IP Layer Enforcement status

This article describes the status of IP Layer Enforcement and test page which can be used to test Blocked IP or Grey IP.

IP Enforcement status

On Windows: uses the Windows Filtering Platform (WFP) component to provide IP blocking

Disabled - IP Layer Enforcement is disabled

Full Protection / Protected - IP Layer connection (VPN) to Umbrella established with full protection for Malicious (Blocked) and Suspicious (Grey) IP addresses

Local Protection (blacklist only) / Partial Protected - IP Layer connection (VPN) to Umbrella not available. Malicious IP (Blocked) addresses are still blocked locally on the machine. Block pages and reporting for Malicious IP blocks are not available.

Setup in Progress - Similar to Full Protection, IPL is checking for updated ip protection lists

On MAC:

Unprotected - IP Layer feature Enforcement connection to Umbrella not available.
Protected - IP Layer connection to Umbrella established with full protection for Malicious (Blocked) and Suspicious (Grey) IP addresses

Note: On MAC if the feature is disabled it is not displayed on the GUI.

Test Pages / Verification

• On Windows, when the IP Layer connection (VPN) is up, there will be a new PPP with Umbrella adaptor for tunneling Suspicious (Grey) IP addresses to Umbrella
• Test pages based on ipblock.opendnstest.com are designed to test that the IP Layer is on and the VPN is working.  
  • The test page should always work but only when the VPN is connected.
• Test pages based on blockip.opendnstest.com is designed to show the real behavior of a Blocked IP address but blockip.opendnstest.com and http://146.112.62.39  test page is temporarily not functioning.