Hi   I opened a case with Meraki on this (date 3rd Jan 2020) and they came back stating that MX does not copy the encapsulated payload QoS marking to the IPSec packet header.  Therefore VPN traffic transiting a QoS enabled network will not be recognised.   Meraki Case 04683455     ... View more

Hi I have just been working on similar incident with Sharepoint files not able to download internally over VPN.  We turn off AMP and all is fine.  So created a whitelist, which didnt work.  After further investigation we see in the security dashboard that AMP is actually allowing the file, hence the whitelist not doing what we thought it should, however AMP seems to break the file with the following reported in the security dashboard:- "ArchiveFile_Empty downloaded" from http://path.   I have raised a case with Meraki and waiting on their advise. ... View more