Cisco Umbrella - Network policy vs individual policy question

[blakeeastman]

Good day all,

We have recently created a few new policies for our executive-level identities within our Cisco Umbrella (very nonrestrictive), however, when the users are in the facility, they are getting blocked from sites that they could normally reach due to the network policy (this is our default policy, very restrictive) is there any way to have the individual policy over-ride the network or computer policy?  

[Ken Stieers]

What Umbrella pieces have you deployed on prem?

Typically what you're asking for requires the vms to be deployed and set up to get passive ID from thr domain and workstations have to be using them for DNS.

There are other ways to do it, but that's how its usually done.