Meraki NBAR Mapping

Source IP: x.x.x.x, Source Port: x, Destination IP: x.x.x.x

Layer 7 firewall rule Deny

In a recent upgrade on Threat Intelligence and Content filtering. Cisco Meraki moved on to Talos Threat Intelligence from Brightcloud Threat Intelligence. This upgrade has provided enhanced security to Meraki Users.

However you may see limited information about the NBAR Details under the event logs.

Below thread reveals the details of NBAR ID.

Mapping Layer 7 Firewall Rules to NBAR IDs

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Mapping_Layer_7_Firewall_Rules_to_NBAR_IDs

Network-Based Application Recognition (NBAR) Integration

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Network-Based_Application_Recognition_(NBAR)_integration

Network-Based Application Recognition (NBAR) integration with MR access points

https://documentation.meraki.com/MR/Firewall_and_Traffic_Shaping/Network-Based_Application_Recognition_(NBAR)_integration_with_MR_access_points