The deployment-mssp Developer Hub

Welcome to the deployment-mssp developer hub. You'll find comprehensive guides and documentation to help you start working with deployment-mssp as quickly as possible, as well as support if you get stuck. Let's jump right in!

Get Started    

Add a Network Identity to Protect Your Customer's Network

A network is an identity in Umbrella and is defined by the public IP space of the network itself. All traffic originating from that IP space is identified as coming from that network in Umbrella. Thus, to add a network to Umbrella you add the public IP space, or IP range, to define the scope of identity.

Once the identity has been added, you'll need to build policies to extend Umbrella's protection to any device that connects to the internet from behind that network. For more informations, see Create and Apply Policies.

What's an identity?

An identity is simply an entity that you can enforce policy against and report on. It can be very high level—an entire network can be an identity—or very granular—down to the individual logged in user in Active Directory.

Step 1 – Select the Appropriate Network

First, configure the network to which the computer you're currently using is connected. If you don't know the public IP of that network, find it here:

Note: If you attempt to add a network other than the one currently being used to access the dashboard, you will be prompted to contact Support for manual verification. You'll also need manual verification from support for IP ranges larger than a /29 network. Verification cases are created automatically and you'll receive an update as soon as it's reviewed.

Step 2 – Add a Network Identity

  1. In the MSSP console, navigate to Customer Management and click View Dashboard.
    The customer's Umbrella dashboard opens in a new browser tab. You can confirm that you're navigating the customer's Umbrella dashboard be reviewing Sign In information listed in the the left-side navigation. The customer name is listed.
    As well, the customer's name is listed in the search bar.
  1. In Umbrella, navigate to Deployments > Core Identities > Networks and click Add.
  1. In the Add a New Network modal, give your new identity a meaningful Network Name and add its IP address along with the subnet mask, usually a /32 subnet—a single IP address.
    Note: Dynamic IP addresses are only supported for IPv4.
  1. Select an internet protocol—IPv4, IPv6, or both.
    Select a protocol based on the Umbrella IP address to which you have configured your router to point.
  2. Add the network's IP address along with the subnet mask, usually a /32 subnet for IPv4 and /64 subnet for IPv6.
  3. For IPv4 only, if it's a dynamic IP address, check Dynamic and download the Umbrella Dynamic IP Updater:

Dynamic IP Address—IPv4 Only

A dynamic IP address means that the 'public' IP of your network changes over time when the 'lease' for that IP address changes. Your IP may stay the same for several weeks, but the lease will eventually expire and be given to another customer of your ISP. When the IP address you've registered with Umbrella changes, the Umbrella security settings no longer apply. These settings no longer match your account information and must be updated. To avoid having to manually update this information, we recommend installing the Umbrella Dynamic IP Updater on at least one computer within the network that you've registered in Umbrella. The Umbrella Dynamic IP Updater automates the discovery and registration of a network's IP address to your Umbrella account whenever the dynamic IP address changes. If you do not do this, you must manually re-enter your IP address each time it changes. For more information, see Networks with Dynamic IP Addresses.

To maintain and automatically update your IPv4 dynamic IP when it changes, following these guidelines:

  • The computer should be stationary to the network and not a laptop (only used in the network on which you are configuring Umbrella).
  • The computer should always be powered on (or turned on before any other computers log onto the network.)
  1. Click Save.
    Once the service validates your IP address, the network appears in the list at Deployments > Core Identities > Networks. Initially, Umbrella lists your new network identity's status as Inactive. Network status only changes to Active when DNS traffic is sent to Umbrella from the network.
    The policy applied to your new identity depends on your policy configurations. If you have a policy configured that includes network identities, Umbrella applies that policy; otherwise; Umbrella applies the Default policy.

Your Network identity is now configured. Next, point your network’s DNS traffic to the Umbrella global network.

Add a Network Identity to Protect Your Customer's Network > Delete a Network Identity

Updated 3 years ago

Add a Network Identity to Protect Your Customer's Network

Suggested Edits are limited on API Reference Pages

You can only suggest edits to Markdown body content, but not to the API spec.