Came across the following product information for this appliance listed on CDW:
"Threat management solutions include content filtering, intrusion prevention using a PCI-compliant IPS sensor, identity-based policies, and antivirus and anti-phishing software from Kapersky for maximum protection. An enhanced CPU and plenty of memory ensure this Cisco Meraki cloud-managed security appliance can process all the information flowing through it rapidly."
Yea, its being used for AV/malware scanning. It doesn't look like it can be disabled on this appliance either. Reason why I'm asking is because our company does not way to leverage Kaspersky in any way given the latest news surrounding their potential affiliations.