@nsingh apologies I just realised you're referring to client VPN that we don't use, sorry! ... View more

We use Sophos XGs for our enterprise edge and client VPN, it has an SSL version based on openVPN and an IPSEC version.  There are a couple of dedicated clients (one SSL only, the other for both) and it supports a mix of full tunnel and split tunnel with multiple profiles, 2FA and pretty much any OS including IOS devices, Raspberry PIs and many more.  However their SD-WAN solution isn't a patch on Meraki's! ... View more

The issue is with Client VPN, not the Site to Site. Thanks! ... View more

If anyone's confused at why this happened, please refer to the following KB: https://documentation.meraki.com/General_Administration/Firmware_Upgrades/Product_Firmware_Version_Restrictions#MX   Quoting the relevant detail here:   "Z1s, MX60/Ws, MX80s and MX90s cannot upgrade to MX 15 firmware, or any newer major release versions. If networks containing these devices are configured to run newer firmware revisions, they will run the newest MX 14 maintenance release instead." ... View more