That setup of using a vpn termination point behind physical mx and then using static routes or bgp works.   I supose it could also work on a vmx.  ... View more

Hi Gary,   Could the VMX in passthrough mode still use BGP to propogate Azure routes? ... View more

You could deploy the Umbrella virtual appliances on-premise if you would like to keep the same functionality.   But it doesn't sound like you really have an issue.  You can just use Umbrella for enforcement and tracking of the users, rather than the MX. ... View more

Hi Jeio, Did you get this resolved? I have had a similiar issue with a Meraki copper SFP not fitting properly in an MX250 Internet 1 port. We tried a Cisco GLC-TE and it fits snug. The same Meraki SFP works in the lan ports. ... View more

Its a bespoke server which the customer controls, we can ask the question. The current provider can syslog this info with their Aruba controller.   We will be using ISE for Corporate Authentication. I don't think you can use an ISE splash page with authentication proxied to the other radius server though. ... View more