Problems resolving cnames for Private Endpoints with Umbrella agent

[amoneo]

Hi everyone! We are having some problems resolving Azure private endpoints from Umbrella Agent with both DNS and Web Protection services enabled.

The issue relies on the CNAME system that Azure put in place when a private endpoint is created, having to resolve a private CNAME (privatelink.x.x.x.x)

We have excluded the "privatelink.x.x.x.x" but, since the Umbrella agent works with recursive queries, we still receive the public answer instead the private CNAME itself.

Is anyone having a similar issue?

Thanks!

[Ruben Cocheno]

@amoneo 

If you already included that as Internal, then perhaps TAC can give a look