Troubleshooting Umbrella Secure Web Gateway: Policy Debug and Diagnostic Tests

Overview

The existing version of the Umbrella Diagnostic Tool provides important information for troubleshooting network identities, Virtual Appliances and AD Integration, and some Roaming Client instances (and can be found here: Umbrella Diagnostic Tool: What to Provide Support When Asked. For users wanting to troubleshoot issues with Secure Web Gateway (SWG), you can use the policy-debug page and the new SWG Diagnostic Tool listed in this article.

Policy Debug Page

As a first step to troubleshooting, go to policy-debug.checkumbrella.com (or policy-debug.opendns.com) while you are using SWG with the expected Web Policy applied:

You may have to expand "Diagnostic Info" to view your results. Copy and paste these results to your ticket when submitting your question or replying to your case.

Providing a HAR file capture

When asked for a HAR capture, see our guide for How to: Get .HAR files for troubleshooting.

AnyConnect SWG Logs

Capture a DART file. If asked for max logging - see Cisco Anyconnect SWG: How to enable the max debug logging. Once set, reproduce and then capture a DART.

Downloading the SWG Diagnostic Tool

Support will often ask for the results of the SWG diagnostic tool as well to provide additional information. Please respond to your support ticket with any TXT, HAR, or other files generated by the diagnostic tool.

The tool can be found below. The tool provided below may not be the most recent version available.

Having trouble with downloading and combining all parts, send us a feature request for a one-click unified download of the most recent debug version to umbrella-support@cisco.com. 

Microsoft Windows :

Supported OS: Windows 7, Windows 8, Windows 10

Download the appropriate version below:

1. 64-bit (most common)
   1. Download all 5 files below and unzip. Need a tool to do so? Try PeaZip or 7Zip. 
      
      1. Part 1
      2. Part 2
      3. Part 3
      4. Part 4
      5. Part 5
2. 32-bit
   1. Download all 4 files below and unzip. Need a tool to do so? Try PeaZip or 7Zip.
      1. Part 1
      2. Part 2
      3. Part 3
      4. Part 4 

Mac OS X :

Supported OS: MacOS 10.14+

1. Download all 4 files below and unzip. Need a tool to do so? Try Keka.
   
   1. Part 1
   2. Part 2
   3. Part 3
   4. Part 4

After installing and running the tool, supply all results back to your support request.