• Skip to primary navigation
  • Skip to main content
  • Skip to footer

Cisco Umbrella

Enterprise network security

  • Free Trial
  • Contact us
  • Blog
  • Login
    • Umbrella Login
    • Cloudlock Login
  • Products
    • Product
      • Cisco Umbrella Cloud Security Service
      • Cisco Umbrella Investigate
      • Product Packages
      • Support Packages
    • Functionality
      • DNS-Layer Security
      • Secure Web Gateway
      • Cloud Access Security Broker (CASB)
      • Interactive Intelligence
      • Cloud-Delivered Firewall
    •  
    • Webinar signup
  • Solutions
    • By Need
      • Protect Mobile Users
      • Fast Incident Response
      • Web Content Filtering
      • Shadow IT Discovery & App Blocking
      • Unified Threat Enforcement
      • Reduce Security Infections
      • Secure Direct Internet Access
      • Securing Remote and Roaming Users
    • By Network
      • Protect Guest Wi-Fi
      • SD-WAN Security
      • Off-Network Endpoint Security
    • By Industry
      • Higher Education Security
      • K-12 Schools Security
      • Healthcare, Retail and Hospitality Security
      • Enterprise Cloud Security
      • Small Business Cybersecurity
      • Our Customers
      • Customer Stories
    • Ransomware Defense for Dummies book
  • Why Us
    • Fast Reliable Cloud
      • Global Cloud Architecture
      • Cloud Network Status
      • Cloud Network Activity
      • Recursive DNS Services
      • Top Reasons to Trial
      • Getting Started
    • Unmatched Intelligence
      • Cyber Attack Prevention
      • Interactive Intelligence
    • Extensive Integrations
      • IT Security Integrations
      • Hardware Integrations
      • Meraki Integration
      • Cisco SD-WAN
    • Navigation-dropdown-promo-free-trial_102820
  • Resources
    • Content Library
      • Top Resources
      • Cybersecurity Webinars
      • Events
      • Analyst Reports
      • Case Studies
      • Customer Videos
      • Datasheets
      • eBooks
      • Infographics
      • Solution Briefs
    • International Documents
      • Deutsch/German
      • Español/Spanish
      • Français/French
      • Italiano/Italian
      • 日本語/Japanese
    • Cisco Umbrella Blog
      • Latest Posts
      • Security Posts
      • Research Posts
      • Threats Posts
      • Product Posts
      • Spotlight
    • For Customers
      • Support
      • Customer Success Hub
      • Umbrella Deployment Hub
      • Customer Success Webinars
      • What’s New
      • Cisco Umbrella Studio
  • Trends & Threats
    • Market Trends
      • Rise of Remote Workers
      • Secure Internet Gateway (SIG)
      • Secure Access Service Edge (SASE)
    • Security Threats
      • Ransomware
      • Cryptomining Malware Protection
      • Cybersecurity Threat Landscape
    •  
    • Navigation-dropdown-promo-threat-report_020521
  • Partners
    • Channel Partners
      • Partner Program
      • Become a Partner
    • Service Providers
      • Secure Connectivity
      • Managed Security for MSSPs
      • Managed IT for MSPs
    •  
    • Become a partner
  • Free Trial Signup
  • Umbrella Login
  • Cloudlock Login
  • Contact Us
Product

Now available: EfficientIP and Cisco Umbrella Integration

By Chris Riviere
Posted on May 8, 2019
Updated on March 24, 2020

Share

Facebook0Tweet0LinkedIn0

You may have seen some recent announcements on the Umbrella Network Device API. What’s really cool about this new API, is that it can make pointing DNS to Umbrella even easier while at the same time providing additional attribution. Just take a look at the recent integration we did with Meraki, which enables easy and fast Umbrella deployment across a wireless network. You can point thousands of Cisco Meraki MRs to Umbrella in a matter of minutes and get additional functionality such as encryption of DNS traffic from the MR to Umbrella, attribution down to SSID, and even private IP!

I’m happy to announce that one of our technology partners, EfficientIP, has recently done something similar leveraging this same Network Device API. I was fortunate enough to attend Efficient IP’s APAC partner kickoff event last month in Bangkok, Thailand where this new integration was discussed in detail.

This integration enables a few key capabilities:

  • Allows EfficientIP and Umbrella customers to instantly point DNS to Umbrella providing rock solid DNS resolution and a first line of security against threats
  • Instantly provides privacy/security by encrypting all the DNS queries from the EfficientIP appliance to the Umbrella resolvers
  • Allows for more specific attribution such as the private IP address of devices behind the EfficientIP appliance

I like to look at this simply as a way of providing most of the functionality of a virtual appliance without having to deploy one!

Check out how easy it is to deploy below:

1. Link Accounts
In the Umbrella dashboard, copy your API key and Secret key.

2. In a text editor, prepare the following line:
/usr/local/nessy2/script/umbrella_setup <key> <secret> <device_hostname>
Where key, and secret key are from the Umbrella Dashboard. The device_hostname is the device that will appear in the Umbrella Network devices list.

3. Paste this line in the following locations via SSH session to Solidserver:

    • /data1/etc/namedb/global_include.conf
    • /data1/etc/namedb/options_include.conf after the line
      listen-on { !127.0.1.0/24; any ; };
    • /etc/rc.conf
      • Change dnscrypt_proxy_enable=”YES”
      • Add the following as the last line in the file:
        ifconfig_lo0_alias53=”inet 127.0.1.53 netmask 255.0.0.0”

4. Login to Solidserver UI
Go to (1) DNS (2) Servers (3) Select the appropriate caching DNS server.
Right click the Solidserver DNS and click properties.

5. Click the Edit button under the forwarding tab

6. On the pop up window, click Only under Forwarder Mode.
Type 127.0.1.53 under Forwarder IP.
Click Add.
Click OK once.

7. Click the administration tab and reboot the appliance.

8. You will see the successful registration of the Solidserver in the Umbrella portal.

9. All external DNS queries can be observed through the Umbrella portal with additional attribution under activity report.

You’ll see this includes the name of the EfficientIP appliance, the DNS query being made, and the internal IP which made the request.

You can learn more about this integration on EfficientIP’s Umbrella integration page.

Previous Post:

Previous Article

Next Post:

Next Article

Follow Us

  • Twitter
  • Facebook
  • LinkedIn
  • YouTube

Footer Sections

What we make

  • Cloud Security Service
  • DNS-Layer Network Security
  • Secure Web Gateway
  • Security Packages

Who we are

  • Global Cloud Architecture
  • Cloud Network Status
  • Cloud Network Activity
  • OpenDNS is now Umbrella
  • Cisco Umbrella Blog

Learn more

  • Webinars
  • Careers
  • Support
  • Cisco Umbrella Live Demo
  • Contact Sales
Umbrella by Cisco
208.67.222.222+208.67.220.220
2620:119:35::35+2620:119:53::53
Sign up for a Free Trial
  • Cisco Online Privacy Statement
  • Terms of Service
  • Sitemap

© 2021 Cisco Umbrella