Question

A network administrator wants Cisco Umbrella to apply different web policies based on Active Directory user and group identity for on-premises devices, without prompting users for credentials or installing an agent on every endpoint. The organization already uses Windows domain-joined workstations behind a network egress that forwards DNS to Umbrella. Which combination correctly enables transparent user identification for policy enforcement?

Accepted Answer

Deploy the Umbrella Active Directory (AD) Connector and AD Connector components with the Virtual Appliances to map users and groups to internal IPs

Answer

Enable SAML authentication on the Umbrella dashboard so users are redirected to an IdP login page for every DNS request

Answer

Install the Cisco Secure Client Umbrella Roaming Security module on each endpoint to tag DNS queries with the logged-in username

Answer

Configure a RADIUS proxy identity so Umbrella queries the domain controller for each connection attempt