Hi DouggieFresh,   How's this solution been working for you ever since it was deployed?  You mentioned you needed to create a separate network for the MX84. Is that because you have different MX models in your existing network already and Meraki won't allow you to add a non-compatible model?   We're going to run into the same issue.  The network will have a pair of MX95 in HA mode with a primary & backup MPLS uplink to our data centers.  The challenge is, how do we accommodate an internet circuit for local internet egress... ... View more

You do exactly what @DouggieFresh did, and go to  Firewall configuration/Security Services and either disable the local status page or limit the IP addresses further than it can be accessed from. ... View more

Keep in mind that the flow preferences are just that: preferences. In case of issues with one of the WAN links it will still failover to the other.   Imo there's no way to do this, at least not with the default features available in dashboard. Unfortunately 1-1 NAT also doesn't help as source IP for outgoing traffic is still NATed to the MX IP. If I were you I'd reach out to Meraki helpdesk to see if any hidden feature could be enabled. If not, definitely make a wish. ... View more

By Default.. the Clients Dashboard page doesn't show the "Policy" Column.   Here's how to add it, then sort by Policy and you will find Clients that you've BLACKLISTED Prior to 30 days.   ... View more