Hello @AaronKennedy Thank you for the detailed description. There are certain things that you need to make sure when Group Policies are concerned - 1. If you are applying a specific dashboard Group Policy in a combined network and not a Custom value in the client details page, then MX and MR in that network will apply the Policy and process the traffic at both the levels. 2. If a Splash based policy is applied by the MR, then it would be only on the MR and similarly if the MX is applying Splash based policy, it's only on the MX. 3. There may be multiple policies applied at each level (MX/MR) for a single client. These will each be with different priorities. So, the highest priority will be the only one taking affect at any given time for a client on an MX or MR. For example, blacklisting has the highest priority, whitelisting comes after that, dashboard level specific group policy comes next, AD comes after that... and so on. The network default will have the least priority. So, to answer your question whether or not there will be multiple policies taking affect for a client, the don't. At each level (MX or MR), only 1 policy will be active and packets are processed based on it. However, it is possible that some traffic is blocked by MX and some by MR due to the policy types that are being applied by Splash AD Integration and dashboard selection. I would recommend opening a support case if you have an active client that is displaying this behavior. Our team can definitely confirm where what is getting blocked. Let me know if you have any questions. Regards, Meraki Team
... View more
