Troubleshooting

Common Issues and Troubleshooting

The purpose is to help provide context and actionable steps for resolving commonly experienced issues with the Cisco Umbrella roaming client before reaching out to Support or having to search the Knowledge Base. Most of the commands below require administrative access to the computer for troubleshooting. We recommend that you log into an administrator account to perform these tasks.

Did the Umbrella Roaming Client not Install?

There are several reasons why the Umbrella roaming client will not install correctly.

Scenario 1: You installed the Umbrella roaming client using a distributed/mass deployment method, such as Apple Remote Desktop, using a standardized image, and many more.

In this case, try installing the Umbrella roaming client on a machine locally through the manual installation method. If the Umbrella roaming client installs correctly, double-check mass deployment information (Using Standardized Images and Using Apple Remote Desktop in OS X) and make sure each step was followed precisely. If the Umbrella roaming client did not install, proceed to Scenario 2.

Scenario 2: You installed the Umbrella roaming client using the manual installation method, performing a single installation.

Make sure you meet the minimum requirements for your distribution.

If you meet the minimum requirements and the Umbrella roaming client does not install correctly, open a ticket with Support.

Unable to Resolve Internal Resources

If you cannot resolve internal resources (domains), then ensure that you have added all domains which host local resources to the Domain Management list.

If the domain in question has been added to the Internal Domains list, check to make sure all of your DHCP-delegated DNS servers are returning the private IP by running the following commands (in Terminal or Command Prompt) and compare the results. These commands should be run from a machine experiencing the issue with the Umbrella roaming client install. Be sure to substitute the internal domain name and local DNS server as applicable:

nslookup resource.internal-domain.com 127.0.0.1
nslookup resource.internal-domain.com $LOCAL_DNS_SERVER_1
nslookup resource.internal-domain.com $LOCAL_DNS_SERVER_2

If one of the local DNS servers is returning a public IP address, you will need to rectify that, as the Umbrella roaming client might be passing the Internal Domain DNS lookup to that server and using the response as the result.

If the Umbrella roaming client (127.0.0.1) is returning a public IP and querying the local DNS servers is returning a private IP, contact support.

Failed Installations

A failed installation refers to the Umbrella roaming client installer exiting suddenly with or without an error code or crashing during installation. If the Umbrella roaming client installs successfully but fails to register or become "Protected", that is a separate issue and this section should be skipped.

The Umbrella roaming client installer rarely fails, but if it does there are a few common causes. We encourage you to perform these checks before taking any additional action:

• If attempting to install by way of the command line or a deployment system, try installing through the Manual/Single install method. If a single installation is successful, but installing through the command line or deployment system is not, verify your Command Line parameters or the relevant Mass Deployment article. Typically, parameters such as the "OrgInfo" information were not passed correctly, or the installation method was missing source files.
• If you are running antivirus software or other security-based software products, check the security logs to make sure the installation was not blocked by the security software in question.

Unregistered Umbrella Roaming Clients 

After installation, the Umbrella roaming client tray icon may be gray or red. Alternately, the Umbrella roaming client may not show as registered in the dashboard. This is considered to be an "unregistered" Umbrella roaming client.

The cause for an unregistered Umbrella roaming client is almost always one of two reasons:

HTTP Proxy (Windows Only)—There is an HTTP/HTTPS proxy at the local computer level, or there may be stale proxy settings left over from a previous proxy configuration. See the HTTP/HTTPS snippet of the Networking section in Umbrella Roaming Client Deployment Guide: Prerequisites and read the Umbrella Roaming Client: HTTP Proxies (Windows) article for more information.

Command Line/Mass Deployments —If you deployed the Umbrella roaming client through a distribution tool like Apple Remote Desktop or Kaseya, it is likely the information from OrgInfo.json/.plist was not copied correctly. Make sure you are using the method outlined in our Mass Deployment articles, as there is a specific way to deploy the Umbrella roaming client:

• Deploy using Apple Remote Desktop
• Deploying using Standardized Images

Unprotected/Unencrypted

In either the Umbrella roaming client's tray/menu bar icon, or in the Umbrella dashboard, the status is yellow, showing Unprotected/Unencrypted.

See the following article for a detailed explanation of this state, including some tests and potential fixes: Umbrella Roaming Client: Unprotected and Unencrypted.

Switching states or statuses frequently (flapping)

Locally on an endpoint, you may see that the Umbrella roaming client's state is constantly changing or 'flapping'. This is observable through the tray/menu bar icon messaging. When flapping occurs, there may or may not be network connectivity issues. If the Umbrella roaming client is rapidly changing states and causing internet connectivity issues, consider disabling the Umbrella roaming client temporarily and contacting support.

If there are no connectivity issues, but 'flapping' or state change was noticed by the user through the tray/menu bar icon, this can usually be attributed to one of the following two scenarios:

Scenario #1: You are utilizing a VPN client which is on our Incompatible VPN Clients list. If so, there is currently no resolution, and you will have to utilize a different VPN client.

Scenario #2: There is significant packet loss on the network, which in turn causes the Umbrella roaming client's health checks to fail. We recommend using ping or MTR/WinMTR to verify if there is packet loss between 208.67.222.222 / 208.67.220.220 and the client computer. If the packet loss is high enough, or concentrated—even something above 2% is significant—the Umbrella roaming client may temporarily transition to a different state and provide irregular protection. If there is no packet loss, or you are unable to resolve your packet loss issue, then contact support.

Logs

Currently, the Umbrella roaming client logs are not easily read as they are highly verbose, which allows for advanced troubleshooting. Umbrella collects the logs automatically when an issue is reported in a support ticket, which sometimes will require the end user running our Diagnostic tool manually—see below for information about the diagnostic tool.

At this time, we do not recommend attempting to interpret the logs to troubleshoot. In the near future, we are hoping to provide two sets of logs—advanced logging for Support and developers, but also a set of less verbose logs so you can do your own troubleshooting.

If you would like to look at the Umbrella roaming client service logs, they are located here:

• Windows—Open the following file with a text editor:

   C:\ProgramData\OpenDNS\ERC\OpenDNS_ERC_Service.log

• Mac—Use the following command in the Terminal application to extract Umbrella roaming client logs from the system log: 

  grep dns-updater /var/log/system.log

Diagnostic Tool

The Diagnostic tool is built into the Umbrella roaming client. In most cases, Support can run this tool and obtain the logs of the Umbrella roaming client automatically. In a few cases, you will be required to run the tool on behalf of Support or at their request.

Providing diagnostic output when initially opening a support request will greatly increase the speed at which an issue can be troubleshot by Support. You can run the diagnostic tool a number of ways, which are outlined in the article: Umbrella Roaming Client: Provide Diagnostic Information to Support.

For more information about what is collected by Umbrella, see Umbrella Roaming Client: Remote Logging and Diagnostics

---

Virtual Appliances < Troubleshooting > Domain Management