Hi all,     A design question from a policy point of view - I currently have a policy for employees which includes their AD groups. Currently we have a VA onpremise and are utilizing Roaming Client for their devices. I want to have a policy for on-pr...

 Within the activity search, I see the Policy or Ruleset Identity column, but that is just showing the user that made the request. What I can't seem to find is which policy that user's request hit? 

 I'm having a tough time understanding Umbrella's decryption capabilities. Since Umbrella is just analyzing the DNS Request, how is it able to utilize file policy when Decryption is enabled? Furthermore, my edge firewall is already providing SSL Decr...

Say a user sends a DNS request for youtube.com. Their DNS is locally configured to send all requests to the VA. Will the VA then forward the request with its own private IP or would it forward it with the original device's IP? 

Say I have two AnyConnect profiles, one with Automatic Server Selection off and the other with Automatic Server Selection on. If a user opens up AnyConnect, which configuration will be applied to their AnyConnect?