Thanks for the information. It would be an easier decision if we didn't have the Enterprise license on our MXs. The uncharge to get to Advanced across my 680 stores is a painful cost and then adding in the cost for Umbrella increases the pain a bit more. Cisco isn't doing me any favors in this regard so that's why I'm looking at alternatives to not have to backhaul all of my internet traffic to be filtered. Also we already use Cloudflare Access, so it's conceivable we could remove the auto vpn completely and just magic wan for everything. ... View more