Hi Graham, look into your Event log on the MX and do a search for update. You’ll see that the snort rules have been updated quite a few times recently
Darren OConnor | doconnor@resalire.co.uk
https://www.linkedin.com/in/darrenoconnor/
I'm not an employee of Cisco/Meraki. My posts are based on Meraki best practice and what has worked for me in the field.