Meraki firewall

Hi All,

Is there a Meraki guru out there that can confirm if the upstream firewall rules on the Meraki dashboard for cloud controller pushes policy to AP and if the AP then does the blocking of client traffic or does the client traffic still traverse the Lan to cloud controller before traffic is blocked there?