Umbrella DNS Connector Integration with Firepower Management Center

Danny Dulin — Wed, 22 Jan 2025 15:46:15 GMT

I have followed the instructions to integrate Umbrella with Firepower Management Center. I meet all the prerequisite requirements.

The test connection is successful, yet the Firepower Threat Defense devices are not registering with Umbrella.

Here is the result of the show service-policy inspect dns

Global policy:
Service-policy: global_policy
Class-map: inspection_default
Inspect: dns preset_dns_map, packet 1190451331, lock fail 0, drop 782087, reset-drop 0, 5-min-pkt-rate 307 pkts/sec, v6-fail-close 0 sctp-drop-override 0
message-length maximum client auto, drop 0
message-length maximum 512, drop 0
dns-guard, count 591778130
protocol-enforcement, drop 1934
nat-rewrite, count 0
Umbrella registration: tag: DNS_Policy, status: 400 BAD REQ, device-id: , retry 0
Umbrella resolver mode: fail-close
Umbrella resolver ipv4: 208.67.220.220 - operational
Umbrella resolver ipv6: 2620:119:53::53 - operational
Umbrella: bypass 0, req inject 0 - sent 0, res recv 0 - inject 0, local-domain-bypass 0
DNScrypt egress: rcvd 341915, encrypt 0, bypass 341915, inject 0
DNScrypt ingress: rcvd 341874, decrypt 0, bypass 341874, inject 0
DNScrypt: Certificate Update: completion 182, failure 0

topic Umbrella DNS Connector Integration with Firepower Management Center in Network Security

Umbrella DNS Connector Integration with Firepower Management Center