The MSP Deployment Documentation Developer Hub

Welcome to the MSP Deployment Documentation developer hub. You'll find comprehensive guides and documentation to help you start working with MSP Deployment Documentation as quickly as possible, as well as support if you get stuck. Let's jump right in!

Get Started    

Getting Started with Easy Protect

Cisco Umbrella Easy Protect is a simple bare-bones deployment of Cisco Umbrella that offers a baseline of security protection to your customers through network DNS protection. With Easy Protect, you add Network identities, have your customer change their router's DNS settings to use the Cisco Umbrella global network and that's it. Easy Protect's Default policy is automatically applied and your customers are immediately secured against DNS-based threats.

Note that with Easy Protect, your customer does not have access to their own Umbrella dashboard and cannot create policies. For each customer, an identity—in this case a Network—is added to Easy Protect and that's it. The network is protected!

For more information about Easy Protect, including whether you'd be a good fit as a Service Provider to give Easy Protect to your customers, please see the Cisco Umbrella for Service Providers datasheet.

Getting Started

  1. Manually add a Network identity.
  2. Point your customer's DNS to Cisco Umbrella.

1. Manually Add a Network Identity

An identity is simply an entity (in this case a customer Network) that you can enforce policy against. This identity is defined by the public IP space of the network itself. All traffic originating from that IP space is identified as coming from that network in Easy Protect. Thus, to add a network to Umbrella you add the public IP space, or IP range, to define the scope of identity.

Note: Only Network identities can be added to Easy Protect.

  1. Sign into Easy Protect, navigate to Deployments > Core Identities > Networks and click Add.
  1. Give your new identity a good descriptive name and add its IP address along with the subnet mask, usually a /32 subnet—a single IP address.

  1. If it's a dynamic IP address, check Dynamic and download our Dynamic IP Updater.
    For more information, see Networks with Dynamic IP Addresses.
  2. Click Save.

2. Point Your Customer's DNS To Cisco Umbrella

Configuring your customer's DNS directs traffic from their network to the Cisco Umbrella global network. You maybe be able to update your customer's DNS settings for them; but if not, direct your customer to manually update their DNS settings to point to the Cisco Umbrella global network.

To switch to Easy Protect, you need to explicitly change the DNS settings of your customer's operating system or hardware firewall/router to use IP addresses of the Umbrella name servers and turn off the automatic DNS servers provided by you to your customer.

The Umbrella IP addresses (IPv4) are:

  • 208.67.222.222
  • 208.67.220.220
  1. In a browser, enter the IP address to access the router's user interface and enter the router's password.
  2. Find the area of configuration in which DNS server settings are specified and replace those addresses with Umbrella's IP addresses:
    • 208.67.222.222
    • 208.67.220.220
  3. Save your changes and exit the router's user interface.
  4. Flush your DNS cache.
  5. Test that the setup is working correctly. Browse to http://welcome.umbrella.com. If you've successfully pointed to the Cisco Umbrella servers, you'll see the Umbrella Welcome page.

Getting Started with Easy Protect > Getting Started with Policies

Getting Started with Easy Protect