topic Re: Applying Umbrella policy to Active Directory identities in Cloud Security

Applying Umbrella policy to Active Directory identities

mski7861 — Mon, 08 Jul 2024 19:15:25 GMT

Can I apply and enforce an umbrella DNS policy to a Active Directory user that doesn't have the Umbrella Roaming Client installed?

Re: Applying Umbrella policy to Active Directory identities

Rob Ingram — Mon, 08 Jul 2024 19:23:10 GMT

@mski7861 yes, configure the clients to use the Umbrella Virtual Appliance (VA) for DNS resolution. https://docs.umbrella.com/deployment-umbrella/docs/1-introduction

And also ensure the the VA is integrated with AD https://docs.umbrella.com/deployment-umbrella/docs/active-directory-integration-with-the-virtual-appliances

Re: Applying Umbrella policy to Active Directory identities

mski7861 — Mon, 08 Jul 2024 19:32:08 GMT

@Rob Ingram thank you for the response. In this case we aren't using the VA nor does the client want another appliance in the environment. We are directly integrated with Azure,

I created a test policy configured in allow-only mode and applied the test AD user identity to the policy. The host I tested with had the roaming client installed. I logged into the host (with the RC installed) as the test user defined in the policy and it blocked all internet traffic as expected. I then uninstalled the roaming client and rebooted, then tested the same machine and same user however this time I was able to access all URLs. I even ran the policy tester for the test user and it shows the allow-only policy will be applied.

I'm just trying to figure out what is required to apply a policy to a Azure AD user or group identity.

Re: Applying Umbrella policy to Active Directory identities

Rob Ingram — Mon, 08 Jul 2024 19:52:58 GMT

@mski7861 without the Roaming Client or the VA, Umbrella won't know which user the DNS request comes from. It's the VA that sends the client IP address and user information with the DNS request to the Umbrella cloud.

Re: Applying Umbrella policy to Active Directory identities

mski7861 — Mon, 08 Jul 2024 19:59:30 GMT

Ohhhh so that's where the value of the VA comes into play @Rob Ingram Thank you for the clarification and your response!