@almightythor totally agree about the VPN, it is a shambles.  Also the SD-WAN has issues where if you have full tunnel from a z3 to an advanced license MX and then out, the advanced features such as L7 don't get applied to traffic from the z3.   However MX15 is reliable,  we've been using it for over a year across our 24/7 enterprise and are happy with the reliability.   FYI we use Sophos for our L7 firewalling and client VPN, so the issues you have and we would have with a full Meraki stack, don't appear. ... View more