I was talking more NTP for the devices rather than the firewall it's self.
I have a standard windows environment where the there is a FSMO DC that is in change of domain time. We are using public internet facing NTP server to sync with.
The DC server looks up the NTP servers IP address that IP address might not match the IP address the firewall gets due to the pool of ip address that can behind a NTP server that is using a round robin up address.
We use umbrella as well and I was wondering if there is a way for the device and the firewall to get the same resolved IP address.
Or from your comment can the Meraki be treated as a NTP server ?
But this will happen again with any other service that uses round robin DNS.