Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello,It appears that using a layer 7 firewall country rule to block India also blocks Google's anycast DNS address 8.8.8.8. I believe you can create a group policy with a layer 3 rule to allow traffic to 8.8.8.8 prior to the layer 7 rule, but that ...
@kevalparsaniya8321 Meraki uses MaxMind GeoIP as their source for geolocating IP addresses. If you create a Layer 7 rule to deny access to certain countries, those countries will be identified by the Meraki MX using MaxMind's dataset.
I found a tech that is aware of the situation. They are geolocating the IP using Maxmind (https://www.maxmind.com/en/geoip-demo?pkit_lang=en) and Maxmind is currently locating 8.8.8.8 in India. Apparently Maxmind is aware of the issue and have info...
Meraki support confirmed this behavior does exist. You can ping 8.8.8.8 from an MX, but when the India filter is enabled, traffic from the LAN to 8.8.8.8 is dropped (I replicated it on 3 MX's running firmware 14.42 - deleting specifically "India" all...
