplink will only fail over to the secondary uplink in the event that the primary uplink can no longer reach the internet.
If a traffic shaping rule is defined on a Cisco Meraki MX Security Appliance to include a DSCP tag, the DSCP tag will remain in the IP packet as it traverses the VPN tunnel to the remote end. This is because DSCP exists at layer 3 and as such is routed from network to network. Cisco Meraki MX Security Appliances use IPsec Encapsulating Security Payload (ESP) in conjunction with tunnel mode, so the IP packet is fully encapsulated and thus survives NAT traversal. When the ESP packet is de-encapsul
Traffic priority is a way of ensuring that specific applications or subnets are guaranteed a certain amount of the uplink bandwidth at all times. Traffic priorities only come into play when the network is using all of the pre-configured bandwidth on the uplink. Take note that this bandwidth can change when link aggregation is enabled because the uplink changes per stream based upon the ratio specified.
No articles with the article type topic could be found.
