"DNS queries from this VA are not encrypted-Cisco Umbrella

[YonladaThongma3268]

Scenario:

I have installed VA cluster ( 4 Virtual Appliances).

Issue:

One of them is showing GREEN (DC cluster) status: (Healthy) and other is showing ORANGE (OC cluster) status: (Warning) with the message

" DNS queries forwarded by this VA to Umbrella are not encrypted. For more information, and steps to resolve, please visit: https://support.umbrella.com/hc/en-us/articles/230902388#dnscrypt-disabled". 

I opened case with Umbrella support and  I  Check about connection port 53 allowed for TCP/UDP to 208.67.220.220, 208.67.222.222, 208.67.222.220 and 208.67.220.22
and Disabled IPS/IDS on firewall. I looked at the firewall and network requirements and found nothing out of the ordinary.

I opened support tunnels but Tac support tunnel can't connect to VA

Please help solve the problem VA.

[pjain2]

Hi,

Are you still facing this issue?

[johnjass714]

Yes, I am still facing the same issue for this.

[adamwin]

The TAC support tunnel is the best way to debug this. However if that's not possible, please double-check the network requirements for VA: https://docs.umbrella.com/deployment-umbrella/docs/2-prerequisites-1#section-networking-requirements