If you're running MR firmware 29, consider seeing how the network performs with client balancing disabled in the relevant RF profile(s);   the way that clients implement 802.11v in particular varies quite widely and can cause issues.   I'd also check you're on the latest version of 29 too - currently 29.6.1 (RC)  ... View more

Hi @BaronCSE, yes we have it set to either of three choices based on user requirements, Text, MS APP or Token. Thankfully only have a few that wanted the Token, but still easy to setup. As far as you're question, under Azure AD/Security/Authentication Methods is where you create the policy. I manage the policies via AD Groups. Users have the option to use multiple such as Text and MS APP in case they require one or the other.   ... View more

Maybe a bit of a stretch and a chore, but I understand Meraki has AnyConnect client VPN under beta.  You could ask support about enabling it and see if it works from that location. I have no idea if it uses different ports and protocols, but it may.   ... View more