Cisco Security

Login

Cisco Umbrella for Managed Services User Guide

Cisco Umbrella for Managed Services User Guide
- Welcome to Cisco Umbrella for Managed Services
  - Navigate the Managed Services Console for MSPs
    - Centralized Reports
      - Notifications
    - Centralized Settings
    - Customer Management
      - Searching for Customers
    - Settings
      - Partner Resources
  - Navigate the Managed Services Console for MSSPs
    - Determine Licensing and Add Customers
    - Centralized Reports
      - Notifications
      - Customers
      - Trials
      - Download Customer and Trial Information
      - Filters
      - Searching for Customers and Trials
- Customer Management
  - Download Customer Information
  - Add a New Customer
    - Add a New Account for MSPs
    - Add a New Account for MSSPs
      - Create a New Account with a Deal ID
      - Create a New Account without a Deal ID
      - Create a New Account with MSLA Licensing
    - Add a New Account for Secure MSP Center
  - Update Customer Information
    - Update Customer Information for MSPs
    - Update Customer Information for MSSPs
    - Update Customer Information for Secure MSP Center
  - Access a Customer's Umbrella Dashboard
  - Reset a Customer Password
  - Delete a Customer
- Managing Customer Trials
  - Start a New Term Trial
  - Start a New Term Trial with a Deal ID
  - Start a New Term Trial without a Deal ID
  - Start a New MSLA Trial
  - Start a New MSLA Trial
  - Start a New Trial for Secure MSP Center
  - Start a New SIG Trial
    - Before You Begin
    - Start a New SIG Trial
  - Convert a Trial to a Subscription
  - Convert a Trial to a Term Customer
  - Convert a Trial to an MSLA Customer
  - Start a New Trial—I Have a Deal ID
    - Prerequisites
    - Procedure
  - Start a New Trial—I Don't Have a Deal ID
    - Prerequisites
    - Procedure
  - Update Trial Information
  - Delete a Trial
  - Extend a Trial
  - Access a Trial Umbrella Dashboard
  - Reset a Trial Password
  - Enable Trial Log Management
- Monitor Customers through Centralized Reports
  - Data Warehouse Locations
  - Overview Report
    - Notifications
    - Deployment and Health Statuses
      - Organization Deployment Health
      - Total Deployment Health
    - Total Requests
    - Security Activity
  - Deployment Status Report
    - Deployment and Health Statuses
      - Organization Deployment Health
      - Total Deployment Health
    - Organizations
  - Security Summary Report
    - Understand the Security Summary Report
      - Organizations
      - Categories
      - Destinations
    - Download the Security Summary Report
- Configure Centralized Settings
  - Access Centralized Settings and the Overview Page
  - Configure Destination Lists
    - Bulk Upload
  - Configure Block Pages
  - Configure Content Settings
  - Configure Security Settings
  - Configure Custom Integrations
  - Configure Advanced Settings
- Settings
  - Log In to Umbrella Managed Services Console
    - Users who belong to an Umbrella MSSP
    - Users who do not belong to an Umbrella MSSP
  - Add a New Administrator
    - Delegated Administration
  - Invite an Administrator from Another Organization
  - Create a Global Read Only Administrator
  - Update Billing Contact Information
  - Add Support Contact
  - Manage Licensing
  - Add Your Logo to the Managed Services Console
  - Create a Branded Login Page
    - Prerequisites
  - Integrate a PSA
    - Add a New PSA Integration
    - Delete a PSA Integration
- Manage Logs
  - Set up an Amazon S3 Bucket
    - JSON Bucket Policy
  - Enable Logging to Your Own S3 Bucket
    - Prerequisites
    - Enable Logging
  - Enable Logging to a Cisco-managed S3 Bucket
    - Prerequisites
    - Download Files From the S3 Bucket Locally
  - Change the Location of Event Data Logs
    - Implications When You Change Data Warehouse Locations
    - Log Retention
    - Prerequisites
    - Change Data Warehouse Locations
  - Stop Logging
    - Prerequisites
    - Stop Logging
  - Delete Logs
    - Prerequisites
    - Delete Logs
Getting Started with Cisco Umbrella
- Add a Network Identity to Protect Your Customer's Network
  - Step 1 – Select the Appropriate Network
  - Step 2 – Add a Network Identity
    - Dynamic IP Address—IPv4 Only
  - Delete a Network Identity
- Point DNS to Cisco Umbrella
  - Step 1 – Find out where your public DNS server addresses are configured
  - Step 2 – Log into the server or router where DNS is configured
  - Step 3 – Change your DNS server addresses
  - Step 4 – Test your new DNS settings
- Manage the Cisco Umbrella Root Certificate
  - Install the Cisco Umbrella Root Certificate
    - Automatically Install the Cisco Umbrella Root Certificate (For an Active Directory Network)
      - Install the Cisco Umbrella Root Certificate with Group Policy Using the Microsoft Management Console (MMC)
      - Install the Cisco Umbrella Root Certificate with Group Policy Using the Group Policy Management Console (GPMC)
      - Install the Cisco Umbrella Root Certificate in Firefox Using Group Policy
      - Install the Cisco Umbrella Root Certificate on Chromebooks Using the Google Admin Console
    - Manually Install the Cisco Umbrella Root Certificate (Single Computer)
      - Install the Cisco Umbrella Root Certificate in Internet Explorer, Edge, or Chrome on Windows
      - Install the Cisco Umbrella Root Certificate in Firefox on Windows
      - Install the Cisco Umbrella Root Certificate in All Browsers on Mac OS X
      - Install the Cisco Umbrella Root Certificate on Mac OS X Through the Command Line
      - Install the Cisco Umbrella Root Certificate in Chromium or Chrome on Linux
- Extend Enforcement
  - How is Enforcement Extended Off-network?
  - Why Use the Umbrella Roaming Client?
- Create and Apply Policies
  - Create a New Policy
    - Advanced Settings
    - Security Settings
    - Content Settings
    - Destination Lists
    - Block Pages
      - Bypass Users
      - Bypass Codes
  - Review and Save Your Policy
- Enable the Intelligent Proxy
  - Best practices and additional requirements
    - Requirements and Implementation
  - Enable the intelligent proxy
  - What is the Intelligent Proxy?
    - Advantages of using the Intelligent Proxy
    - Sites that are not proxied by the intelligent proxy
      - Can I request or add domains to be proxied by the Intelligent Proxy?
    - Configuring the Intelligent Proxy to handle HTTPS traffic
  - Testing the Intelligent Proxy
  - Reporting and the Intelligent Proxy
  - Enable SSL Decryption
    - Testing SSL Decryption
    - What is being decrypted and proxied?
Roaming Client Deployment Guide
- Introduction
  - How Does It Work?
  - What are the Benefits of the Umbrella Roaming Client?
  - VPN Support
  - Antivirus and Endpoint Security Software Support
  - Prerequisites
    - Supported Operating Systems
    - Unsupported Operating Systems
    - Network Access
      - Host Names
      - DNS
        
