Yes it is, it's the outbound rules in Security & SD-WAN > Configure > Site-to-site VPN. Don't use the inbound rules, they've been added by accident.   More info here: https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-site_VPN_Firewall_Rule_Behavior ... View more