topic Re: How to have certain IP/Computer Bypass all Umbrella Policies? in Network Access Control

How to have certain IP/Computer Bypass all Umbrella Policies?

MagicMatthew777 — Fri, 21 Feb 2020 19:13:29 GMT

How would I go about doing this?

Re: How to have certain IP/Computer Bypass all Umbrella Policies?

Muhammad Awais Khan — Tue, 04 Feb 2020 08:33:20 GMT

Hi,

Did you check Block page bypass? You can add users to it and it will allow users to bypass the pages that are blocked by your policies.

https://support.umbrella.com/hc/en-us/articles/230904528-Setting-up-a-user-with-a-Block-Page-Bypass-BPB-role

Re: How to have certain IP/Computer Bypass all Umbrella Policies?

MagicMatthew777 — Tue, 04 Feb 2020 18:58:43 GMT

Yea - Too bad my users can't bypass unless I set shortcuts on their Chrome browser to ignore certificates. I am very close to just getting rid of Umbrella since it doesnt even allow people to bypass or allow me to set which users to block, and which ones to allow.

Re: How to have certain IP/Computer Bypass all Umbrella Policies?

MagicMatthew777 — Tue, 04 Feb 2020 18:59:18 GMT

This is not the answer - I need to unblock certain computers from getting ANY blocked pages.

Re: How to have certain IP/Computer Bypass all Umbrella Policies?

MagicMatthew777 — Tue, 04 Feb 2020 20:36:04 GMT

I am going to answer my own question since I know others will need it in the future. this is tested and working as of 2/4/2020. I have been able to whitelist certain computers using this method allowing all websites to be visited with given policies.

Download Roaming Client from your Umbrella Interface (Deployments > Core Identities > Roaming Computers)
Install Super ORCA - Edit the Package with your networks config options provided in the .ZIP
Deploy package VIA GPO
Create Unblock or Custom Tag and Apply it to the devices that you want to unblock or whitelist inside your Umbrella Interface
Create New Policy that has different/desired settings than the default policy.
Apply the New Policy to the tags you created and applied in step 4
Create new Content Settings\Block List and Apply it to this new Policy
Save the policy.

You may need to run a reboot command after installing the Roaming Client on your Clients' Workstations.

Hope this helps!

Re: How to have certain IP/Computer Bypass all Umbrella Policies?

Muhammad Awais Khan — Tue, 04 Feb 2020 22:31:43 GMT

good to hear that you figure it out and apologize for misinterpreting your question 🙂