This article discuss how would the Umbrella roaming client behave under a guest protected network. Or, when the roaming client visit a network under another Umbrella organization.
In most cases when an Umbrella roaming client visits another organization or a guest protected network, the roaming client is set to remain active and will honour the policies of its home organization. However there are caveats, if the roaming client is part of its home org default policy(with lower priority or policy number 0), the the roaming client will then use the policy of the guest organization due to it being in a higher policy.
To prevent the Umbrella roaming client from using the guest organization policy. It's necessary to create a new Policy for the Umbrella roaming client that has higher priority than the default policy.
1) Log in to the Umbrella dashboard.
2) Click Policies > Under Management click, All Policies > Click the plus icon at the top right corner, to add a new policy.
3) Select the "Roaming Computers" identity. Click Next.
4) Configure the rest of the policy settings as desired.
5) Save the new policy.