"I think I got it. Out of curiosity, why does the order of filter profiles matter if they are all locked down to allowed networks? What happens if there is allowed network overlap? Most restrictive wins?" The answer to these are that Profiles are evaluated in order until a match is found. If there is a match, processing ends and no further profiles are checked. If you have two profiles with an overlapping allowed network, less restrictive with higher precedence and more restrictive with lower precedence, the less restrictive would apply and the more restrictive would't be checked against.
↧