Cisco Umbrella is a cloud security platform that provides the first line of defense against threats on the Internet. Being able to understand and position how Cisco Umbrella works and what are the features is the key focus of this 3-day Cisco online IT class. Students who enter the course with a basic understanding of Cisco products and IT solutions will be able to describe the Cisco Umbrella, understand Secure Internet Gateway and Ransomware Protection, discuss Threat Intelligence, and use Cisco Roaming Client. Sign up with EnterOne to get access to this Cisco online training course today.
The course qualifies for 18 Cisco Continuing Education Credits (CE).
Skills Gained
Upon successful completion of this course, the learner will gain the following knowledge:
- How to describe and position Cisco Umbrella
- Discuss Secure Internet Gateway and Ransomware Protection
- Learn about DNS & IP layer enforcement & Intelligent Proxy
- Describe Command and control callback blocking
- Discuss Threat Intelligence
- Compare Umbrella Packages
- Understand Roaming Security
- Basic understanding of Cisco Roaming Client
- Understand how to use Cisco Umbrella Virtual Appliance
- Explain the ease of Integrating Cisco Umbrella into Active Directory
- Discuss Umbrella Reporting
- Understand Utilize Multi-Organization Tools
Who Can Benefit
The primary audience for this course is as follows:
- Channel Partner
- System Engineers
- System Administrators
- Architects
- Security Professionals
Prerequisites
The knowledge and skills that the learner should have before attending this course are as follows:
- Basic understanding of Cisco products and solutions
Module 1: Describe Cisco Umbrella
- What is Umbrella
- Enforcement
- DNS Overview
- Why DNS?
- Co-occurrence Model
- Spike Rank Model
- Predictive IP Space Monitoring
- Connecting to Umbrella
Module 2: Umbrella Deployment Options
- DHCP Server
- DNS Server Forwarders
- Recursive DNS
- DNS Forwarders
Module 3: Configure Policy Components Part 1
- Destination Lists
- Content Categories
- Application Settings
- Tenant Controls
- Security Settings
Module 4: Configure Policy Components Part 2
- Block Page Appearance
- Integrations
- Selective Decryption Lists
- Bypass Users
- Bypass Codes
Module 5: Umbrella Policies-DNS, Firewall and Web
- Umbrella Policies
- Umbrella Policies DNSSSL DecryptionIdentitiesSecurity Categories Content AccessControl ApplicationsDestination ListsFile AnalysisBlock PageBypass Users and Bypass CodesPolicy Summary
- Umbrella Policies: WebPAC File and SAMLHTTPS InspectionFile AnalysisFile Type Control
- Umbrella Policies: FirewallFirewall RuleIPSec ParametersNetwork Tunnel RequirementsNetwork Tunnel ConfigurationPolicy Tester
Module 6: Integrating Umbrella with Active Directory
- Benefits
- Umbrella Virtual Appliances (VAs)
- Virtual Appliance Requirements
- Firewall/ACL Requirements
- Virtual Appliance with a HTTP/HTTPS Proxy
- Virtual Appliance Deployment
- Configure Virtual Appliance
- Active Directory (AD) Integration
- Active Directory Prerequisites
- Umbrella AD Components
- Connect Active Directory to Umbrella
Module 7: Umbrella Roaming Security-Roaming Client
- Umbrella Roaming Security-Roaming Client
- Prerequisites
- Downloading the Umbrella Roaming Client
- Umbrella Status
- Identity Support
- Prerequisites for Active Directory Integration
Module 8: Umbrella Roaming Security-AnyConnect Roaming Security
- Supported Operating Systems
- Deployment Steps
Module 9: Cisco Umbrella DNS Mobile Security
- Apple iOS DevicesRequirementsInstallation
