@SnowyHill below is a graph from one of our MXs The dark blue line shows the amount of traffic going into the MX from the WAN port, the light blue line is download + upload, so to see what you are sending out you need to look at the difference. As you can see we have a fairly constant (over the short time that the live view shows) download of about 300Mb/s and as it is a one armed concentrator (only the WAN 1 port is connected, no LAN ports used), the total is pretty much double (~600Mb/s). If you are seeing the scale up to 1.2Mb/s then yes, at that time the traffic passing through the MX really is that low. Below is the public internet firewall for a site that is currently closed, that shows just the Meraki 'chatter' where the devices are talking to the dashboard, with the spike at the end where I started looking at it: There is a set of longer term graphs on the Summary tab and there you can choose 2 hours, 1 day, 1 week or 1 month. Below is the 1 day graph for the low usage device showing that it does see traffic when the site is open, though the data points are averaged so you will not see absolute short term peaks:
... View more