Hi, appreciate this thread is a bit old. Can I just clarify the answer on this one which suggests the vmx can only really be used as a VPN concentrator in Azure and not act as a firewall in an Azure hub and spoke architecture.    The linked comparison sheet here: vMX Comparison Datasheet - Cisco Meraki Documentation - mentions that L3-7 Firewall capabilities are supported.   If we deployed one of these in an Azure hub network. Could it not both provide connectivity to sites as well as firewalling between spoke virtual networks and outbound internet from the azure environment?   Thanks in advance ... View more