        Encryption (Optional)
      - HTTP and HTTPS
    - Windows Operating System
    - Software
    - Internal Domains
- Manual Deployment
  - Download the Umbrella Roaming Client
  - Install the Umbrella Roaming Client
- Automated Deployment
  - Acquire Deployment Parameters
  - Distributed or Automated Installation with ARD
- Verify Roaming Client Operation
  - Verify on the Target Computer
  - Verify Success Using Umbrella
    - Admin Audit Log
    - Roaming Computers Page
- Status, States, and Functionality
  - Status in the Umbrella Dashboard
  - Roaming Client Information Listed in the Umbrella Dashboard
    - Tray Icon Status
      - Status Indicators
    - Probes
      - Encrypted Probe
      - Unencrypted Probe
    - Advanced: Network Access per Service
    - Advanced: How the Umbrella Roaming Client Changes States
- Virtual Appliances
  - Behavior
- Troubleshooting
  - Did the Umbrella Roaming Client not Install?
  - Unable to Resolve Internal Resources
  - Failed Installations
  - Unregistered Umbrella Roaming Clients
  - Unprotected/Unencrypted
  - Switching States or Statuses Frequently (Flapping)
  - Logs
  - Diagnostic Tool
- Domain Management
  - Domain Management
    - DNS Suffixes
  - Operational Flowchart
    - Internal Domains
    - External Queries
    - Internal Queries
  - Advanced Topics
    - Unencrypted
    - Virtual Appliances
    - DHCP/Static DNS Servers
- Roaming Computers Settings
  - Umbrella Roaming Client Tab
  - AnyConnect Roaming Client Tab

Getting Started with Cisco Umbrella Manage the Cisco Umbrella Root Certificate Install the Cisco Umbrella Root Certificate Automatically Install the Cisco Umbrella Root Certificate (For an Active Directory Network) Install the Cisco Umbrella Root Certificate in Firefox Using Group Policy

Last updated: Nov 21, 2025

Previous topic Install the Cisco Umbrella Root Certificate with Group Policy Using the Group Policy Management Console (GPMC) Next topic Install the Cisco Umbrella Root Certificate on Chromebooks Using the Google Admin Console