Meraki and Firewall rules

DustinB3403

Disabling all 3 "Active Filters" did address the problem, now to figure out which one is the culprit...

DustinB3403

For UltraVNC to work, you must disable under Settings > Active Protection > Mail Shield > "Scan inbound mail (POP3, IMAP4) if you want to be able to remote into these devices.

Still investigating the other items.

dafyre

@DustinB3403 WTF.... UltraVNC doesn't even run on anything close to SMTP / IMAP, does it?

DustinB3403

@dafyre Apparently it does, as disabling the Scanning of inbound POP3, IMAP4 connections allows UltraVNC to connect from within Meraki.

BRRABill

How do you like the Meraki devices?

I have a free one from them I've been wanting to install at home to play with, but have not done so yet.

dafyre

I helped a client setup a Meraki Firewall. Once you get used to the way they do a couple of things, they're actually pretty good.

BRRABill

@dafyre said:

I helped a client setup a Meraki Firewall. Once you get used to the way they do a couple of things, they're actually pretty good.

It seemed like a great idea.

DustinB3403

We don't actually use their AP, we did for testing for a long time, and it is a good unit.

Just not good enough to pay for it forever.

scottalanmiller

@dafyre said:

@DustinB3403 WTF.... UltraVNC doesn't even run on anything close to SMTP / IMAP, does it?

Meraki fail.

scottalanmiller

@DustinB3403 said:

@dafyre Apparently it does, as disabling the Scanning of inbound POP3, IMAP4 connections allows UltraVNC to connect from within Meraki.

It definitely does not. That's a broken Meraki issue.

scottalanmiller

@BRRABill said:

How do you like the Meraki devices?

I have a free one from them I've been wanting to install at home to play with, but have not done so yet.

They were nice before Ubiquiti came along. And before Cisco bought them.

scottalanmiller

@dafyre said:

I helped a client setup a Meraki Firewall. Once you get used to the way they do a couple of things, they're actually pretty good.

Once you get used to the ways that they don't work like breaking VNC thinking that it is email.

dafyre

@scottalanmiller Ha ha ha. We didn't have that problem. This was only for their firewall. They've got APs on the way.

DustinB3403

So the exclusions I've had to add to get everything "functional" are listed below.

File System Shield

C:\Program Files (x86)\Meraki\m_agent_upgrade.exe
C:\Program Files (x86)\Meraki\meraki-ca-bundle.crt
C:\Program Files (x86)\Meraki\ndisscan.exe
C:\Program Files (x86)\Meraki\README-winvnc.txt
C:\Program Files (x86)\Meraki\screenshot-cmd.exe
C:\Program Files (x86)\Meraki\windows-wlan.exe
C:\Program Files (x86)\Meraki\winvnc.exe

Mail Shield

Inbound Mail - Un-check 'Scan inbound mail (POP3, IMAP4)' (UltraVNC)

Web Shield Process Exclusions
The same processes as in File System Shield