>I was told that the Meraki client VPN hasn't seen an update in years    There is no "Meraki VPN Client".  There is only the Microsoft VPN client, which is built into Windows.   If you have local AD controllers on-site you should be able to use those.  NetBIOS is not required in this case.  One issue I have seen in the past is the zones by default only allowing secure updates, and sometimes when machines attach to the network they attempt to update their names prior to machine authentication, causing the update to fail. Sometimes I just disable secure updates on the DNS zones in AD to resolve this.  The issue they create with not being able to update is more severe then the security posture lost. ... View more

I'm going to assume you use AutoVPN over some kind of MPLS style WAN.   Something I have done many times before is at some central location with layer 3 capability (such as a DC or perhaps an HQ) you put the MPLS edge router and the MX hub next to each other.  They each have routes to each others networks loaded pointing via the other device (often via a core L3 switch).   I've typically done this when migrating from MPLS to Meraki.  But you could have it permanently deployed as well. ... View more