The MX doesn't offer a quarantine option based on detected traffic.  ... View more

Why not just buy sufficient MS120s to allow any / all unmanaged switches to be replaced?   Unmanaged switches are, IMO, seriously bad news inside a business:   definitely a false economy. ... View more

You can also use "ANY" instead of subnet in this case. ... View more

You can only PAT to 2 IP's , the ones assigned to the MX wan Ports.   1:1 nat you can use also IP's that are not assigned directly to the wan port.   So you would be able to use 2 IPs if you are able to connect 2 wan ports to the isp router. Yes you could use a switch for that if the isp router dont have 2 ports   ... View more