Sentinel Playbook "Block-IP-Address-Meraki" erroring out

Anand R Menon 301 Reputation points
2022-01-31T12:59:50.777+00:00

Hi,

The Microsoft Sentinel playbook "Block-IP-Address-Meraki" is erroring out on execution with the error "Cannot override L3 firewall rules on a network bound to a template - the firewall rules are inherited from the template." We have enabled Configuration templates in Cisco Meraki MX appliance and applied to our corporate network(firewall rules have been defined inside the template) which is a recommended practice in Meraki. Couldn't find any discussion on this issue anywhere on the web. Please help. Thank you.

169914-block-ip-address-meraki-error.png

Regards,
Anand

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,154 questions
{count} votes

Accepted answer
  1. Andrew Blumhardt 9,861 Reputation points Microsoft Employee
    2022-01-31T13:20:43.763+00:00

    The Logic App connector is just an API put request. You might try making the same change manually on the appliance for troubleshooting. This seems more like a config error or block on the device rather than a logic app issue.

    2 people found this answer helpful.

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.