Umbrella SIG Integration With Cisco SD-WAN

4:57

•

741

Plays

Cisco Umbrella provides DNS-layer security, secure web gateway (SWG), cloud-delivered firewall, and cloud access security broker (CASB) in a single, cloud-native, security platform. Umbrella can be seamlessly integrated into Cisco SD-WAN using feature and device templates in vManage. This integration with SD-WAN gives you the ability to rapidly deploy Umbrella SIG services to hundreds or thousands of remote office locations throughout the world. With Cisco Umbrella and SD-WAN you can create a global scale secure access fabric that is highly available!

This demonstration is designed to give you a quick overview of the integration between Cisco Umbrella and SD-WAN. Below is a more detailed discussion of the configuration used in this video demonstration. Always consult the product documentation to ensure your configuration settings are correct for your deployment.

1. Generate an API/Secret Key pair from the Umbrella Dashboard.

2. (recommended) For DNS Security, configure the vManage feature template for VPN 0 to use Umbrella DNS servers.

3. (optional) Add your Smart Account credentials to vManage to enable automatic retrieval of Umbrella Organization ID, (Registration) API Key, and Secret.

4. Confirm NAT is enabled on your outbound public interface, if it is not configured then add NAT to the Cisco VPN Interface feature template.

5. Configure a Cisco SIG Credentials feature template either manually enter the Umbrella Organization ID, Registration Key, and Secret or use the ‘Get Keys’ button if you completed Step 3.

6. Configure a Cisco Secure Internet Gateway (SIG) feature template. Define up to two IPsec tunnels, set the IKEv2/IPsec parameters, and identify your active and backup pair.