Adding L3, L7 rules on Meraki security Appliance MX

In this article let's see how we can add L3 and L7 firewall rules on Cisco Meraki security appliance MX. Firewall rules are processed in a top down method, in which L3 rules being processed first, followed by L7 rules.

First select the Network to which you need to add firewall rules. In this example I have selected London.

From Security & SD-WAN select Firewall under configure.

From there you can add Layer 3 and Layer 7 Firewall rules respectively.

If certain users that need internet access but accessing a specific website or IPs should be blocked, in this case firewall rule can be configured with the URL or the IPs as the destination.

Note: If a traffic matches a rule in the list, the firewall will no longer process any further for the specific traffic.

Note: Layer 3 rules configured on the firewall are stateful while the Layer 7 rules configured on the firewall are stateless.

Reference:

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Using_Layer_3_Firewall_Rules

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Layer_3_and_7_Firewall_Processing_Order

https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Best_Practice_Design_-_MX_Security_and_SD-WAN/General_MX_Best_Practices