We recommend that your roaming users VPN back to your headquarters. From a security perspective, using a VPN for your clients is going to provide additional security value beyond DNSWatch protection. For example, when on public wifi, it will protect against either the wifi provider or others on the network from being eavesdropped and tampering with your client's traffic.