Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi experts, for spoke-to-spoke traffic that is being routed by the Umbrella SDWAN connectors, will this traffic be decrypted in Umbrella or is it passed straight through to the relevant Spoke?
Depending on which DNS tier you are using (Essentials/Advantage):Essentials - provides you DNS securityAdvantage - has intelligent proxy capability which proxies requests to those "grey" sites that we call (e.g. reddit).
So if you are using Essential...
Yes and Yes.
Yes you will need to configure SAML auth to authenticate users using SIG going to internet. Yes you can definitely use Duo for SAML Auth in Umbrella. Here's an example flow:https://www.youtube.com/watch?v=8QrvuxEq9bc
Few benefits of adding Umbrella in your security arsenal:
1. Umbrella embed tons of near-real time behavioral analyzers into its logic, which work against every record in every DNS request while FTD largely goes by a predefined blocklist which is per...
I don't think this has something to do with Umbrella. You might want to check your port configurations instead (2960).
To answer your second question, we have a select appliance that can be integrated with Umbrella DNS. This doc might be of a help:ht...
