The OpenDNS Hardware Integrations Developer Hub

Welcome to the OpenDNS Hardware Integrations developer hub. You'll find comprehensive guides and documentation to help you start working with OpenDNS Hardware Integrations as quickly as possible, as well as support if you get stuck. Let's jump right in!

Get Started    

Prerequisites

The following prerequisites must be met in order for the ASA integration to work successfully.

Licensing

  • A valid Cisco Umbrella Professional, Insights, or Platform subscription.
  • The ASA must have a 3DES license. If you are using Smart Licensing, your account must be enabled for export-controlled functionality.

Hardware and Software

  • Administrative access to an ASA on version 9.10.1 or newer. This includes ASAv, ASA 5500-X, and Firepower 2100/4100/9300. FTD software is not supported.
  • Full Admin access to the Umbrella dashboard.

Network Access

  • The ASA must have a name server configured and DNS lookup enabled on its interfaces. You can use your own servers, or configure the Umbrella servers. DNS inspection automatically redirects to the Umbrella resolvers even if you configure different servers. Example:
ciscoasa(config)# dns domain-lookup outside
ciscoasa(config)# dns domain-lookup inside
ciscoasa(config)# dns name-server 208.67.222.222 208.67.220.220
  • The name server you set must be able to resolve api.opendns.com, and there must be a route configured to reach it.
  • The ASA registers itself with your Umbrella dashboard over HTTPS, so the ASA must be able to communicate with api.opendns.com over TCP port 443.
  • The root certificate must be present on the ASA in order for registration to complete successfully. See Import the Root Certificate.

The following access must be allowed:

Port
Protocol
Destination

443

TCP

api.opendns.com

53

TCP, UDP

208.67.222.222, 208.67.220.220

Updated 2 years ago

Prerequisites


Suggested Edits are limited on API Reference Pages

You can only suggest edits to Markdown body content, but not to the API spec.