On MR, you can do it per SSID too. I'm not sure why Meraki chose to do it this way. Maybe the idea was just to provide the fine-grained version first and add the same functionality for the network-wide firewall later. Keep in mind that the functionality is quite new and might evolve still.
... View more