@PhilipDAth Unfortunately it is not my diagram, but its purpose is to show the Meraki document team for something similar.
I know the Admin thing at the bottom left is not required, and the port 20443 between the device and MDM is wrong. I suspect this might not be required at all. But the Systems Manager agent will have a port of its own (I think they are 80,443,5228-5230).
Our customers have asked for a diagram to see how it fits in to their infrastructure, but there is nothing in the documentation.
Thank you,
Peter James