I tend to disagree here @PhilipDAth but perhaps I'm not getting your point right. Roaming client will only do DNS layer enforcement (as long as you don't add IP-Layer enforcement on top it). It will never relay user traffic through Umbrella as long as it's not dependent on the Intelligent Poxy functionality but this is for a limited set of traffic only. My actual point is: without SIG, you'll never see all user traffic in Umbrella because of its workings. See above: Umbrella was originally meant to operate on DNS queries 90% all of the time as long as Intelligent Proxy was not involved. With SIG, you're actually relaying all traffic through Umbrella to have Cloud Firewall / -Proxy in place.
... View more
