The Umbrella User Guide Developer Hub

Welcome to the Umbrella User Guide developer hub. You'll find comprehensive guides and documentation to help you start working with Umbrella User Guide as quickly as possible, as well as support if you get stuck. Let's jump right in!

Get Started    

Top Destinations Report

The Top Destinations report is a list of the top domains visited by DNS and firewall requests for your Umbrella organization over the selected period. It is filterable, schedulable, and you can export the results to a CSV file.

View the Top Destinations Report

  1. Navigate to Reporting > Additional Reports > Top Destinations.
    The report displays a chart of the most visited destinations with filters to the left.

    Report Fields

    • Destination—The domain.
    • Category—The category, such as Malware, Business Services, Phishing, and so on. To see a full list of categories, see DNS Security Categories, DNS Content Category Settings, and Application Categories.
    • Allowed—The number of requests to that destination that were allowed.
    • Blocked—The number of requests to that destination that were blocked.
    • Requests—The number of requests for the domain for the selected period.
  2. Choose a time frame to view the Destination Report.
    The Destination Report can be filtered by the last 24 hours, yesterday, last 7 days, last 30 days, or a custom range within the last 30 days.
  1. Choose whether to view results for all types of traffic, DNS only, Proxy only, or IP only.
    By default, All is selected.
  1. Filter results by the response type.
    Select Allowed, Blocked, Proxied, or Blocked: Destination List. By default, nothing is selected, so all responses are shown.
  1. Filter by specific identity types and click Apply.

Alternatively, if you are looking for a specific identity to filter your results, enter it in the search bar. You can also filter by a specific domain.

  1. Filter by specific security categories and click Apply.
    For more information about security categories, see DNS Security Category Definitions.
  1. Filter by specific content categories and click Apply.
    For a full list of content categories, see DNS Content Category Settings and Web Content Category Settings.

Alternatively, checking Show Uncategorized will deselect all security and content categories and only display requests not matching any category.

  1. Choose to optionally filter results by search options.
    • Include All Traffic—Includes data from all domains including noisy domains that are filtered out by default.
    • Combine Subdomains—Combines all subdomain requests from a parent domain and lists the combined requests under the parent domain.

Once you have chosen applicable filters, the report updates to reflect the data narrowed by those filters.

View Further Details

Clicking on any destination in the report table will redirect you to the Destination Details for that domain.


Activity Volume Report < Top Destinations Report > Destination Details

Updated 6 days ago

Top Destinations Report


Suggested Edits are limited on API Reference Pages

You can only suggest edits to Markdown body content, but not to the API spec.