Site-to-Site VPN Malware Scanner

[endrianusgohan]

Hi, 

Existing I've 4 sites using meraki appliances and all of them have Advanced Security License and all is set to hub mode for the VPN. 

I want to add another meraki appliance into another site, but this site I just want to install it with Basic Enterprise License. If I set this appliance VPN mode to hubs, will it be automatically get scanned for the malware threat from all of 4 other meraki appliances ? 

How the Meraki can choose which one from this 4 meraki will act as the malware scanner when all is set to hub mode ? 

[ww · Accepted solution]

You can not mix different mx licenses  in the same organization

[Bruce]

@endrianusgohan, just to add to what @ww said, when you do set this up (assuming you are doing full tunnel) your content filtering, etc. will be performed by the full tunnel client (i.e. closest to where the client is). This is stated in https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-Site_VPN_Settings.