Has anyone else ever had someone's Cisco Secure Umbrella Client switch to filtering as the device local admin account instead of these user? Hre is what I have seen occur at least 3 times now.
WE have a user who is in a policy that allows social media websites. The default policy has social media websites blocked. If her traffic is bng filtered under her user, then the social media websites are allowed. However, what occurred was that for about one hour, it started forwarding traffic to umbrella as if from the local account on the machine and not as the user, causing her to be blocked.
