Meraki Hardware does need to check in every once in a while to work. While cloud connectivity is usually just used to manage the device, the Meraki hardware will think that something isn't right if it goes for extended periods without internet access and may reboot or revert to a known good configuration to try and "resolve" this lack of internet connectivity. ... View more

By default, the Meraki Security appliance should not try to block general types of applications or traffic. User PhilipDAth is correct in saying that you should look at the Security Center first because the most likely cause is that IDS/IPS thinks that this traffic has a potentially malicious fingerprint. If this is a false positive, you can whitelist this traffic from the security center as well, ... View more

That is a good question. The MXen don't care too much about the order in which you make these changes, but removing the virtual IP is a good first step. This is so the MXen don't reach out to Meraki cloud and try to use an old virtual IP for a moment before they realize that it isn't a valid IP. After the Virtual IP is removed, then you can configure both the primary or spare in any order. After they check back into dashboard, you should be able to add the Virtual IP.   I hope this helps. ... View more