MX/Umbrella Integrated...Do we still need the VAs?

[JasonH_Dow]

Hi there Meraki Pros and Enthusiasts!

I have recently rolled out MXs at each site and completed the Umbrella integration and enforcing the default policies I need. My question is we still have primary DNS pointing to the 2 virtual appliances. Do we need those anymore? Can I just update my client's DNS to use the DC's and the filtering/policies are still being applied?

TIA

~Jason

[KarstenI · Accepted solution]

Yes, you don't need the VAs any more. The connector can replace them.

Personally, I still keep the VAs on all branches that still have VMware servers. The VAs don't need a lot of resources and "just work". This is something I only offload to my firewall if there is no different way to do it.