Introduction

Cisco Umbrella for MSPs User Guide

Cisco Umbrella for MSPs User Guide
- Welcome to Cisco Umbrella for MSPs
  - Navigate the MSP Console
    - Centralized Reports
      - Notifications
    - Centralized Settings
    - Customer Management
      - Searching for Customers
    - MSP Settings
- Manage MSP Customers
  - Add a New Customer
  - Update Customer Information
  - Access a Customer's Umbrella Dashboard
  - Delete a Customer
- Manage Centralized Settings
  - Access Centralized Settings and the Overview Page
  - Configure Destination Lists
    - Bulk Upload
  - Configure Block Pages
  - Configure Content Settings
  - Configure Security Settings
  - Configure Advanced Settings
- Manage Centralized Reports
  - Data Warehouse Locations
  - Overview Report
    - Notifications
    - Deployment and Health Statuses
      - Organization Health
      - Total Deployment Health
    - Total Requests
    - Security Activity
  - Deployment Status Report
    - Deployment and Health Statuses
      - Organization Health
      - Total Deployment Health
    - Organizations
  - Security Summary Report
    - Understand the Security Summary Report
      - Organizations
      - Categories
      - Destinations
    - Download the Security Summary Report
- Manage MSP Settings
  - Add a New Administrator
    - Delegated Administration
    - Procedure
  - Invite an Administrator from Another Organization
  - Create a Global Read Only Administrator
  - Update Billing Contact
  - Update Umbrella Support Contact
  - Add Your Logo to the MSP Console
  - Create a Branded Login Page
    - Prerequisites
    - Procedure
  - Integrate a PSA
    - Delete a PSA Integration
- Manage Logs
  - Logging to Umbrella's Data Warehouse
  - Change the Location of Event Data Logs
    - Implications When You Change Data Warehouse Locations
    - Log Retention
    - Prerequisites
    - Change Data Warehouse Locations
Getting Started with Cisco Umbrella
- Add a Network Identity to Protect Your Customer's Network
  - Step 1 – Select the Appropriate Network
  - Step 2 – Add a Network Identity
  - Delete a Network Identity
- Point DNS to Cisco Umbrella
  - Step 1 – Find out where your public DNS server addresses are configured
  - Step 2 – Log into the server or router where DNS is configured
  - Step 3 – Change your DNS server addresses
  - Step 4 – Test your new DNS settings
- Manage the Cisco Umbrella Root Certificate
  - Why Install a Certificate?
  - Install the Cisco Umbrella Root Certificate
    - Automatically Install the Cisco Umbrella Root Certificate (For an Active Directory Network)
      - Install the Cisco Umbrella Root Certificate with Group Policy Using the Microsoft Management Console (MMC)
        
        Install the Cisco Umbrella Root Certificate with Group Policy Using the Group Policy Management Console (GPMC)
      - Install the Cisco Umbrella Root Certificate in Firefox Using Group Policy
      - Install the Cisco Umbrella Root Certificate on Chromebooks Using the Google Admin Console
    - Manually Install the Cisco Umbrella Root Certificate (Single Computer)
      - Install the Cisco Umbrella Root Certificate in Internet Explorer, Edge, or Chrome on Windows
      - Install the Cisco Umbrella Root Certificate in Firefox on Windows
      - Install the Cisco Umbrella Root Certificate in All Browsers on Mac OS X
      - Install the Cisco Umbrella Root Certificate on Mac OS X Through the Command Line
      - Install the Cisco Umbrella Root Certificate in Chromium or Chrome on Linux
- Create and Apply Policies
  - 1. Create a New Policy
    - Advanced Settings
  - 2. Configure Security Settings
  - 3. Configure Content Settings
  - 4. Select Destination Lists
  - 5. Configure Block Pages
    - Bypass Users
    - Bypass Codes
  - 6. Review and Save Your Policy
- Manage the Intelligent Proxy
  - What is the Intelligent Proxy?
    - Advantages of using the Intelligent Proxy
    - Sites that are not proxied by the intelligent proxy
      - Can I request or add domains to be proxied by the Intelligent Proxy?
    - Configuring the Intelligent Proxy to handle HTTPS traffic
  - Enable the Intelligent Proxy
  - Test the Intelligent Proxy
  - Reporting and the Intelligent Proxy
  - Enable SSL Decryption
    - Testing SSL Decryption
    - What is being decrypted and proxied?
Roaming Client Deployment Guide
- Introduction
  - What is the Umbrella Roaming Client?
  - How Does It Work?
  - What are the Benefits of the Umbrella Roaming Client?
  - Does It Work With VPNs?
  - Can I Still Run Antivirus and Endpoint Security Software?
  - I'd Like to Know More About the Umbrella Roaming Client, Where do I Look?
  - Questions?
  - Prerequisites
    - Supported Operating Systems
    - Unsupported Operating Systems
    - Network Access
      - DNS
        
