The MSP Deployment Documentation Developer Hub

Welcome to the MSP Deployment Documentation developer hub. You'll find comprehensive guides and documentation to help you start working with MSP Deployment Documentation as quickly as possible, as well as support if you get stuck. Let's jump right in!

Get Started    

Appendix B – Virtual Appliances

Virtual Appliances and the Umbrella Roaming Client

When you are using Virtual Appliances (VAs) for Internal Network or Active Directory (AD) visibility and granularity, the behavior of the Cisco Umbrella roaming client changes. VAs act as DNS forwarders and send all public DNS requests to Umbrella and forward internal DNS requests to the network's internal DNS servers.


If a computer running the Umbrella roaming client enters a network with VAs set in DHCP's DNS settings, the Umbrella roaming client does the following:

  • Disables itself. The Umbrella roaming client is running but enters a "standby" state
  • The DNS servers revert to what is provided by the VAs
  • Reporting in the Umbrella dashboard will show the Internal Network IP or Active Directory identity of the user or computer and not as the Umbrella roaming client hostname.

Umbrella roaming client-specific policies will not be enforced until you roam onto a network without VAs.

This state is reflected in the Deployments > Core Identities > Roaming Computers page. A roaming computer protected by a VA is green and states that it is protected by a VA.

Updated 3 years ago

Appendix B – Virtual Appliances

Suggested Edits are limited on API Reference Pages

You can only suggest edits to Markdown body content, but not to the API spec.