In August 2021, Cisco Umbrella announced the End of Life for the IP Layer Enforcement sub-feature of the Intelligent Proxy for Umbrella DNS roaming computers here: End of Life for IP Layer Enforcement Feature of the Umbrella Roaming Client. See this announcement for more details.
IP Layer Enforcement was introduced in 2015 into the Umbrella DNS product to help spring forward the DNS product beyond DNS alone. Since then, Cisco Umbrella has launched a full SIG solution that incorporates components that scan all web traffic. This investment into covering all traffic with SIG covers the scope of the IP Layer Enforcement solutions and much much more.
The threat landscape is evolving - and Cisco is here to help you cover every gap with the best solution. Users of IP Layer Enforcement are encouraged to consider Cisco Secure Endpoint for on-device protection and an Umbrella SIG package for cloud-based coverage. Together, these solutions are the modern solution for Cisco users to deliver the best protection possible.
What do I need to do to prepare?
Nothing. At the End of Life date, IP Layer Enforcement will be disabled across all policies and packages. Umbrella DNS coverage will continue to protect these devices from threats. IP Layer Enforcement may be disabled at any time if desired.