The Umbrella Documentation Hub

Welcome to the Umbrella documentation hub. Here you'll find access to all of our Cisco Umbrella user guides.

Get Started    

Enable the Intelligent Proxy

  1. Navigate to Policies > Management > All Policies and click Add or expand an existing policy.
  1. Navigate to Advanced Settings.
    Advanced Settings is accessed from the Policy wizard's What should this policy do step or Summary page.
  1. Under Advanced Settings, toggle on Enable Intelligent Proxy.

  1. Optionally, select SSL Decryption.
    Allows the intelligent proxy to inspect traffic over HTTPS and block custom URLs in destination lists.
    When selected, the following are also available:
    • Root Certificate—You must download and install the Cisco Umbrella root certificate to all computers. Without this certificate, HTTPS and SSL connections will break.
      a. Expand Root Certificate and click Download Certificate.
      b. Install the certificate. For more information, see Import the Cisco Certificate.
    • Selective Decryption—Create a list of content categories to exclude from inspection by the intelligent proxy.
      a. Expand Selective Decryption and click Create List.
      b. Select content categories to exempt from being proxied—inspected—and click Save.
      Note: The categories Terrorism, Internet Watch Foundation, and German Youth Protection are excluded from this list and are always proxied.
  1. Optionally, select IP-Layer Enforcement.
    For roaming client identities only, tunnels suspect IP connections to gain visibility into threats that bypass DNS lookups. For more information, see Adding IP Layer Enforcement.
  2. Click Save or Next.
    To disable the intelligent proxy for testing, or for a group of users, simply un-toggle the option and apply changes.

Once enabled, it's a good idea to check whether it's working as expected. For more information, see Test the Intelligent Proxy.

Manage the Intelligent Proxy < Enable the Intelligent Proxy > Test the Intelligent Proxy

Updated 16 days ago

Enable the Intelligent Proxy

Suggested Edits are limited on API Reference Pages

You can only suggest edits to Markdown body content, but not to the API spec.