- Android OS DevicesPrerequisitesDownload the Umbrella Android Configuration
- Push the Umbrella Certificate to Devices
Module 10: User Account Management
- Manage Accounts
- Manage User Roles
Module 11: Umbrella Reporting
- Umbrella Built-in ReportsOverview PageReport SchedulingSecurity Activity ReportActivity Search ReportAdmin Audit Log
Module 12: Umbrella Investigate
- Domain Summary View
- Umbrella Risk Score
- Timeline Section
- DNS Resolution Table
- WHOIS Record Data
- GeoIP Section
- Investigate Sample View
- Security Features
- IP Addresses Section
- Subdomain Section
- Co-occurrences Features
Module 13: Umbrella Multi-Organization
- Multi-org Console
- Centralized Reports
- Centralized Settings
- Org Management
- Admins and Delegated Admins
Module 14: Integrating Umbrella within Cisco SecureX
- Cisco SecureX Ribbon
- Create Cisco SecureX Account
- Add an Integration Module
- Cisco SecureX Dashboard
Lab Outline:
Discovery Lab 0: Accessing the Lab Devices
- Task 1: Understanding your Lab Environment
- Task 2: Lab IP Addressing, Usernames and Passwords
- Task 3: Testing Connectivity between Windows Devices
Discovery Lab 1: Deploying Cisco Umbrella
- Task 1: Log in to the Umbrella Dashboard
- Task 2: Configure your DNS Server Forwarder to Umbrella DNS Servers
- Task 3: Confirm you are Forwarding to Umbrella DNS Servers
Discovery Lab 2: Configuring Umbrella Policy Components
- Task 1: Configuring Destination Lists
- Task 2: Configuring Content Categories
- Task 3: Configuring Content Security
- Task 4: Configuring Application Settings
- Task 5: Configuring Block Page Appearance
Discovery Lab 3: Configuring Umbrella DNS Policy
- Task 1: Configure Umbrella DNS Policy
- Task 2: Test Your Umbrella DNS Policy
- Task 3: Umbrella Policy Tester
- Task 4: Review Umbrella Activities
Discovery Lab 4: SIG Integration
- Task 1: Configure Umbrella Web Policy
- Task 2: Deploy Umbrella Root CA Certificate and PAC file
- Task 3: Verify Umbrella Web Policy
- Task 4: Review Umbrella Proxy Reporting
Discovery Lab 5: Cloud Firewall Integration
- Task 1: Pre-Cloud Firewall Configuration Test
- Task 2: SD-WAN and Umbrella Tunnel Integration
- Task 3: Configure Cloud-Firewall Rules
- Task 4: Validate Cloud-Firewall Policy
Discovery Lab 6: Active Directory Integration using the Virtual Appliance
- Task 1: Deploy Umbrella Virtual Appliances
- Task 2: Enable VA Redirect to Umbrella
- Task 3: Installing the Active Directory Script and Connector
- Task 4: Validate Umbrella Active Directory Integration
Discovery Lab 7: Deploying Umbrella Roaming Client
- Task 1: Deploy Umbrella Roaming Client
- Task 2: Validate and Review Roaming Client Web Usage Activities
Discovery Lab 8: Deploying AnyConnect Roaming Security
- Task 1: Configuring the ASA to Deploy AnyConnect Roaming Security Module
- Task 2: Create and Test Umbrella Roaming Security Policy
- Task 3: Review Umbrella Roaming Client Web Usage and Activities
Discovery Lab 9: Umbrella User Account and Roles Management
- Task 1: Configuring Umbrella User Roles
- Task 2: Configuring Umbrella User Accounts
- Task 3: Validating Umbrella User Roles and Accounts
Discovery Lab 10: Umbrella Reporting
- Task 1: Reviewing Umbrella Core Reports
- Task 2: Reviewing Umbrella Additional Reports
- Task 3: Configuring Umbrella Scheduled Reports
Discovery Lab 11: Leveraging Umbrella Investigate
- Task 1: Investigating a Domain
- Task 2: Investigating a SHA-256 File Hash
Discovery Lab 12: SecureX Integration Walk Through Demo
- Task 1: Creating your Cisco SecureX Login
- Task 2: Integrating Umbrella within Cisco SecureX