Sorry for the late reply!
I'm assuming you're talking about firewall autoselection feature. I'm suggesting the following configuration:
1) Define your internal networks' DHCP and DNS servers as argument1 and argument2 and make the rule to set the firewall level to (more relaxed) firewall level. (this is to ensure we're sure we're inside the company network.)
2) Repeat the step above for all the possible configurations your networks might have
3) Create a "catch-all" -rule at the bottom of the ruleset with argument1 and argument2 being "always" and "always" and make the firewall to go to "strict" firewall level.
Configuring the autoselection like this will ensure you're always on "strict" firewall level whenever you're not sure the user is specifically connected to only your internal network.
Usually the firewall ruleset to be used instead of the literal "strict" -level is "mobile" -level.
Hopefully this helps.
... View more