As I understand logging has to be enabled on actual firewall policy to be sent to syslog. Which i have one on the few rules used considerably. Outbound traffic from firewall internal IP is allowed across the site-to-site vpn. Remote tunnel peer is PaloAlto and we have snmp server on that site which is able to poll Meraki firewall. I just don't see any traffic from MX internal IP to the configured syslog server.
... View more