The Umbrella Documentation Hub

Welcome to the Umbrella documentation hub. Here you'll find access to all of our Cisco Umbrella user guides.

Get Started    

Filter Content with Public Session Support

Customer using Chromebooks in public session mode can use Cisco Umbrella protection to filter malicious and inappropriate internet content. Release 1.3.0 of the Umbrella Chromebook client includes support for public sessions.

Table of Contents


  • G Suite administrator account in order to log into
  • G Suite administration account must have Google Enterprise licenses equal to the number of Chromebooks running in public session.
  • A valid Cisco Umbrella license. See Cisco Umbrella Packages.
  • Chromebooks running Chrome OS v55 or later.
  • Port 53 UDP must be accessible to and
  • The site must be accessible.

Enable a Public Session

  1. Enroll chromebooks with your G Suite organization. See Enroll Chrome OS devices.
  2. Create a public session or managed guest session for the enrolled ChromeOS device. See Managed guest session devices.
  3. Move one or more ChromeOS devices into the Organization Unit (OU) that has managed guest session settings applied.

Prepare the Cisco Umbrella Configuration File

  1. Navigate to Deployments > Core Identities > Chromebook Users and click Configure.
  1. Download the configuration file.
    Note: Save this file to a known location. You will copy the configuration from this file during the installation of the Cisco Umbrella Chromebook client application.
  1. Edit the configuration file to add the public session flag.
    "organizationInfo": {
        "Value": {
            "organizationId": 1234567,
            "regToken": "abcdefghijklmnop9876ABCDEFGHIJLL"
    "publicSession": {
        "Value": true
  1. Save the modified config file.

Install Umbrella Chromebook Client in Your Public Session

  1. Log into
  2. Navigate to Device management > Chrome Management > Apps & Extensions.
  3. Click App Management.
  1. Select UCC Extension.
  2. Click Managed guest sessions and then click the + icon.
  1. Enter the Cisco Chromebook client app ID in the search box.
  1. Select an organizational unit to apply the settings to and then enable Force install.
  1. Click Save. The Umbrella Chromebook client extension deployment is deployed.
  2. Repeat the above steps, but select Umbrella Chromebook client app in step 4.
  3. Upload the config file you previously downloaded and modified.
  4. Click Save.

Monitor Public Sessions in Umbrella

When a Chromebook is registered with Umbrella in public session mode, the serial number of the Chromebook is used as its identifier in the Umbrella dashboard. You can find the device by navigating to Deployments: Core Identities > Chromebook Users. You can also find the serial number on the back of the device itself.

When a Chromebook in public session mode is registered with Umbrella, DNS queries from the device appear in Activity Search.

To create a policy specific to public session mode, navigate to Policies > Management > All Policies and select Chromebooks.

Deploy the Chromebook Client < Filter Content with Public Session Support > Remove Cisco Chromebook Client Software

Updated about a month ago

Filter Content with Public Session Support

Suggested Edits are limited on API Reference Pages

You can only suggest edits to Markdown body content, but not to the API spec.