Here's a few advantages of a device running the VPN server behind a separate firewall: 1. There is potentially less of a CPU impact on the VPN server (assuming that Geoblocking consumes CPU). And fastpath could be enabled on the FTD. 2. No logging of the failed connections from the blocked IP ranges(/countries), unless all logs are being ingested back into the same SIEM 3. Not needing to be dependent on MX firmware not supporting certain Any connect features 4. Being able to restart only the VPN server for firmware upgrades. The advantages of moving VPN to the MX is a simpler configuration and lower licensing costs. ... View more

Thanks again to everyone that helped me understand the technical failures on this issue.  I met with Meraki today.  They confirmed everything in this forum.  They basically said this is their company policy and they don’t plan on changing it.  It’s their way of making sure customers don’t have non licensed hardware.  Still seems ridiculously heavy handed towards the small/medium businesses that are honest.  It has shaken my faith in a company that I really liked.  Large enterprises are exempt because they spend enough money to get Enterprise Agreements with much more associated leniency and customer support.  I wish they would do this for all customers.   To resolve the issue, we will be moving to per device licensing.  I don’t like the idea of managing 125 licenses and renewals, but it’s better than the risk getting shut down again.  We will also be moving back to cloud authentication to simplify the alerts and avoid being locked out of the dashboard again. ... View more

The MR36 has a coverage pattern where most of the signal goes sideways, and a bit up and down.  Perfect for mounting in offices on the roof where it spreads out sideways along the floor, but doesn't waste energy trying to punch through the floor or go up into the roof.   Depending on how long the warehouse rows are, sometimes you can put access points at the ends of the rows and use a directional antenna to pump the coverage down.  This works great if you mostly want WiFi at ground'ish level (such as in the cab of a forklift or humans walking around). ... View more