Troubleshoot Destination Lists

When you add a malformed destination or unsupported type of destination to a DNS destination list, you may encounter an error condition. In most cases, Umbrella displays an error message that describes the reasons for the error condition. DNS destination lists support the following destination types: fully-qualified domain names, IP addresses, or URLs. For more information about DNS destination lists, see Add a DNS Destination List.

Destination Lists and Common Error Conditions

Action	Error Message	Additional Information
Added a URL to an allow list.	URLs in allow lists are not currently supported. Consider adding the domain only instead.	* Remove the URL and replace it with the domain for that URL.
Entered a destination that does not match the type and format expected by the destination list.	Invalid Domain, Invalid URL, Invalid IP	Check the format and type of the destination that you added. Enter the correct format of the destination.
Added a URL that has an error in the domain, path, or query.	Please check to confirm that the URL was entered correctly.	Umbrella requires that URLs follow RFC-3986 Uniform Resource Identifier (URI): Generic Syntax. Check the characters in the URL. Check the composition of the URL. You can add a partial URL to leverage right-side wildcarding. For more information, see Control Access to Custom URLs.
Added a URL that is found in a high-volume domain list.	The URL belongs to a domain that does not present a security concern, but if proxied may impact Umbrella performance. Instead, consider adding only the domain.	If you do not trust the destination, consider blocking the domain. Generally, high-volume domains do not present a security risk and do not require additional inspection.
Added a destination that is found in the protected allow list.	The supplied destination matches the Umbrella global allow list and cannot be saved.	Destinations in the protected allow list either host services other than HTTP, or are critical to Umbrella operations. Umbrella only proxies services that use HTTP. If the error occurs when you add a URL and you don't trust the destination, consider blocking the domain. * If you are not sure why the destination is considered protected, contact support.
Uploaded a list of destinations in which at least one of the URLs or domains contains an error.	There was an issue with one or more of the destinations in the uploaded list.	A bulk upload error message. Umbrella provides a link to the list of destinations that were not added from the uploaded destination list. Correct or remove the destinations from your bulk upload list and try again. Umbrella does not add destinations from an uploaded destination list unless all of the destinations are accepted.
Entered a destination that is not accepted by Umbrella.	Invalid destination.	A generic error message. Entered a destination that is not accepted by Umbrella. * You have encountered an error condition that is not categorized by Umbrella. We recommend that you contact support.
Entered a CIDR block that is not the correct size.	CIDR is too large! The network mask must not be less than /8 (32 million IP addresses) which is the minimum number of bits allowed. Please enter a larger network mask.	* /8 is too much for one destination list.
Entered a destination that matches a destination in an existing destination list.	This destination already exists in following list.	* Umbrella does not add a destination that already appears in a destination list.

Test Your Destinations < Troubleshoot Destination Lists > Manage the Cisco Umbrella Root Certificate