Cisco Security

Login

Cisco Umbrella for Managed Services User Guide

Cisco Umbrella for Managed Services User Guide
- Welcome to Cisco Umbrella for Managed Services
  - Navigate the Managed Services Console for MSPs
    - Centralized Reports
      - Notifications
    - Centralized Settings
    - Customer Management
      - Searching for Customers
    - Settings
      - Partner Resources
  - Navigate the Managed Services Console for MSSPs
    - Determine Licensing and Add Customers
    - Centralized Reports
      - Notifications
      - Customers
      - Trials
      - Download Customer and Trial Information
      - Filters
      - Searching for Customers and Trials
- Customer Management
  - Download Customer Information
  - Add a New Customer
    - Add a New Account for MSPs
    - Add a New Account for MSSPs
      - Create a New Account with a Deal ID
      - Create a New Account without a Deal ID
      - Create a New Account with MSLA Licensing
    - Add a New Account for Secure MSP Center
  - Update Customer Information
    - Update Customer Information for MSPs
    - Update Customer Information for MSSPs
    - Update Customer Information for Secure MSP Center
  - Access a Customer's Umbrella Dashboard
  - Reset a Customer Password
  - Delete a Customer
- Managing Customer Trials
  - Start a New Term Trial
  - Start a New Term Trial with a Deal ID
  - Start a New Term Trial without a Deal ID
  - Start a New MSLA Trial
  - Start a New MSLA Trial
  - Start a New Trial for Secure MSP Center
  - Start a New SIG Trial
    - Before You Begin
    - Start a New SIG Trial
  - Convert a Trial to a Subscription
  - Convert a Trial to a Term Customer
  - Convert a Trial to an MSLA Customer
  - Start a New Trial—I Have a Deal ID
    - Prerequisites
    - Procedure
  - Start a New Trial—I Don't Have a Deal ID
    - Prerequisites
    - Procedure
  - Update Trial Information
  - Delete a Trial
  - Extend a Trial
  - Access a Trial Umbrella Dashboard
  - Reset a Trial Password
  - Enable Trial Log Management
- Monitor Customers through Centralized Reports
  - Data Warehouse Locations
  - Overview Report
    - Notifications
    - Deployment and Health Statuses
      - Organization Deployment Health
      - Total Deployment Health
    - Total Requests
    - Security Activity
  - Deployment Status Report
    - Deployment and Health Statuses
      - Organization Deployment Health
      - Total Deployment Health
    - Organizations
  - Security Summary Report
    - Understand the Security Summary Report
      - Organizations
      - Categories
      - Destinations
    - Download the Security Summary Report
- Configure Centralized Settings
  - Access Centralized Settings and the Overview Page
  - Configure Destination Lists
    - Bulk Upload
  - Configure Block Pages
  - Configure Content Settings
  - Configure Security Settings
  - Configure Custom Integrations
  - Configure Advanced Settings
- Settings
  - Log In to Umbrella Managed Services Console
    - Users who belong to an Umbrella MSSP
    - Users who do not belong to an Umbrella MSSP
  - Add a New Administrator
    - Delegated Administration
  - Invite an Administrator from Another Organization
  - Create a Global Read Only Administrator
  - Update Billing Contact Information
  - Add Support Contact
  - Manage Licensing
  - Add Your Logo to the Managed Services Console
  - Create a Branded Login Page
    - Prerequisites
  - Integrate a PSA
    - Add a New PSA Integration
    - Delete a PSA Integration
- Manage Logs
  - Set up an Amazon S3 Bucket
    - JSON Bucket Policy
  - Enable Logging to Your Own S3 Bucket
    - Prerequisites
    - Enable Logging
  - Enable Logging to a Cisco-managed S3 Bucket
    - Prerequisites
    - Download Files From the S3 Bucket Locally
  - Change the Location of Event Data Logs
    - Implications When You Change Data Warehouse Locations
    - Log Retention
    - Prerequisites
    - Change Data Warehouse Locations
  - Stop Logging
    - Prerequisites
    - Stop Logging
  - Delete Logs
    - Prerequisites
    - Delete Logs
Getting Started with Cisco Umbrella
- Add a Network Identity to Protect Your Customer's Network
  - Step 1 – Select the Appropriate Network
  - Step 2 – Add a Network Identity
    - Dynamic IP Address—IPv4 Only
  - Delete a Network Identity
- Point DNS to Cisco Umbrella
  - Step 1 – Find out where your public DNS server addresses are configured
  - Step 2 – Log into the server or router where DNS is configured
  - Step 3 – Change your DNS server addresses
  - Step 4 – Test your new DNS settings
- Manage the Cisco Umbrella Root Certificate
  - Install the Cisco Umbrella Root Certificate
    - Automatically Install the Cisco Umbrella Root Certificate (For an Active Directory Network)
      - Install the Cisco Umbrella Root Certificate with Group Policy Using the Microsoft Management Console (MMC)
      - Install the Cisco Umbrella Root Certificate with Group Policy Using the Group Policy Management Console (GPMC)
      - Install the Cisco Umbrella Root Certificate in Firefox Using Group Policy
      - Install the Cisco Umbrella Root Certificate on Chromebooks Using the Google Admin Console
    - Manually Install the Cisco Umbrella Root Certificate (Single Computer)
      - Install the Cisco Umbrella Root Certificate in Internet Explorer, Edge, or Chrome on Windows
      - Install the Cisco Umbrella Root Certificate in Firefox on Windows
      - Install the Cisco Umbrella Root Certificate in All Browsers on Mac OS X
      - Install the Cisco Umbrella Root Certificate on Mac OS X Through the Command Line
      - Install the Cisco Umbrella Root Certificate in Chromium or Chrome on Linux
- Extend Enforcement
  - How is Enforcement Extended Off-network?
  - Why Use the Umbrella Roaming Client?
- Create and Apply Policies
  - Create a New Policy
    - Advanced Settings
    - Security Settings
    - Content Settings
    - Destination Lists
    - Block Pages
      - Bypass Users
      - Bypass Codes
  - Review and Save Your Policy
- Enable the Intelligent Proxy
  - Best practices and additional requirements
    - Requirements and Implementation
  - Enable the intelligent proxy
  - What is the Intelligent Proxy?
    - Advantages of using the Intelligent Proxy
    - Sites that are not proxied by the intelligent proxy
      - Can I request or add domains to be proxied by the Intelligent Proxy?
    - Configuring the Intelligent Proxy to handle HTTPS traffic
  - Testing the Intelligent Proxy
  - Reporting and the Intelligent Proxy
  - Enable SSL Decryption
    - Testing SSL Decryption
    - What is being decrypted and proxied?
Roaming Client Deployment Guide
- Introduction
  - How Does It Work?
  - What are the Benefits of the Umbrella Roaming Client?
  - VPN Support
  - Antivirus and Endpoint Security Software Support
  - Prerequisites
    - Supported Operating Systems
    - Unsupported Operating Systems
    - Network Access
      - Host Names
      - DNS
        
