topic Re: What apps and services are used for Meraki Cloud? in General Topics

What apps and services are used for Meraki Cloud?

Stevenjwilliams83 — Sun, 01 Dec 2019 20:05:20 GMT

I can't seem to get the policy right for my Meraki APs to check in with the meraki cloud. I have allowed DNS, Ping, Meraki-cloud-controller using any port and allowed to *.meraki.com and *.opendns.com. Still see stuff hit my deny. Anyone know the correct combo for a policy?

Re: What apps and services are used for Meraki Cloud?

BPry — Mon, 02 Dec 2019 21:46:05 GMT

@Stevenjwilliams83,

Meraki will need a static NAT statement so that it doesn't hit any sort of DIPP nat statement; you need that source port to stay the same.

As for the apps that will actually hit the traffic you'll need to actually monitor that Deny policy and really see what's actually being hit. Generally what I will do is simply not limit the application and allow the destination networks mentioned HERE so that any application updates don't break connectivity to the Meraki cloud.

Re: What apps and services are used for Meraki Cloud?

OwenFuller — Tue, 03 Dec 2019 22:35:42 GMT

@BPry wrote:
@Stevenjwilliams83,
Meraki will need a static NAT statement so that it doesn't hit any sort of DIPP nat statement; you need that source port to stay the same.

I can confirm, DIPP will break your MX's connection to the portal. As to security policies, we have one outbound rule for the meraki-cloud-controller app and another outbound rule for "any" app on UDP ports 32768-61000 in order to make our hubs work. (Your particular configuration/needs may vary from ours.)