Hi all,  We're in the middle of a major migration from WatchGuard to 4 x MX250s, 1 x MX67, 75 x Z3s. Whenever we push out any configuration changes to firewall rules or static routes, multiple systems such as Twilio, Webex and AnyConnect (coming off a connected FTD) are failing temporarily and we are seeing RST packets coming back from them in PCAPs.  We've had a few issues with the support engineer saying that this is the cloud providers fault, and basically saying telling us this is normal behaviour and won't be fixed -- not a great resolution really! Currently trying to escalate this as far as possible.  Obviously, this wasn't happening on the WG appliances we pulled out, so have a customer (quite rightly) looking for Meraki to take some ownership of this. Looking at all release notes for current and future MX versions, we can see this: Known issues After making some configuration changes on MX84 appliances, a brief period of packet loss may occur. This will affect all MX84 appliances on all MX firmware versions. I am starting to think this may be a wider issue than the MX84 as we have proven issues on both the 250 and Z3. Has anybody else noticed this issue? Can anyone from Meraki Dev provide any insight? Currently we can only make changes to the MXs in the early hours.  ... View more

Hi all,  My team and I have noticed a very marked decline in the quality of support from Meraki lately. Long waiting times, lazy engineers just asking you to take packet captures without any proactive attempts at resolution and no routes of escalation.  What's going on guys? As a partner and MSP we shift a lot of Meraki, and the support has always been a big plus point for us and a justification for the licence costs. It isn't the case at the moment.  Has anybody else noticed this?  ... View more

Hi, Struggling to find any documentation on this, but hopefully someone can advise. We have just proposed a new network refresh for a customer with an MS390 at the core, the topology will be a collapsed core design with MS120 access switches and 36/46/76 APs. ISE has also been proposed. I know the MS120s won't be able to do adaptive policy at the switchport level, however will it be possible to apply the tag at a SVI/L3 interface level like you can on the Cat9k? I think we will be fine with the APs, but I know that the dashboard does a check when you enable the feature. The Advanced licence has been factored in anyway, so if this is possible it will really enhance the solution. Cheers, Darren ... View more

I've just deployed our first vMX into Azure and I think I've messed up the networking configuration on the Azure side as the local subnet of the vMX is not visible in the routing table, nor over VPN.  I want to completely redeploy the solution and create new resource groups and networks for the vMX.  Can anyone on advise on how to do this, or does this need a case opening with support?  ... View more