If you check the documentation you will notice that port forwarding and 1:1 NAT have differences. While port forwarding uses the IP configured on the MX's WAN, in 1:1 NAT you can define another public IP within the block that your ISP provided, obviously if it is not a /30. So there is no priority. ... View more

@alemabrahao wrote: Have you checked the troubleshooting documentation?   https://documentation.meraki.com/MX/Client_VPN/AnyConnect_on_the_MX_Appliance/AnyConnect_Troubleshooting_Guide#Scenario_One:_No_log-in_prompt Thanks for sharing this documentation, I really need it right now.  ... View more

We raised a support case for a similar issue on the Z3 and mx67C's a couple of weeks, if you add a Vlan rule, it stops the firewall functioning, and pretty much blocks all traffic, other then traffic over the VPN's. Removing the VLAN firewall entries, and replacing it the IP based rules, allows it all to function properly. Support was meant to be doing some further testing on this, but haven't had an update to the ticket yet.   My personal advice for the moment, is don't use the VLAN firewall rule options as it doesn't functioning correctly. As ryan suggests, i would log it as a case, so it highlights the issue to the support team/developers. ... View more

hello yes for sure correctly populated ... View more