There is a script published by Meraki that you can use that will basically keep pushing the scheduled upgrade forward a week with the net effect of it never happening.    https://github.com/meraki/automation-scripts  the folder/script is firmware_lock ... View more

No the group policy is either or. If in your group policy you set "inherit network settings" in the firewall and traffic shaping section the MR and MX will enforce configured policy. If you switch the group policy to custom network firewall shaping rules your MX and MR firewall policies is not applied in favour for the custom policies you defined in the group policy.   Otherwise correct.    Some stuff on group policy. I advise you to read up on it as different elements in the group policy is handled differently form network device to network device.   https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Creating_and_Applying_Group_Policies  ... View more