This could easily be the end user's Internet connection.  It would be their WiFi connection. You don't mention the type of VPN you are using.   If you are not using AutoVPN, could you buy a Z4 for one of the users?  This will collect a lot of stats about the connection BETWEEN you, and also let you see the quality of the end users Internet circuit.   Below is an example of the kind of statistics that can be reported on when doing this. Of interest is MOS - which is a measure of voice quality.  You can also define performance classes when you do this. ... View more

Thanks for the input.  I appreciate it very much. ... View more

Thank you for the feedback! Much appreciated!   I will certainly add this feature to a feedback suggestion. ... View more

Meraki firewalls by default block all inbound traffic. ... View more

Ok, and yes, you need to add the MX as a Radius client.  ... View more

When you setup the configuration of the SPARE you are giving it the configuration it needs on the WAN side (just make sure the WAN is cabled up to the spare). Once you boot up the spare the configuration will be deployed to the spare. I believe the configuration is deployed to the spare via the Primary FW (assuming everything is cabled properly on both WAN an LAN side, its important that the LAN side be cabled up on both primary and spare and all VLAN's on the LAN side properly presented to both primary and spare from your switches) ... View more