So our  MS225-24 is setup as a breakout switch with it up streamed to the ISP router providing 1G for us. When we first connected these together, we used a SFP-10G-T SFP module on the switch to connect (No sfp on ISP Router side) and saw our applications fail and show very High CRC and packet Fragmentation. However, when we got rid of the SFP and just connected on the 1G port of the Meraki Switch, everything seems fine. The Meraki  is set to auto negotiate and the ISP is telling  us their device is also set to auto negotiate  so I'm  not sure why it was failing. Any ideas?   ... View more

Hello,  I currently have an issue where both of our MX250s Primary and Secondary are becoming unreachable and dropping all connections for a couple of seconds at random times throughout the week. Both are on version 16.16 and they are connected via a direct connection with each other on an isolated vlan for VRRP.  Meraki performed a packet capture and was able to verify the MXs were working correctly.  Not sure at this point what the issue is.  I have tested pulling the power of the primary and it actually fails over correctly to the spare like it should but when the issue occurs, both mx250s go down at the same time.  I know it's not the WAN uplink connections for the MXs since they're on separate ISPs with separate public IPs.  Has anyone experienced anything similar?    Thank you.      ... View more

Hello,  Can anyone help me understand how to use this function in Meraki AMP? Meraki states "  For files, javascripts, and other objects that are not URLs, the MX appliance assigns a unique ID. You can see the blocked items in the Event log page. By entering the ID of the object you want to allow in the Allow list files section you can instruct the appliance to allow the detected signature, even if the URL is different." I'm looking in the Event Log Page of the dashboard for any kind of Object ID and I'm not seeing anything like that. Is there somewhere  else I should be looking? Seems like there aren't any tutorials  for this on the web either.    Thank you.    ... View more

Hello,  I'm trying to setup a HA failover for our SDWAN following this guide.  https://www.willette.works/mx-warm-spare/   My question for doing this is, when the failover SD WAN is connected locally to the primary SDWAN for the first time, will the SD WAN go offline and bring down the network in anyway while it's syncing with the secondary?      ... View more

We currently have static route in the MX250 in place at Addressing and VLANs. We want to setup firewall rules that specify which ports these routes can access both in bound and outbound. How can we set this up in Firewall? I know that Meraki is setup to deny all inbound connection unless allowed by outbound. Is it common practice  to deny all outbound connections in the firewall and only allow wanted outbound connections?  ... View more