ADMUMB - Administering Cisco Umbrella Operations v2.1

Cisco Umbrella is a cloud security platform that provides the first line of defense against threats on the Internet. Being able to understand and position how Cisco Umbrella works and what are the features is the key focus of this 3-day Cisco online IT class.

Students who enter the course with a basic understanding of Cisco products and IT solutions will be able to describe the Cisco Umbrella, understand Secure Internet Gateway and Ransomware Protection, discuss Threat Intelligence, and use Cisco Roaming Client.

The course qualifies for 18 Cisco Continuing Education Credits (CE).

Module 1: Describe Cisco Umbrella

• What is Umbrella
• Enforcement
• DNS Overview
• Why DNS?
• Co-occurrence Model
• Spike Rank Model
• Predictive IP Space Monitoring
• Connecting to Umbrella

Module 2: Umbrella Deployment Options

• DHCP Server
• DNS Server Forwarders
• Recursive DNS
• DNS Forwarders

Module 3: Configure Policy Components Part 1

• Destination Lists
• Content Categories
• Application Settings
• Tenant Controls
• Security Settings

Module 4: Configure Policy Components Part 2

• Block Page Appearance
• Integrations
• Selective Decryption Lists
• Bypass Users
• Bypass Codes

Module 5: Umbrella Policies-DNS, Firewall and Web

• Umbrella Policies
• Umbrella Policies DNS
  
  • SSL Decryption
  • Identities
  • Security Categories
  • Content Access
  • Control Applications
  • Destination Lists
  • File Analysis
  • Block Page
  • Bypass Users and Bypass Codes
  • Policy Summary
• Umbrella Policies: Web
  
  • PAC File and SAML
  • HTTPS Inspection
  • File Analysis
  • File Type Control
• Umbrella Policies: Firewall
  
  • Firewall Rule
  • IPSec Parameters
  • Network Tunnel Requirements
  • Network Tunnel Configuration
  • Policy Tester

Module 6: Integrating Umbrella with Active Directory

• Benefits
• Umbrella Virtual Appliances (VAs)
• Virtual Appliance Requirements
• Firewall/ACL Requirements
• Virtual Appliance with a HTTP/HTTPS Proxy
• Virtual Appliance Deployment
• Configure Virtual Appliance
• Active Directory (AD) Integration
• Active Directory Prerequisites
• Umbrella AD Components
• Connect Active Directory to Umbrella

Module 7: Umbrella Roaming Security-Roaming Client

• Umbrella Roaming Security-Roaming Client
• Prerequisites
• Downloading the Umbrella Roaming Client
• Umbrella Status
• Identity Support
• Prerequisites for Active Directory Integration

Module 8: Umbrella Roaming Security-AnyConnect Roaming Security

• Supported Operating Systems
• Deployment Steps

Module 9: Cisco Umbrella DNS Mobile Security

• Apple iOS Devices
  
  • Requirements
  • Installation
• Android OS Devices
  
  • Prerequisites
  • Download the Umbrella Android Configuration
• Push the Umbrella Certificate to Devices

Module 10: User Account Management

• Manage Accounts
• Manage User Roles

Module 11: Umbrella Reporting

• Umbrella Built-in Reports
  
  • Overview Page
  • Report Scheduling
  • Security Activity Report
  • Activity Search Report
  • Admin Audit Log

Module 12: Umbrella Investigate

• Domain Summary View
• Umbrella Risk Score
• Timeline Section
• DNS Resolution Table
• WHOIS Record Data
• GeoIP Section
• Investigate Sample View
• Security Features
• IP Addresses Section
• Subdomain Section
• Co-occurrences Features

Module 13: Umbrella Multi-Organization

• Multi-org Console
• Centralized Reports
• Centralized Settings
• Org Management
• Admins and Delegated Admins

Module 14: Integrating Umbrella within Cisco SecureX

• Cisco SecureX Ribbon
• Create Cisco SecureX Account
• Add an Integration Module
• Cisco SecureX Dashboard

The knowledge and skills that the learner should have before attending this course are as follows:

• Basic understanding of Cisco products and solutions

The primary audience for this course is as follows:

• Channel Partner
• System Engineers
• System Administrators
• Architects
• Security Professionals