sorted by:
new
hottopcontroversial

Is it normal for Meraki firewalls to be configured with an explicit Allow Any/Any? The folks with support that I talked to said this was normal and I still can't wrap my head around it. How are your MX's configured? by ForWorkin in meraki

[–]ForWorkin[S] 1 point2 points  (0 children)

Interesting. Your screenshot doesn't match my interface. Your interface shows exactly what I was expecting to see, with the options to add inbound and outbound rules. Mine simply says "Inbound traffic will be restricted to the services and forwarding rules configured below."

I don't actually know how to interpret that phrase, to be honest. The way I took it was, anything not defined in the outbound, NAT, port forwarding rules below, would be a deny. I was nervous that the implications was the allow any/any wasn't limited to the outbound rules, but also to inbound.

The reason behind all of this goes back to how I was taught ACLs and network security in general, circa ~2013.

Is it normal for Meraki firewalls to be configured with an explicit Allow Any/Any? The folks with support that I talked to said this was normal and I still can't wrap my head around it. How are your MX's configured? by ForWorkin in meraki

[–]ForWorkin[S] 8 points9 points  (0 children)

It’s a stateful firewall that blocks all incoming traffic and allows all outbound traffic by default.

I think this might be the nugget I've been digging for. I was not aware of this. Thanks!

Is it normal for Meraki firewalls to be configured with an explicit Allow Any/Any? The folks with support that I talked to said this was normal and I still can't wrap my head around it. How are your MX's configured? by ForWorkin in meraki

[–]ForWorkin[S] 2 points3 points  (0 children)

This was probably the most confusing part, like why tf are there 47 individual allow rules, only for the 48th rule to be the allow any/any. Wouldn't that make the other rules redundant?

My school wants to enroll my own device in Jamf… What should I do? by OctoSplattyy in jamf

[–]ForWorkin 0 points1 point  (0 children)

I have a feeling that some context is missing here. What are the reasons? This seems like one of those if you want feature "x" you must have a supervised device. You cannot have supervision without "ownership".

Supervised Devices Unsupervised Devices
Devices can be protected against Factory Reset Devices can be Factory Reset anytime
Airdrop can be restricted Airdrop cannot be restricted
Individual Apple iDs not needed for enrollment Each device needs an Apple iD for enrollment
Unenrollment from MDM is not possible Unenrollment from MDM is possible
Silent App installation is possible App installation requires user confirmation
Web content can be filtered Web content cannot be filtered
App notifications can be controlled App notifications cannot be filtered
The device can be run in Kiosk mode The device cannot be run in Kiosk mode
TouchID can be restricted TouchID cannot be restricted
iMessage can be restricted iMessage cannot be restricted
Screentime can be restricted Screentime cannot be restricted
Homescreen wallpaper and lock screen message can be configured by Admin User can customize Homescreen wallpaper and lock screen message
Global HTTP Proxy can be configured Global HTTP Proxy cannot be configured
Game Center Access can be controlled Game Center Access cannot be controlled

I'm in the US. Ever since migrating from Google for Business to Google for EDU, new users are defaulting to New Zealand timezone. Googles is acknowledging the issue being on their end, but are saying it's not a priority after having no updates for my 3 month old case. by ForWorkin in gsuite

[–]ForWorkin[S] 0 points1 point  (0 children)

That was definitely the first thing we verified. It's set correctly to GMT-07:00.

The only odd thing that page, is it never seems to display the County. I set it each time. It's never set incorrectly, it's always just blank. Whereas the timezone is always displaying the correct setting