Hi all,   Just to update you on this, it turns out that we cannot work out what is happening and the only function we cannot disable and test is Anti-Replay Protection which Meraki cannot do.  Therefore I am now having to replace all my firewalls with another vendor that supports this which is extremely disappointing.  Meraki advised us to move to Cisco ASA but I do not have the skills in-house which is why I wanted Meraki in the first place.   Shame.! ... View more

@PhilipDAth I would love to do that but the 3rd party refuses it! ... View more

We had another outage and the only advise I get now is try and get upstream packet captures which ~I cannot do for this remote site.  5 times now Meraki refuse to disable Anti Replay Protection and I cannot understand why the product team will not disable this.  Every "enterprise" firewall has the ability to do this apart from Meraki.   It is so frustrating that the only option I have is to get a refund for all my MX firewalls and move to an "enterprise" class device, so disappointing. ... View more

Hi,   We have had two sites go down today one with an MX-64 and the other with MX-100 both terminating on a 3rd Party ISG, the issue was slightly different to the loss of packets yesterday within the active tunnel.  This was the tunnel going down.   I am starting to think this is a Meraki bug issue but support cant find the issue ... View more

Hi,   Just to update you on this we are having more and more issues with different MX's and we think the issue is either the ESP window size or the fact that the Meraki's have anti-replay enabled.   I am about to rip these out for Fortinet which is a shame. ... View more

Hi,   We have exactly the same issue with MX-64's and MX-100 connecting to a 3rd party Juniper firewall and the only issue we can think, including Meraki support is either the ESP window or the fact that Meraki have Anti-Replay protection enabled.  We had an issue with some ASA's connecting to the same Juniper in which we had to disable Anti-Replay as the Juniper is sending out of sequence packets.   Support cannot find out the issue as the tunnel is up but packets just drop, our phase 1 is 28800 with phase 2 3600.  My concern is I am about to return these devices because of this issue which I do not want to do.   Any help would be appreciated    Thanks   Keith ... View more

Thanks for the reply, is the window sized configured within ike phase 2 proposal as this is what Meraki support advised us to remove from the Juniper configuration and since then it has been ok.  But we do see a lot of re-negotiations on the MX side but now on the Juniper side. ... View more