The Umbrella Deployment Documentation Developer Hub

Welcome to the Umbrella Deployment Documentation developer hub. You'll find comprehensive guides and documentation to help you start working with Umbrella Deployment Documentation as quickly as possible, as well as support if you get stuck. Let's jump right in!

Get Started    

Enable the Intelligent Proxy

  1. Navigate to Policies > Management > DNS and WebPolicies and click Add or expand an existing policy.
  1. Navigate to Advanced Settings.
    Advanced Settings is accessed from the Policy wizard's What should this policy do step or Summary page.
  1. Under Advanced Settings, toggle on Enable Intelligent Proxy.

  1. Optionally, select SSL Decryption.
    Allows the intelligent proxy to inspect traffic over HTTPS and block custom URLS in destination lists.
    When selected, the following are also available:
    • Root Certificate—You must download and install the Cisco Umbrella root certificate to all computers. Without this certificate, HTTPS and SSL connections will break.
      a. Expand Root Certificate and click Download Certificate.
      b. Install the certificate. For more information, see Import the Cisco Certificate.
    • Selective Decryption—Create a list of content categories to exclude from inspection by the intelligent proxy.
      a. Expand Selective Decryption and click Create List.
      b. Select content categories to exempt from being proxied—inspected—and click Save.
      Note: The categories Terrorism, Internet Watch Foundation, and German Youth Protection are excluded from this list and are always proxied.
  1. Optionally, select IP-Layer Enforcement.
    For roaming client identities only, tunnels suspect IP connections to gain visibility into threats that bypass DNS lookups. For more information, see Adding IP Layer Enforcement.
    Note: IP-Layer Enforcement is only available with the Umbrella Insights or Umbrella Platform packages, or customers with Umbrella for MSP.
  1. Click Save or Next.
    To disable the intelligent proxy for testing, or for a group of users, simply un-toggle the option and apply changes.

Once enabled, it's good idea to check whether it's working as expected. For more information, see Test the Intelligent Proxy.


What is the Intelligent Proxy < Enable the Intelligent Proxy > Test the Intelligent Proxy

Enable the Intelligent Proxy