Network Device Registration
A network device is a piece of physical hardware (often a router) that's registered as a network device in Cisco Umbrella. A network device is thought of as an "Identity" in Umbrella and you can add a policy that applies to the network device—and all traffic from computers behind it. You're also able to report on the traffic originating from the network device.
For most customers, simply configuring their egress router to use Umbrella and then applying policy to the Network identity does largely the same function as having an integrated device. However, device integrations can provide some additional functionality, varying on a per-device type basis.
The integration is provided by the device manufacturer and is offered on a per-model basis depending on the device type and firmware.
A network device is registered with Cisco Umbrella through one of two methods. Authentication to register is provided in the device itself—in the form of a username and password, or in the form of an API token and key. Information about the API key can be ignored.
For the following device manufacturers who have Cisco Umbrella or OpenDNS integration, we ask that you enter the username and password for Cisco Umbrella in the device itself. This allows it to authenticate and auto-register:
Aerohive (integration is only supported on HiveManager Classic)
Simply log into the interface for the device, then enter the username and password for your Cisco Umbrella account. The device should authenticate automatically and appear in the Umbrella dashboard in a few minutes. Information about the API token (below) can be ignored.
**IMPORTANT: If you are an MSP for Umbrella** do not use your MSP Administrator username and password for this authentication. That username and password is associated with your MSP Console and not with the customer (or child) organization you are configuring the device for. Either make sure that your account is also added as a local full administrator in the child organization or use an existing administrator account for that organization. You must have one unique administrator per child or customer organization.
The second way to register a device is with an API token.
The two major appliance types that support this type of integration are the Cisco ISR4k and the Cisco WLAN Controllers. In the near future, the ISR 1100 series will be added to this list.
More information about these two integration types can be found here:
Once your device has been integrated, you need only provide a single customer-specific token—obtained from the Umbrella dashboard—to a device in order to have it appear in the dashboard as an Identity you can manage.
To obtain a token:
- Log into Umbrella and navigate to Identities > Network Devices.
- Click Get My API Token to obtain the token associated with your organization. The token is tied both to the organization and the device manufacturer.
- Click the (Copy) icon to copy your API token.
- Log into your device and paste the API token in the appropriate spot.
Note: Some devices may require you use a command line interface or a configuration file to upload the API key to the device. If instructions are unavailable from Cisco, please refer to your device manufacturer.
Managing or Deleting Network Devices
If you wish to add additional devices, simply authenticate (username and password or API token) those devices with Cisco Umbrella as you've done with the devices that are already present in the dashboard.
The information about a network device, such as serial number and device name can be set by the device itself, but it can be changed in the Umbrella dashboard in case the device name is not helpful or is a duplication of another name. Where applicable, it's a good idea to include information about the physical location or network address of the network device.
To manage the list of devices, use the filters functionality or group the devices together.
To remove a network device, you must remove the authentication (username and password or API token) from the device first or simply take the device offline if you're decommissioning it. Otherwise, even if it has been deleted from the dashboard, the device will reappear in the dashboard when the network device sends additional traffic.
Once authentication has been removed from the device, it can be deleted from the dashboard by clicking How to remove this device and then clicking Delete.