Same issue here.  We patched to 18.211.3 and with the high utilization still happening support suggested turning off Multicore access at one location to test.  We did that and yesterday we lost auto-vpn between two of our locations. Had to factory reset one site to get it back up.  Called back in and had multicore access re-enabled and it brought our network back up.  Still seeing high utilization but it doesn't appear we're dropping packets.   ... View more

Did you ever get this resolved? I assume you are getting NAT traversal errors? I am having a heck of a time here. I was on MX 18.210, some of our equipment can't go that high. I had one site downgraded get NAT type B. I can go online with wordwide of regional, but if I try making a room I can, but I cannot join with another. This is with MK8. Very frustrating as we are trying to start e-sports leaques. ... View more

Thanks again for the leads. I think for now I might just employ a rule on our firewall that allows only corporate Wi-Fi traffic into the Citrix host. Anyone who wants to work remotely outside of that can just e-mail me to whitelist them. What I'm not used to compared to the Cisco ASA is that any firewall NAT rule changes can't be done on the fly during production hours. Since all traffic that traverses the firewall is briefly interrupted. Our SIP phone registrations, active SIP calls, client/server traffic, etc. So have to do it off-hours. That's kinda a pain but it is what it is I guess. ... View more