Install the Root Certificate

To successfully enable HTTPS inspection for Web policies, SSL decryption for DNS policies, or to render a block page correctly when an identity attempts to visit a blocked HTTPS website, a root certificate must be installed in all browsers on all of your managed devices. See Manage Certificates.

For Web policies, to take full advantage of the feature set available to Umbrella's secure web gateway (SWG) you must enable HTTPS inspection. If you do not enable HTTPS inspection, Umbrella cannot perform file inspection, URL matching, advanced application controls, or provide URL level visibility for HTTPS transactions.

For both Web and DNS policies, for Umbrella to properly display a block page a root certificate must be installed for all browsers. When an identity visits a blocked HTTPS website, even without HTTPS inspection or SSL decryption enabled, Umbrella will not downgrade the HTTPS protocol to HTTP when serving a block page. Therefore, if a root certificate is not installed the web browser will not properly display the block page.

Steps to perform this installation procedure vary based on the operating system, browser type, and policy types. For more information and procedures, see Manage Certificates.

---

Enable the Umbrella SWG Agent < Install the Root Certificate > IPv4 and IPv6 DNS Protection Status