Hi, I am new here and for some time I am learning what Meraki can do. I am doing my best to sell Meraki products to our clients. I have a question regarding SD-WAN and Content filter, AV etc on HUB. Idea is that all sites reach the internet over the hub site, for better control and visibility. Here I am reading that the exit Hub cannot do content filtering. "In a full tunnel topology, all security and content filtering must be performed on the full tunnel client. The Exit hub will not apply Content Filtering, IPS blocking, or Malware Scanning to traffic coming in over the VPN. However, IDS scanning will be performed for this traffic." Maybe because Meraki does want to sell SEC license for every site? So, can I add an additional MX with SEC license just for internet access on the main site? Traffic flow would be SiteA AutoVPN ---> MX84 Edge ---> MX84 VPN Hub (decrypt traffic) ---> MX84 Edge (regular traffic) ---> Internet A simple drawing is attached.
... View more
