Correct, every Meraki device within your Meraki network will stop functioning. Youll need to renew all your licenses within your dashboard within the 30 day grace period.
... View more
You can't do it at all using the Microsoft VPN client. AnyConnect can let you do it as an ADDITIONAL factor. So it authenticates the machine first using the certificate, and then authenticates the user next.
... View more
A little bit of background from Merakis documentation: https://documentation.meraki.com/MX/Monitoring_and_Reporting/Security_Center This should answer some of your questions.
... View more