Overview

This article discusses how a laptop with the Umbrella Roaming Client or AnyConnect with the Roaming Security Module behaves when under a guest protected network (in other words, when the laptop uses a network registered to another Umbrella organization).

Additional Information: Umbrella Policy Selection Involving Multiple Organizations

Behaviour

In most cases when an Umbrella roaming client visits another organization or a guest protected network, the roaming client is set to remain active and will honour the policies of its home organization. However there are caveats, if the roaming client is part of its home org default policy(with lower priority or policy number 0), the roaming client will then use the policy of the guest organization due to it being in a higher policy.

Solution

To prevent the Umbrella roaming client from using the guest organization policy, it is necessary to create a new Policy for the Umbrella roaming client that has higher priority than the Default Policy.

1) Log in to the Umbrella dashboard.

2) Click Policies > Under Management click, All Policies > Click the plus icon at the top right corner, to add a new policy.

3) Select the "Roaming Computers" identity. Click Next.

4) Configure the rest of the policy settings as desired.

5) Save the new policy.