Same issue here. Did you ever figure this out? The other option (Anyconnect) works fine but that is not option for us. ... View more

Hello @PabloR , thanks for bringing this to our attention. Yes, tls1.2 should work for the customer as 1.0 is deprecated.   https://documentation.meraki.com/General_Administration/Cross-Platform_Content/FAQ%3A_Meraki_Authentication_to_Require_TLS_1.2_or_Later_Version ... View more

As I understand it, you have a FW cluster behind an MX cluster. In that scenario, it seems that you need to connect both firewalls to both MX'es (MX cluster does not operate in Active-Active scenario for simple routing purposes), otherwise, if your primary FW will crash while the primary MX will still be up nothing - good will happen.  ... View more

ps.  I would not use VIP mode unless you really really had to.  With this turned off and if you had a split-brain develop more parts of the system will remain working. ... View more