Cisco Umbrella Knowledge Base
FAQs and troubleshooting steps for all Umbrella components
Umbrella MSPs and MSSPs
Cloud Delivered Firewall
- Exclude Traffic by IP Address from CDO Managed Tunnels
- DNS in the Tunnel: Internal IP Visibility
- Dispute IPS (Intrusion Prevention) False Positives
- IPSec Tunnel Failover
- SD-WAN Auto Tunneling FAQ
- Network Tunnel is "Inactive" On the Umbrella Dashboard
Secure Web Gateway
- Certificate and TLS Protocol Errors
- Cloud Malware feature not detecting Eicar test files on O365
- HTTPS Inspection: SSL Resumption/IP Persistence
- AnyConnect VPN + Roaming Security Module States when using SIG/SWG
- Flie Type Control - Rule Actions
- Data Loss Prevention (DLP): Test Sample Data for Built-In Data Identifiers
Virtual Appliances
- Can I Back Up the Virtual Appliances?
- Deploy Umbrella Virtual Appliances in AWS
- Umbrella Chromebook Client: Sending user-IP mappings over a secure channel to the Umbrella Virtual Appliance
- Configuring Umbrella Virtual Appliance as a DNS forwarder for Infoblox
- Umbrella Virtual Appliance: Receiving user-IP mappings over a secure channel
- Deploy Umbrella Virtual Appliances in Nutanix
Umbrella Authentication
Log Management
- Exporting Your Logs vs. Reporting API: A Guide To Managing Your Data
- Navigating the Cisco Cloud Security App for IBM QRadar
- Configuring the Cisco Cloud Security App for IBM QRadar
- Configuring Splunk with a Cisco-managed S3 Bucket
- How to: Downloading logs from Cisco Umbrella Log Management using the AWS CLI
- How to: Downloading logs from Cisco Umbrella Log Management in AWS S3
General FAQ about Umbrella
- How To: Submit A Talos Categorization Request
- Malicious domains related to COVID-19
- Cloud Malware Platforms: Enable Audit Logging for Office365
- Deploy Umbrella DNS with Aruba WLANs
- Umbrella Policy Selection Involving Multiple Organizations
- Countries with VPN Tunnel Restrictions
Umbrella Dashboard
- Export Umbrella report data updates to CSV export - Activity Search
- Wildcard Search in Activity Report
- Why the page is not loading correctly when I use the Bypass Code/User
- How to: Open/check support tickets using the Umbrella Support Platform
- Restricting Multi-Org Admins from certain child organizations
- How to configure the Block Page Bypass (BPB) user role
Networks
- Why do I see certificate errors when using blocked page bypass?
- Umbrella as a DNS forwarder in Windows Server
- Umbrella filtering not working? - Check for DNS Hijacking/redirection from your ISP
- Conditional forwarding - Bypass Umbrella DNS services for a single domain
- In Block Page Bypass or Allow-Only mode, some websites aren't working as expected
- Network status showing "Verifying" on your Umbrella dashboard
Roaming Computers (Roaming Client)
- Umbrella Android Client (UAC) user identity support
- Internal Domains VS External Domains
- Software Compatibility - Roaming Security Module (Umbrella module) for AnyConnect or Cisco Secure Client
- IP Layer Enforcement status
- How to: Download Cisco AnyConnect Secure Mobility Client
- Enabling Roaming Client Trace Logs
Mobile Devices
- [Updated June 2021] Cisco Umbrella Chromebook client v1.x.x End of Support and Android client Availability
- Activating and submitting sysdiagnose for battery logging
- Activity Search Reports a Block While Chromebook is Allowed
- Cisco Security Connector: Known Software Conflicts
- Cisco Umbrella CSC and Meraki API Link: Meraki API IP Access Restrictions
- CSC and Additional MDMs
Sites & Active Directory Integration
- How Umbrella Active Directory integration works when using Virtual Appliances
- Custom Root Certificate - Active Directory Certificate Services
- Manual Steps to Add DC to Umbrella Dashboard
- Sizing the Umbrella Active Directory Connector for optimal performance
- OpenDNS_Connector user working to pull login events, WBEM, but reports kerberos/LDAP login error
- Migration of AnyConnect Roaming Security from one Umbrella org to another