Tom - you had mentioned Meraki in the vid and I think I MUST throw in my $.02. Meraki’s VPNs are made for pretty much one thing, and that’s site to site using larger than /32s (I think /24s are a minimum), and certainly are not capable of limiting non-sequential IPs on 1 side and, non-sequential IPs on the other… i.e. If I have 10.10.10.4, 10.10.10.7 and 10.10.10.101 and those are the only addresses I want to put in the tunnel, Meraki can’t do it. With Meraki 0 it assumes a “branch office” is one big happy family, so everything at Site A should see everything at Site B. With a Watchguard its a pita. With Cicso it’s somewhat easy if you know the language, and with SonicWall it’s a breeze. It would be great to see a comparison chart of Firewall/VPN appliances that can do that.