Why is the internal IP address of a DNS query not available in the Umbrella Dashboard Reports when using DNS in the Tunnel?

Problem

The internal IP address of a DNS query is not populated in the Reports when users are using DNS in the Tunnel.

Explanation

Because of the way that the DNS queries are forwarded to Umbrella, internal IP addresses will not be logged in the reports just by deploying DNS in the Tunnel. Users wishing to apply "internal network" identities will still required the use of the Virtual Appliance or the Roaming Client / AnyConnect Client.