Hi fellow community members, I am in the middle of an implementation of a new branch office using MX firewalls, Cat9300x and MS250 switches.  The plan is to have all layer3 vlans of the customer site on the Cat9300x meraki managed switches. So basically they will host all the layer3 vlans of the site and there will be a default route pointing to the MX security appliances.  Now I was looking for a way to do East-West segmentation or in other words inter-vlan segmentation using group policies. But to my surprise, group policies are only available as an option for Security appliances and Wireless. So you need to have your Layer3 vlans on the MX otherwise you cannot apply them.    What options do I have for East-West segmentation in my current design? I am sure this is a common scenario outthere.  ... View more