I've had other non-Meraki firewalls in Azure that I've done this public IP upgrade on and I've needed to add a Network Security Group on the NIC of the firewall VM.  When you did this upgrade on the vMX did you need to put an NSG on the vMX NIC? ... View more