I came here expecting to see this subreddit lit up. Alas, nothing. Where is everyone? Misconfigured web firewall --> hacker gained IAM role --> found encryption keys --> decrypted data in S3 --> data extracted. Hacker posted breadcrumbs/trail on soci...
Forum Posts
Hi!Our organization has both Cisco Umbrella and Amp For Endpoints.Let´s say we are getting blocked cause of malware, phishing etc. Is there any nice way to find out which process that blocked the dns request?I´m able to search in Cisco CTR which othe...
Hi anyone else having problems with VA communication related to the Umbrella IP change?https://support.umbrella.com/hc/en-us/articles/360031125912VA's reporting error/not syncing in the dashboard, but on the appliance side everything seems to be okth...
Hello Everyone, Scenario:I have installed VA cluster (two Virtual Appliances). They are fully active. Issue:One of them is showing GREEN status: (Healthy) and other is showing ORANGE status: (Warning) with the message" DNS queries forwarded by this V...
Hi All, I have got fresh installed FireAMP Private Cloud. I wanted to start integration but it give sanity check error as below.Anyone got idea what can be reason?
Hi, I'm trying to create an reporting API, but the follow message is show: Beyond this problem, I can't export the results of my report to csv file.
I have a user who needs a report of their web browsing traffic for the past 6 months and when I ran a report it appears that traffic was only being allowed from just over month ago and all logs prior to that show just blocked traffic.We know the user...
Resolved! Umbrella overview percentage
Hello!I would like to know what means that percentage in front of Total Requests, Total Blocks and Security Blocks.Is it based on the increase of these indicators from one day to another, or one week to another?Thanks
Has anyone seen a roadmap or ETA for a CDA patch to support Windows Server 2016 Domain Controller connections? It appears there is a version check since the WMI namespace it is utilizing hasn't changed from server 2012R2. Its just checking the secu...
Have a scenario where customer wants to use a Secure Internet Gateway (SIG) like Umbrella for all locations to access cloud applications (SaaS/PaaS) but want to whitelist what Internet IP addresses can access this cloud applications (whitelits). Doe...
We have Cisco Cloud Web Security We have a filter set up that should block users from downloading .exe files from the internet. Under file types .exe is ticked However, I've found that users can actually download .exe files Thanks for your assistanc...
Resolved! OpenDNS ransomware
Spoiler (Highlight to read)Hello everyone!I would like to know if OpenDNS can block command and control from a ransomware atack as Umbrella.Thanks!Hello everyone!I would like to know if OpenDNS can block command and control from a ransomware atack as...
Hi Experts, I have deployed umbrella VA 2.4.4 on ESXi and powered on VA. Just after power on VA goes behind DHCP to pick IP and cu environment doesn't have DHCP. Thus i need to assign static IP just after deployment on OVA, however, i don't see way t...
Dear All, I understood, it's simple integration just copy the Umbrella Token API and input in to vManage dashboard and configure/apply Umbrella policy from vManage to all VPN or per-VPN or optionally enable enable DNScrypt.(vManage able to push the ...
Hi Sir: My AMP Cloud is private cloud. Can I integrate with VirusTotal ? I had applied the VirusTotal API Key. Could I just type key into the form ? Or I must run some program.
