Hi,Thanks for the reply. Actually, Meraki TAC confirmed to me that you in fact do NOT need to apply the policy per VLAN if you are applying it 'globally' for the network under Security --> SD-WAN --> Threat Protection. They also said for the wireless...

According to your article we need to enable Umbrella protection group policies on the VLAN for wired traffic on the SSID for wireless traffic and for DNS exclusion include the domains in the exclusion list under Threat Protection? All three need to b...