Welcome to the MSP Deployment Documentation developer hub. You'll find comprehensive guides and documentation to help you start working with MSP Deployment Documentation as quickly as possible, as well as support if you get stuck. Let's jump right in!
Cisco Umbrella Easy Protect is a simple bare-bones deployment of Cisco Umbrella that offers a baseline of security protection to your customers through network DNS protection. With Easy Protect, you add Network identities, have your customer change their router's DNS settings to use the Cisco Umbrella global network and that's it. Easy Protect's Default policy is automatically applied and your customers are immediately secured against DNS-based threats.
Note that with Easy Protect, your customer does not have access to their own Umbrella dashboard and cannot create policies. For each customer, an identity—in this case a Network—is added to Easy Protect and that's it. The network is protected!
An identity is simply an entity (in this case a customer Network) that you can enforce policy against. This identity is defined by the public IP space of the network itself. All traffic originating from that IP space is identified as coming from that network in Easy Protect. Thus, to add a network to Umbrella you add the public IP space, or IP range, to define the scope of identity.
Note: Only Network identities can be added to Easy Protect.
Sign into Easy Protect, navigate to Deployments > Core Identities > Networks and click Add.
Give your new identity a good descriptive name and add its IP address along with the subnet mask, usually a /32 subnet—a single IP address.
Configuring your customer's DNS directs traffic from their network to the Cisco Umbrella global network. You maybe be able to update your customer's DNS settings for them; but if not, direct your customer to manually update their DNS settings to point to the Cisco Umbrella global network.
To switch to Easy Protect, you need to explicitly change the DNS settings of your customer's operating system or hardware firewall/router to use IP addresses of the Umbrella name servers and turn off the automatic DNS servers provided by you to your customer.
The Umbrella IP addresses (IPv4) are:
In a browser, enter the IP address to access the router's user interface and enter the router's password.
Find the area of configuration in which DNS server settings are specified and replace those addresses with Umbrella's IP addresses:
Save your changes and exit the router's user interface.
Flush your DNS cache.
Test that the setup is working correctly. Browse to http://welcome.umbrella.com. If you've successfully pointed to the Cisco Umbrella servers, you'll see the Umbrella Welcome page.