Cisco Umbrella Knowledge Base
FAQs and troubleshooting steps for all Umbrella components
Umbrella MSPs and MSSPs
Cloud Delivered Firewall
- Network Tunnel is "Inactive" On the Umbrella Dashboard
- How Do I Check the Protocol Of my Web Traffic?
- Why is the Port Information Missing from my Cloud Delivered Firewall Logs?
- Not Seeing Reports in Activity Search for CDFW
- How to build a Umbrella SIG Manual Tunnel with Viptela cEdge devices running 16.12
- Which protocol is used for Meraki tunneling?
Secure Web Gateway
- Cisco RBI (Remote Browser Isolation) - Supported Formats for Document Isolation
- SWG: Enable IP Persistence
- Rule-Based Policy FAQ
- Transitioning from Web Policies to Rule-Based Policies: What To Expect
- I've setup my SWG connection and I am getting filtering but the traffic is not on the Umbrella dashboard. What gives?
- Importing Users via CSV for SWG SAML
Virtual Appliances
- Deploy Umbrella Virtual Appliances in AWS
- Umbrella Chromebook Client: Sending user-IP mappings over a secure channel to the Umbrella Virtual Appliance
- Configuring Umbrella Virtual Appliance as a DNS forwarder for Infoblox
- Umbrella Virtual Appliance: Receiving user-IP mappings over a secure channel
- Deploy Umbrella Virtual Appliances in Nutanix
- Virtual Appliance Commands
Umbrella Authentication
Log Management
- Exporting Your Logs vs. Reporting API: A Guide To Managing Your Data
- Navigating the Cisco Cloud Security App for IBM QRadar
- Configuring the Cisco Cloud Security App for IBM QRadar
- Configuring Splunk with a Cisco-managed S3 Bucket
- How to: Downloading logs from Cisco Umbrella Log Management using the AWS CLI
- How to: Downloading logs from Cisco Umbrella Log Management in AWS S3
General FAQ about Umbrella
- How To: Submit A Talos Categorization Request
- Malicious domains related to COVID-19
- The Formatting on my Custom Block Page is Broken
- Chrome LookaLike URL Suggestion
- How to Contact Umbrella Support
- Rapid No-Reply Umbrella Security Review Requests
Umbrella Dashboard
- Restricting Multi-Org Admins from certain child organizations
- How to configure the Block Page Bypass (BPB) user role
- Creating a reporting dashboard for monitors on the wall (or similiar NOC-type dashboards)
- Getting Started with your Console
- Using Umbrella SSO (SAML) with a Multi-Org console
- Changing certificates when using SAML with ADFS
Networks
- Why do I see certificate errors when using blocked page bypass?
- Conditional forwarding - Bypass Umbrella DNS services for a single domain
- In Block Page Bypass or Allow-Only mode, some websites aren't working as expected
- Network status showing "Verifying" on your Umbrella dashboard
- How to: Dynamic Networks and PowerShell
- Documentation Required in order to verify Network Ownership
Roaming Computers (Roaming Client)
- Umbrella Android Client (UAC) user identity support
- IP Layer Enforcement with AnyConnect Split-Tunneling and Split-Excludes Conflicts
- Deploying the AnyConnect Roaming Security Module as a non-VPN user
- Umbrella Compatibility with macOS Big Sur
- Pulse Secure and Umbrella Roaming
- Disable Umbrella on Trusted Networks: Protected Network Disable for Enterprise Networks
Mobile Devices
- Cisco Umbrella Chromebook client v1.x.x End of Support and Android client Availability [updated]
- Activity Search Reports a Block While Chromebook is Allowed
- Cisco Security Connector: Known Software Conflicts
- Cisco Umbrella CSC and Meraki API Link: Meraki API IP Access Restrictions
- CSC and Additional MDMs
- CSC and the Virtual Appliance
Sites & Active Directory Integration
- Custom Root Certificate - Active Directory Certificate Services
- Manual Steps to Add DC to Umbrella Dashboard
- Sizing the Umbrella Active Directory Connector for optimal performance
- OpenDNS_Connector user working to pull login events, WBEM, but reports kerberos/LDAP login error
- Migration of AnyConnect Roaming Security from one Umbrella org to another
- Virtual Appliance: Manage/Delete Cached AD Users