        Encryption (Optional)
      - HTTP and HTTPS
    - Windows Operating System
    - Software
    - Internal Domains
- Manual Deployment
  - Download the Umbrella Roaming Client
  - Install the Umbrella Roaming Client
- Automated Deployment
  - Acquire Deployment Parameters
  - Distributed or Automated Installation with ARD
- Verify Roaming Client Operation
  - Verify on the Target Computer
  - Verify Success Using Umbrella
    - Admin Audit Log
    - Roaming Computers Page
- Status, States, and Functionality
  - Status in the Umbrella Dashboard
  - Roaming Client Information Listed in the Umbrella Dashboard
    - Tray Icon Status
      - Status Indicators
    - Probes
      - Encrypted Probe
      - Unencrypted Probe
    - Advanced: Network Access per Service
    - Advanced: How the Umbrella Roaming Client Changes States
- Virtual Appliances
  - Behavior
- Troubleshooting
  - Did the Umbrella Roaming Client not Install?
  - Unable to Resolve Internal Resources
  - Failed Installations
  - Unregistered Umbrella Roaming Clients
  - Unprotected/Unencrypted
  - Switching States or Statuses Frequently (Flapping)
  - Logs
  - Diagnostic Tool
- Domain Management
  - Domain Management
    - DNS Suffixes
  - Operational Flowchart
    - Internal Domains
    - External Queries
    - Internal Queries
  - Advanced Topics
    - Unencrypted
    - Virtual Appliances
    - DHCP/Static DNS Servers
- Roaming Computers Settings
  - Umbrella Roaming Client Tab
  - AnyConnect Roaming Client Tab

Cisco Umbrella for Managed Services User Guide Manage Logs Change the Location of Event Data Logs Implications When You Change Data Warehouse Locations

Last updated: Nov 21, 2025

Previous topic Change the Location of Event Data Logs Next topic Log Retention