Tell me about it - it's a right pain in the proverbial.
Due to the poor/non existent client support we are having to implement another solution for this (Sonicwall devices currently) for our sites which we are currently in the process of moving over to Meraki based hardware (MX,MR & MS devices)
Very poor show Meraki - get on with it