If you're thinking this is something with your MX, you should look to post to the SECURITY / SD-WAN Forum.
Did you take and examine some packet captures on the WAN / LAN interfaces of the MX, to see whats going on? If you haven't already, I'd raise a case with Meraki Support too