Page 53 - CSEW

Cisco Umbrella - On-network: simple

to point external DNS without clients

DHCP server DNS server Virtual appliance
Simple for locations Simple for locations that Best for locations that want
without internal domains manage internal domains granular control & visibility

Umbrella @ 208.67.222.222 Umbrella @ 208.67.222.222 Internal Umbrella
Enforce policy for public Enforce policy for public domains & Encrypt EDNS w/embedded ID
network ID @ 8.2.0.1 network ID @ 8.2.0.1 updates enforce policy for internal IP

Gateway No internal Gateway DNS server Gateway DNS server
@ 8.2.0.1 DNS server @ 8.2.0.1 @ 10.1.0.1 @ 8.2.0.1 @ 10.1.0.1

DHCP’s DNS = DHCP’s DNS = External DNS = DHCP’s DNS =
208.67.222.222 10.1.0.1 208.67.222.222 10.1.0.2

Any device Any device Umbrella VA no Any device
@ 10.1.2.2 @ 10.1.2.2 @ 10.1.0.2 NAT @ 10.1.2.2
or
Internal DNS = proxy
10.1.0.1

© 2016 Engage ESM All Rights Reserved 59