Get Started FAQ

Table of Contents

• Networks and Identities
• Roaming Client
• Umbrella Settings
• Cisco Certificate
• Limitations and Range Limits

Networks and Identities

Q: Is it necessary to differentiate all of your networks or locations?
A: The answer depends on how you want to apply your policies and review activity in reports. You can have one Network Range included but internally have traffic from a guest identity forward to a specific public IP address and a production identity forward to a different address. You can thus set up separate network identities, which enables you to apply separate policies for Guest versus Production. These policies will serve as a filter in reports.

Q: Is it useful for our internal network—which is broken down into separate VLANs—to have each location (or VLAN) listed under deployments?
A: Internal networks identify traffic from different VLANs only when you deploy Virtual appliances (VAs). VAs are used to identify traffic from endpoints based on Internal IP addresses. Without a VA, all traffic is seen from the network—the public IP address.

Roaming Client

Q: Is there a silent installation for the roaming client?
A: Yes. Refer to the README file included in the roaming client ZIP file for details about advanced installation options, including a silent option.

Q: In our organization, laptops are sometimes transferred to different users and the computer name is changed. When the computer name changes, is that change reflected in Umbrella?
A: No. If the laptop is deployed with the roaming client then the computer name is registered during installation. Changing the computer name requires that the roaming client be reinstalled.

Q: Are roaming clients licensed per device?
A: Umbrella is licensed per seat, and that includes roaming client deployments.

Umbrella Settings

Q: Is it possible to change the time zone?
A: Time zone is controlled by the Umbrella administration user. To adjust the time zone setting, navigate to Administration > Accounts.

Cisco Certificate

Q: Is it possible to use our own Enterprise certificate authority (CA) instead of the Cisco Umbrella certificate?
A: Unfortunately no. The certificate is dynamically generated when using the Cisco Umbrella proxy servers.

Q: Is it possible to issue an intermediate certificate authority (CA) certificate to Umbrella to use?
A: Unfortunately this is not an option at present.

Q: Where can I find more information about installing the certificate company-wide?
A: For more information on certificate deployment, sere Manage the Cisco Umbrella Root Certificate.

Limitations and Ranges

Cisco Umbrella SIG packages are subject to an Average Bandwidth of up to 50 kilobits per second (“kbps”) per user, based on a 95th percentile calculation. This means that 95% of the time, usage will be at or below this amount. Utilizing a 95th percentile model allows peaks in usage that exceed the limit for brief periods of time.

Cisco will continuously measure Your usage of Umbrella SIG throughout a rolling 30-day period to determine Your Average Bandwidth per user. The formula for Average Bandwidth is:
Average Bandwidth = 95th Percentile Bandwidth / Number of Covered Users
The 95th Percentile Bandwidth is calculated by:

• observing Your traffic samples over the course of 30 days at each Cisco Umbrella data center Your traffic is sent to,
• discarding the top 5% of the traffic samples at each such data center and taking the next highest traffic sample value (this next highest traffic sample value is called the “Peak Value”), and
  *adding together the Peak Value for each data center.

Traffic samples for purposes of this calculation include Umbrella DNS, secure web gateway (proxy) and cloud delivered firewall traffic for applicable packages.

Umbrella DNS Security - Monthly DNS Query Average

Cisco Umbrella DNS Security packages are subject to a Monthly DNS Query Average limit of up to 5,000 DNS queries per Covered User per day. Cisco continuously monitors usage of DNS Security on a monthly basis to determine a customer’s Monthly DNS Query Average.

“Monthly DNS Query Average” = (number of DNS queries in applicable month/number of days in applicable month) /number of licensed Covered Users.

Overages

Cisco will work in good faith with customers to resolve any excessive usage. If usage cannot be sufficiently reduced by a customer, it may become necessary to purchase additional Covered Users in order to reduce bandwidth or query limits to acceptable levels.

Point Your DNS to Cisco Umbrella < Get Started FAQ > Umbrella Integration with SecureX