DNSSEC and the Roaming Client
DNSSEC is a set of security extensions for DNS that provides the means for authenticating DNS records. Currently, Cisco Umbrella does not support DNSSEC. Any DNS lookup that is answered by Umbrella will strip DNSSEC-related data from the query.
However, when using the Umbrella roaming client, DNSSEC data will be maintained for any domain that matches a domain on the Internal Domains list of the Umbrella roaming client (through the dashboard or with DNS Suffixes detection). If the computer and local DNS resolver being used to handle lookups for domains in Internal Domains support DNSSEC, DNSSEC data will be passed properly. If you have any specific questions regarding this, please contact support.