The Umbrella Documentation Hub

Welcome to the Umbrella documentation hub. Here you'll find access to all of our Cisco Umbrella user guides.

Get Started    

Block Apps

Blocking of applications can be implemented in different parts of the product:

  • App Discovery—when reviewing apps that are in use in your organization.
  • Application Settings—a policy component that enables blocking of all supported apps, regardless of usage.

Policy Enablement Required

App blocking requires enablement within a policy.

Controlling an App

Not All Apps Can Be Blocked

Apps that are not present in application settings, or do not have the Edit app controls, Control this app or Block this app option in App Discovery cannot be blocked. If you need to block an app we don't have yet, contact [email protected] to request it. For more information see Controllable Apps.

  1. Navigate to Reporting > Additional Reports > App Discovery.
  2. From the overview, click the number of unreviewed apps. The App Grid appears.
  3. Look for an app with Control this app or Block this app link visible in the Label column:
App Control
Description

Block this app

Appears when a block has not been configured for this app.
OR
A red tooltip icon will appear if the app setting is configured but has not yet been applied to a policy.

Control this app

Appears when block/allow have not been configured for this app.
OR
A red tooltip icon will appear if the app setting is configured but has not yet been applied to a policy.

Edit app Controls

Appears when the app has already had settings configured but can be edited.

Read-Only Users

Read-only users will not see the above-mentioned links.

  1. Click on Edit app controls, Control this app or Block this app to open the control window. This can also be done within App Details.
  1. In the window that appears, select the application settings in which to include this app. Selecting a label will help with filtering and reporting. Then click Save to complete the configuration.

Configure Application Settings in a Policy

You can also block application categories or specific apps by configuring Application Settings in your policies. For a full list of application categories, see Application Categories.

Applying Settings to a Policy is Required

App settings must be applied to a policy for controls to be implemented. App Settings can be selected from a dropdown in the policy wizard or edited within a policy.

Adding Application Settings to a Policy

  1. Navigate to Policies > Management > DNS Policies or Web Policies.
  2. Click Add to add a new policy.
  3. Under Select Your Protection, enable Application Control by selecting the box. Any other features for this policy can also be enabled. When you have selected all desired features, click NEXT.
  1. The policy wizard will walk you through various settings for the features you enabled for this policy. When you reach the Control Applications section, choose which apps you wish to block for this policy.

You can choose to block apps by selecting an Application Setting or creating a new setting. (This can also be done in Policies > Policy Components > Application Settings.)

Each category features a drop-down that lists the apps blockable for that category. You can choose individual apps within categories to block or the entire category.

  1. When an app is selected, a Block option with a gear icon appears to apply to the app. Click the gear icon to Block or Allow this app in this policy.
  1. Once all desired apps have been selected to be blocked for this setting, click NEXT.

Note: Some apps require you to enable the intelligent proxy with SSL decryption in your policy. If your policy does not use SSL decryption, you are prompted to enable it if you try to select apps that require it.

  1. The next step of the policy wizard enables you to set up the Block Page. For Application Control, the Block Page will appear when an end-user attempts to install an app that is blocked by the policy. You can choose and preview Umbrella's default Block Page or create a custom or existing Block Page. When you have configured the appropriate Block Page, click NEXT.
  2. The last step of the policy wizard is a summary to verify all enabled features and name the policy. Application Control should be one of the features enabled in the summary. Name your policy and click SAVE.

You have now enabled Application Settings within a policy.

Editing an Existing Policy for Application Control

  1. Navigate to Policies > Management > DNS Policies or Web Policies.
  2. Click on the Policy you wish to edit.
  3. The policy summary opens and lists the features enabled for this policy. Under Application Control click Enable if disabled, or Edit to configure.
  1. You are brought to the Application Control step of the policy wizard. Choose the application setting you wish to block for this policy, as explained in steps 5 and 6 of Adding Application Settings to a Policy.

  2. When all apps desired are selected, click SET & RETURN.

  3. An Application Control Change Summary appears to verify the changes. Click PROCEED.

The policy summary page will open and the feature for App Control should now be enabled and/or updated to list the apps blocked in the policy:

  1. Click SAVE to save the changes to the application controls for this policy.

Disabling an Application Setting in a Policy

  1. Navigate to Policies > Management > DNS Policies or Web Policies.
  2. Click on the Policy you wish to edit.
  3. The policy summary opens and lists the features enabled for this policy. Under Application Control click Disable.
  4. Click SAVE to disable the setting in the policy.

Block Page Bypass

Block Page Bypass will not be available for any apps blocked at the domain level in Application Settings. The block page will be a static block page without the ability to enter Block Page Bypass codes.

Updated 17 days ago


Block Apps


Suggested Edits are limited on API Reference Pages

You can only suggest edits to Markdown body content, but not to the API spec.