Cisco Umbrella - Windows Virtual Desktop - IP Layer Enforcement Issue

[techytuesday]

We are currently running Windows Virtual Desktops in Azure.  If we use the Anyconnect Umbrella Module with IP Layer the virtual machines CPU will go to 100 percent with the Base Filtering Engine service taking up most of that process.  We have test this with Anyconnect Umbrella module 4.7 and 4.9.  If we disable ip layer enforcement within the Umbrella console for the WVD machine the issue goes away.  I would rather not disable ip layer enforcement though.

I have also tested using just the standalone umbrella roaming client version 2.2.580 but if IP layer enforcement is enabled then the virtual machines will constantly lose network connection or the session will hang until IP layer enforcement is disabled.  Has anyone else who is using Window Virtual Desktops ran into a similar issue?  The WVDs are Windows 10.

[Appel520]

Umbrella is a cloud security platform that provides the first line of defense against a distributed/mass deployment method, such as GPO, Apple Remote Desktop, These commands should be run from a machine experiencing the issue with the If the Umbrella roaming client (127.0.0.1 and/or::1) is returning a public IP.