backoff settings

[Vishal6]

Hi,

Need to disable secure roaming client when users connected from office network. I have checked backoff settings and need to know how can i utilise it. Attached snapshot for reference.

[Cristian Matei]

Hi,

  @Vishal6  It's solely based on the a list of domain names (wildcard can be used a well) that you define, and the the computer gets that domain name assigned to its NIC, the Agent stops doing the job, it relies on the network it's connected on to provide the security functions.

https://community.cisco.com/t5/security-knowledge-base/anyconnect-trusted-network-detection-tnd-and-always-on/ta-p/3125277#toc-hId--86798602

https://www.cisco.com/c/en/us/support/docs/security/umbrella/224741-disable-protected-networks-for-umbrella.html

Thanks,

Cristian.

[Vishal6]

just  enabling protected network detection and anyconnect vpn detection wont work ? attached snapshot in very first post.

[Cristian Matei]

Hi,

@Vishal6 It will not, as it can't know which domains are protected / aka when the user is connected to the internal network. Look at the documents I've shared.

Thanks,

Cristian.

[Vishal6]

Hi,

I have enable Backoff Behind Virtual Appliance, Protected Network Detection, AnyConnect Trusted Network Detection & AnyConnect VPN Detection under backoff settings in umbrella dashbaord. Still secure client shows umbrella active when users connected to internal networks .Pls guide me what im missing here.

[Vishal6]

pls help