Cisco Umbrella Network Device Integrations

Network Device Registration

A network device is a piece of physical hardware (often a router) that's registered as a network device in Cisco Umbrella. A network device is thought of as an "Identity" in Umbrella and you can add a policy that applies to the network device—and all traffic from computers behind it. You're also able to report on the traffic originating from the network device.

For most customers, simply configuring their egress router to use Umbrella and then applying policy to the Network identity does largely the same function as having an integrated device. However, device integrations can provide some additional functionality, varying on a per-device type basis.

The integration is provided by the device manufacturer and is offered on a per-model basis depending on the device type and firmware.

A network device is registered with Cisco Umbrella through one of two methods. Authentication to register is provided in the device itself—in the form of a username and password, or in the form of an API token and key. Information about the API key can be ignored.

Username/Password:

For the following device manufacturers who have Cisco Umbrella or OpenDNS integration, we ask that you enter the username and password for Cisco Umbrella in the device itself. This allows it to authenticate and auto-register:

• Aruba Networks

• Cradlepoint

• Aerohive (integration is only supported on HiveManager Classic)

Simply log into the interface for the device, then enter the username and password for your Cisco Umbrella account. The device should authenticate automatically and appear in the Umbrella dashboard in a few minutes. Information about the API token (below) can be ignored.

 **IMPORTANT: If you are an MSP for Umbrella** do not use your MSP Administrator username and password for this authentication. That username and password is associated with your MSP Console and not with the customer (or child) organization you are configuring the device for. Either make sure that your account is also added as a local full administrator in the child organization or use an existing administrator account for that organization.  You must have one unique administrator per child or customer organization. 

API Token:

The second way to register a device is with an API token. 

The two major appliance types that support this type of integration are the Cisco ISR4k and the Cisco WLAN Controllers.  In the near future, the ISR 1100 series will be added to this list.

More information about these two integration types can be found here:

https://docs.umbrella.com/deployment-umbrella/docs/hardware-deployments-1

Once your device has been integrated, you need only provide a single customer-specific token—obtained from the Umbrella dashboard—to a device in order to have it appear in the dashboard as an Identity you can manage.

To obtain a token:

1. Log into Umbrella and navigate to Identities > Network Devices.
2. Click Get My API Token to obtain the token associated with your organization. The token is tied both to the organization and the device manufacturer.
   
   
   
   
3. Click the (Copy) icon to copy your API token.
   
4. Log into your device and paste the API token in the appropriate spot.
   Note: Some devices may require you use a command line interface or a configuration file to upload the API key to the device. If instructions are unavailable from Cisco, please refer to your device manufacturer.

Managing or Deleting Network Devices

We've moved the information found here to our Umbrella documentation. For more information about deleting network devices, see Delete a Network Device (SIG Umbrella) or Delete a Network Device (DNS Umbrella).