How To Determine Which Policy Is Being Applied In My Umbrella Configuration

Overview

As the Umbrella admin for an organization, there are times you might want to confirm which policy is being applied to a given endpoint. This can aid in debugging or testing when deploying new policies.

Solution

The first step is to collect the debug output from the client machine that you wish to determine the applied policy for. Debug output can be gathered by running the following commands from a command prompt on Windows, or a Terminal window on OS X:

nslookup -q=txt debug.opendns.com

The output should look similar to this:

For our purpose, the important information here is the OrgID and the Bundle. The OrgID is the identifier of your organization's dashboard, and the Bundle is the identifier of the applied policy within that organization.

Next, log in to your Umbrella dashboard and open a new tab or window in the browser. Then, plug the two variables pulled from the debug output into the URL below:

https://dashboard.umbrella.com/o/<OrgID>/#/configuration/policy/<Bundle-ID>

This will take you directly to the policy that was applied to the computer (or user) the debug output was run on, at the time it was run.