This article describes the status of IP Layer Enforcement and test page which can be used to test Blocked IP or Grey IP.
IP Enforcement status
On Windows: uses the Windows Filtering Platform (WFP) component to provide IP blocking
Disabled - IP Layer Enforcement is disabled
Full Protection / Protected - IP Layer connection (VPN) to Umbrella established with full protection for Malicious (Blocked) and Suspicious (Grey) IP addresses
Local Protection (blacklist only) / Partial Protected - IP Layer connection (VPN) to Umbrella not available. Malicious IP (Blocked) addresses are still blocked locally on the machine. Block pages and reporting for Malicious IP blocks are not available.
Setup in Progress - Similar to Full Protection, IPL is checking for updated ip protection lists
Unprotected - IP Layer feature Enforcement connection to Umbrella not available.
Protected - IP Layer connection to Umbrella established with full protection for Malicious (Blocked) and Suspicious (Grey) IP addresses
Note: On MAC if the feature is disabled it is not displayed on the GUI.
Test Pages / Verification
- On Windows, when the IP Layer connection (VPN) is up, there will be a new PPP with Umbrella adaptor for tunneling Suspicious (Grey) IP addresses to Umbrella
- Test pages based on ipblock.opendnstest.com are designed to test that the IP Layer is on and the VPN is working.
- The test page should always work but only when the VPN is connected.
- Test pages based on blockip.opendnstest.com is designed to show the real behavior of a Blocked IP address but blockip.opendnstest.com and http://22.214.171.124 test page is temporarily not functioning.