The Umbrella Deployment Documentation Developer Hub

Welcome to the Umbrella Deployment Documentation developer hub. You'll find comprehensive guides and documentation to help you start working with Umbrella Deployment Documentation as quickly as possible, as well as support if you get stuck. Let's jump right in!

Get Started    

Public Session Support

For Chromebook client G Suite identity service

Introduction

Customer using Chromebooks in public session mode can use Cisco Umbrella protection to filter malicious and inappropriate internet content. Release 1.3.0 of the Umbrella Chromebook client includes support for public sessions.

Prerequisites

  • G Suite administrator account in order to log into admin.google.com.
  • G Suite administration account must have Google Enterprise licenses equal to the number of Chromebooks running in public session.
  • A valid Cisco Umbrella license.
  • Chromebooks must be running Chrome OS v55 or later.
  • Port 53 UDP must be accessible to 208.67.220.220 and 208.67.222.222
  • The site https://registration.polaris.qq.opendns.com must be accessible.

Enabling a Public Session

Follow these steps to create a public session and deploy the Cisco Umbrella Chromebook client to it:

  1. Enroll chromebooks with your G Suite organization.

  2. Create a public session or managed guest session for the enrolled ChromeOS device.

  3. Move one or more ChromeOS devices into the Organization Unit (OU) that has managed guest session settings applied.

Prepare the Cisco Umbrella configuration file

  1. Follow these steps to download the config file.

  2. Edit the configuration file to add the public session flag, as shown:

{
    "organizationInfo": {
        "Value": {
            "organizationId": 1234567,
            "regToken": "KtOMPQxkWzWeGzFGrUSmbjgYu7XriVdw"
        }
    },
    "publicSession": {
        "Value": true
    }
}
  1. Save the modified config file. You will upload it in a following process.

Install UCC in your public Session:

  1. Open the Google Administration console.

  2. Navigate to Device management > Chrome management.

  3. Click App Management:

  1. Select UCC Extension.

  2. Click Managed guest session settings:

  1. Select an organizational unit to apply the settings to, then enable Force installation:
  1. Click Save to complete the Umbrella Chromebook client extension deployment.

  2. Repeat the above steps, but select Umbrella Chromebook client app in step 4.

  3. Upload the config file you previously downloaded and modified.

  4. Click save.

Monitoring public sessions in the Cisco Umbrella dashboard

When a Chromebook is registered with Umbrella in public session mode, the serial number of the Chromebook is used as its identifier in the Umbrella dashboard. You can find the device by navigating to Deployments: Core Identities > Chromebook Users.

You can also find the serial number on the back of the device itself.

When a Chromebook in public session mode is registered with Umbrella, DNS queries from the device appear in Reporting > Activity Search:

To create a policy specific to public session mode, navigate to Policies > Management > All Policies, then select Chromebooks:

Public Session Support


For Chromebook client G Suite identity service

Suggested Edits are limited on API Reference Pages

You can only suggest edits to Markdown body content, but not to the API spec.