Intrusion Detection

Location in Dashboard: Security and SD-WAN >> Configure >> Threat protection

Diagram

Classes

appliance (meraki.domains.organizations.networks)

Name	Type	Constraint	Mandatory	Default Value
security_intrusion	Class	`[security_intrusion]`	No

security_intrusion (meraki.domains.organizations.networks.appliance)

Name	Type	Constraint	Mandatory
mode	Choice	`detection`, `disabled`, `prevention`	No
ids_rulesets	Choice	`balanced`, `connectivity`, `security`	No
protected_networks	Class	`[protected_networks]`	No

protected_networks (meraki.domains.organizations.networks.appliance.security_intrusion)

Name	Type	Constraint	Mandatory
use_default	Boolean	`true`, `false`	No
included_cidr	List	String	No
excluded_cidr	List	String	No

Config Sample

meraki:
  domains:
    - name: !env domain
      administrator:
        name: !env org_admin
      organizations:
        - name: !env org
          networks:
            - name: !env network_name
              product_types:
                - appliance
                - switch
                - wireless
                - camera
                - sensor
                - cellularGateway
              appliance:
                security_intrusion:
                  mode: prevention
                  ids_rulesets: balanced
                  # Protected networks is valid configuration but can only be applied when appliance is in passthrough mode.
                  # protected_networks:
                  #   use_default: true
                  #   included_cidr:
                  #     - "192.168.20.0/24"
                  #   excluded_cidr:
                  #     - "192.168.10.0/24"