End-User Actions

To start protecting an unmanaged mobile device, you must receive an invitation by an Umbrella administrator to register and enable the roaming client on the mobile device. Administrator enrollment is required to begin activation. For more information about administrator enrollment, see Administrator Actions.

Table of Contents

• Android
• iOS

Android

You can deploy Umbrella for unmanaged mobile devices to any Android device that meets the minimum requirements.

Known Limitations

• When deployed on an unmanaged Android mobile device that is behind an Umbrella virtual appliance (VA), the Cisco Secure Client with Umbrella module does not support graceful backoff. Instead, the Cisco Secure Client intercepts the DNS traffic for the unmanaged mobile device and redirects the traffic to the public Umbrella DNS resolvers. The Cisco Secure Client deployed on a managed Android mobile device forwards traffic to the VA DNS resolvers.

Prerequisites:

• Android 8.0 or higher version
• Valid invite to an authorized user from an Umbrella administrator
• Device with a camera or Firefox browser installed
• Cisco Secure Client application installed

Deployment

Download the Cisco Secure Client application from the Google Play Store.

Enrollment

Enroll an unmanaged Android mobile device through a QR code (camera required) or manual enrollment link.

Enrollment by QR code

1. Open the Cisco Secure Client app and open the main menu.
2. Select Diagnostics.

3. Select Scan QR Code and scan the QR code provided.

4. Continue to Registration and Activation steps. 

Enrollment without Camera Access

1. Open the Cisco Secure Client app and open the main menu.
2. Select Settings.
3. Select External Control and change the setting to Prompt.

4. Open the Firefox application on your phone (download Firefox from the Google Play store if not already installed) and paste the enrollment link into the address bar.
5. Open the main menu and select the option for Open in App.
6. Continue to Registration and Activation steps. 

Registration and Activation

1. Enter your authorized email address to complete enrollment.
   Note: If the email provided is not authorized, the registration fails and the app cannot prompt to activate. Contact your Umbrella administrator.
2. Activate the prompted VPN connection to initialize DNS coverage.
   Umbrella uses a VPN connection locally to apply protection to your DNS queries. Allow the VPN Connection when prompted to complete activation of protection.
3. Visit welcome.umbrella.com to verify that your protection is active.

iOS

You can deploy Umbrella for unmanaged mobile devices to any iOS device that meets the minimum requirements.

Known Limitations

• When deployed on an unmanaged iOS mobile device that is behind an Umbrella virtual appliance (VA), the Umbrella Cisco Security Connector (CSC) does not support graceful backoff. Instead, the CSC intercepts the DNS traffic for the unmanaged mobile device and redirects the traffic to the public Umbrella DNS resolvers. The CSC deployed on a managed iOS mobile device forwards traffic to the VA DNS resolvers.

Prerequisites

• iOS 14 or higher version
• Valid invite to an authorized user from an Umbrella administrator
• Cisco Security Connector application installed

Deployment

Download the Cisco Security Connector application from the AppStore. Once installed, we recommend that you enroll with the enrollment link. If a link is not provided, enrollment is also possible by scanning the QR code.

Enrollment by Link

1. Tap the enrollment link shared by your administrator.
2. When prompted, tap to open with the Cisco Security Connector app. If you are not prompted and the link opens directly in Safari, please ensure the Cisco Security Connector app is installed.

Enrollment by QR code

1. Scan the QR code provided.
2. Allow the link to be opened through the Cisco Security Connector.

Registration and Activation

After tapping enrollment, a popup appears. In this text field, enter your email address. This must be the email address configured by your administrator.

Follow the on-screen instructions to enable DNS security.

1. Tap Enable.
2. Under the DNS option list, select Cisco Umbrella.

If the direct settings link does not appear, you can reach the setting manually.

1. Navigate to Settings.
2. Tap General.
3. Tap VPN and Device Management. Once enabled, this will read VPN, DNS, and Device Management.
4. Under the DNS option, select Umbrella.

Return to the Cisco Security Connector app and visit welcome.umbrella.com to verify that your protection is active.

---

Administrator Actions < End-User Actions > Get Started with Umbrella for Chromebooks