MX Security Appliances and Firewall Flashcards

Which VPN topology type in Meraki Auto VPN allows all branch sites to communicate directly with each other?

Answer: Full mesh

Full mesh Auto VPN topology establishes direct IPsec tunnels between every pair of spoke sites, enabling branch-to-branch traffic without traversing the hub.

What is the function of the Meraki MX Intrusion Prevention System (IPS)?

Answer: Detects and blocks network exploits using Sourcefire rule sets

The Meraki MX IPS uses Sourcefire (now Cisco Talos) rule sets to detect and block known network exploits and intrusion attempts in real time.

How does Meraki MX handle failover when dual WAN uplinks are configured?

Answer: It monitors uplink health and automatically fails over to the secondary WAN

Meraki MX continuously monitors WAN uplink health using active/passive probing and automatically switches to the secondary uplink upon failure.

What is the purpose of configuring outbound firewall rules on a Meraki MX appliance?

Answer: To control traffic leaving the local network toward the internet or WAN

Outbound firewall rules on the MX control which local clients can communicate with which external destinations, based on source, destination, and protocol.

Which Meraki MX capability provides remote users with secure access to corporate resources using a client-side software agent?

Answer: Teleworker VPN with AnyConnect

Meraki MX supports Cisco AnyConnect for teleworker VPN, providing secure SSL/TLS-based remote access for mobile and remote users.

In a Meraki MX deployment, what does enabling 'Split Tunneling' on a Client VPN connection mean?

Answer: Only traffic destined for corporate resources uses the VPN; internet traffic exits locally

Split tunneling allows VPN clients to route only corporate-destined traffic through the tunnel while sending internet traffic directly through the local ISP.