        Encryption (Optional)
      - HTTP and HTTPS
    - Software
    - Internal Domains
- Manual Deployment
  - Single Machine or Manual Installation
  - Download the Umbrella Roaming Client
  - Installing the Umbrella Roaming Client
- Automated Deployment
  - Deployment Parameters
  - Distributed or Automated Installation with Apple Remote Desktop
- Verify Operation
  - Verify on Target Computer
  - Verify in the Umbrella Dashboard
    - Admin Audit Log
    - Roaming Computers Page
- Status, States, and Functionality
  - Status In the Umbrella Dashboard
  - Roaming Client Information Listed in the Umbrella Dashboard
  - Tray Icon Status
  - Advanced: Network Access per Service
  - Advanced: How the Umbrella Roaming Client Changes States
- Virtual Appliances
  - Virtual Appliances and the Umbrella Roaming Client
    - Behavior
- Troubleshooting
  - Common Issues and Troubleshooting
    - Did the Umbrella Roaming Client not Install?
    - Unable to Resolve Internal Resources
    - Failed Installations
    - Unregistered Umbrella Roaming Clients
    - Unprotected/Unencrypted
    - Switching states or statuses frequently (flapping)
  - Logs
  - Diagnostic Tool
- Domain Management
  - Internal Domains
  - DNS Suffixes (Windows Only)
  - Operational Flowchart
    - Internal Domains
    - External Queries
    - Internal Queries
  - Advanced Topics
    - Unencrypted
    - Virtual Appliances
    - DHCP/Static DNS Servers
    - DNS Suffixes (Continued)
- Roaming Computers Settings
RMM Deployment Guide
- Introduction
  - Remote Monitoring and Management Solutions
- Datto RMM
- Overview
- ConnectWise Command
  - Procedure
    - Create the Installer
    - Create a Job
    - Confirm Deployment
- N-able
- NinjaOne
  - Procedure
    - Confirm Deployment
- Kaseya
  - Select and Download Cisco Secure Client Components
  - Upload the new combined Zip file to the KVSA RMM server
- Optional Parameters
- Uninstall Scripts
- ConnectWise Automate
- Overview
- Deployment Procedure of Cisco Secure Client 5.0 using ConnectWise (Automate) RMM scripts
  - Select and Download Cisco Secure Client Components
  - Copying files from Cisco Secure Client into ConnectWise Server Share
  - Changes needed in "CW Install Cisco Secure Client"
- Optional Parameters
- Uninstall Scripts
Getting Started with Easy Protect
- Introduction
  - Getting Started
- Manage Easy Protect
  - 1. Manually Add a Network Identity
  - 2. Point Your Customer's DNS To Cisco Umbrella
  - Manage Licenses
- Manage Policies
  - Change Default Policy
  - Add a New Policy
    - 1. Select Networks to Protect
      - Advanced Settings
    - 3. Select Destination Lists
    - 4. Configure Block Pages
    - 5. Review and Save Your Policy

Roaming Client Deployment Guide Introduction

Last updated: Dec 09, 2025

Previous topic What is being decrypted and proxied? Next topic What is the Umbrella Roaming Client?