MR implements Umbrella as a SSID-bound policy that forces all DNS traffic (except whitelisted domains) to the Umbrella cloud. It's more difficult to circumvent than client-based DNS settings.   There are also mechanisms to mitigate DNS over HTTPS and TLS based workarounds.   Umbrella integration with MX is also available. ... View more

If there is budget, an Umbrella license can be added to a Meraki environment to handle DNS security.   https://meraki.cisco.com/lib/pdf/meraki_whitepaper_mr_umbrella.pdf  and  https://umbrella.cisco.com/meraki   -R   ... View more