Question

A company wants to enforce Cisco Umbrella DNS-layer security for laptops that frequently leave the corporate network, and also wants to preserve the internal client IP address in Umbrella reports for on-network desktops that use internal DNS servers. Which combination of Umbrella components should the administrator deploy to meet BOTH requirements?

Accepted Answer

Deploy the Umbrella roaming security module (Cisco Secure Client) on laptops and deploy Umbrella Virtual Appliances (VAs) as the internal DNS forwarders for on-network desktops

Answer

Point all corporate DNS servers directly at Umbrella resolvers and rely on network-based identities only

Answer

Deploy the Umbrella roaming security module on all devices and disable internal DNS servers entirely

Answer

Configure a SIG IPsec tunnel from the perimeter firewall and use the AD Connector for all user identity