A LOT of Meraki customers would LOVE to have LACP functionality on an MX. Failing that, to be able to create a primary and backup LAN port  (like "Flex Links" on Cisco Enterprise where you can configure a switch port as a backup for another port https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-3SY/config_guide/sup6T/15_3_sy_swcg_6T/flexlinks.pdf using the "switchport backup interface" command) that does not rely on spanning tree.  I believe primary/backup LAN ports could be implemented with a software-only change on all existing MX models, because all it involves is leaving the backup LAN port in a disabled state, and simply enabling it if the primary LAN port goes down.   In fact, I just used the "Give Feedback" option in the Meraki Dashboard to request this again.  If I could just get 10,000 more people to give the same feedback we might be able to make this happen! https://documentation.meraki.com/General_Administration/Other_Topics/Give_your_feedback_(previously_Make_a_Wish)   ... View more

Hi @Stuka_Fluka - bit of background reading here also   https://documentation.meraki.com/General_Administration/Tools_and_Troubleshooting/Using_the_Cisco_Meraki_Device_Local_Status_Page ... View more

This old post by @PhilipDAth https://community.meraki.com/t5/Security-SD-WAN/VPN-Concentrator-Operating-Mode-Comparison/m-p/31039 still pretty much covers the basics. In my mind it's first a decision as to whether the MX450s are going to be your main sites firewalls plus the SD-WAN hub ( use NAT Mode) or just the SD-WAN Hub (either mode may work). Philips post gets into this well, IMO. ... View more

thanks to all those who responded to clarify my doubts...highly appreciated!!! ... View more

The firewall / UTM capabilities of an MX aren't based upon NGFW - containerised or otherwise - they are natively part of the MX.   Some of the associated security tools used by NGFW and MX are common to both though;   e.g. Snort for IDS/IPS and AMP... ... View more