Administering and Positioning Cisco Umbrella Operations v2.1 (ADMUMB) Virtual Classroom Live July 13, 2026

Course Overview

Module 1: Describe Cisco Umbrella

• What is Umbrella
• Enforcement
• DNS Overview
• Why DNS?
• Co-occurrence Model
• Spike Rank Model
• Predictive IP Space Monitoring
• Connecting to Umbrella

Module 2: Umbrella Deployment Options

• DHCP Server
• DNS Server Forwarders
• Recursive DNS
• DNS Forwarders

Module 3: Configure Policy Components – Part 1

• Destination Lists
• Content Categories
• Application Settings
• Tenant Controls
• Security Settings

Module 4: Configure Policy Components – Part 2

• Block Page Appearance
• Integrations
• Selective Decryption Lists
• Bypass Users
• Bypass Codes

Module 5: Umbrella Policies-DNS, Firewall and Web

• Umbrella Policies
• Umbrella Policies – DNS
  • SSL Decryption
  • Identities
  • Security Categories
  • Content Access
  • Control Applications
  • Destination Lists
  • File Analysis
  • Block Page
  • Bypass Users and Bypass Codes
  • Policy Summary
• Umbrella Policies: Web
  • PAC File and SAML
  • HTTPS Inspection
  • File Analysis
  • File Type Control
• Umbrella Policies: Firewall
  • Firewall Rule
  • IPSec Parameters
  • Network Tunnel Requirements
  • Network Tunnel Configuration

Module 6: Integrating Umbrella with Active Directory

• Benefits
• Umbrella Virtual Appliances (VAs)
• Virtual Appliance Requirements
• Firewall/ACL Requirements
• Virtual Appliance with a HTTP/HTTPS Proxy
• Virtual Appliance Deployment
• Configure Virtual Appliance
• Active Directory (AD) Integration
• Active Directory Prerequisites
• Umbrella AD Components
• Connect Active Directory to Umbrella

Module 7: Cisco Umbrella DNS Mobile Security

• Apple iOS Devices
  • Requirements
  • Installation
• Android OS Devices
  • Prerequisites
  • Download the Umbrella Android Configuration
  • Push the Umbrella Certificate to Devices

Module 8: User Account Management

• Manage Accounts
• Manage User Roles

Module 9: Umbrella Reporting

• Umbrella Built-in Reports
  • Overview Page
  • Report Scheduling
  • Security Activity Report
  • Activity Search Report
  • Admin Audit Log

Module 10: Umbrella Investigate

• Domain Summary View
• Umbrella Risk Score
• Timeline Section
• DNS Resolution Table
• WHOIS Record Data
• GeoIP Section
• Investigate Sample View
• Security Features
• IP Addresses Section
• Subdomain Section
• Co-occurrences Features

Module 11: Umbrella Multi-Organization

• Multi-org Console
• Centralized Reports
• Centralized Settings
• Org Management
• Admins and Delegated Admins

Module 12: Integrating Umbrella within Cisco XDR

• Add an Integration Module
• Cisco XDR Dashboard

Module 13: Umbrella Integration with CATC

• Why Integrate Umbrella with CATC
• Integration Prerequisites
• Integrating Umbrella with CATC

Module 14: Umbrella-Splunk Integration

• Introduction to Splunk
• Integration Architecture
• Install Splunk
• Install Cisco Secure Access App
• View Umbrella Events in Cisco Secure Access App

Module 15: Integrating Cisco Secure Access with Active Directory

• Prerequisites for AD Connectors
• Active Directory (AD) Integration
• AD connector setup
• Connect Active Directory to Cisco Secure Access

Module 16: Configure AD FS for SAML

• Use Cases – SSO Authentication
• Overview of SAML authentication
• Configuring AD FS for SAML authentication
• Test SAML Identity Provider Integration

Module 17: Zero Trust Access

• Overview of Zero Trust Access (ZTA)
• Cisco Secure Client (ZTNA)
• Zero Trust Access Module

Module 18: Cisco Secure Client – VPN Access

• Overview of VPN in Cisco Secure Access
• Manage Regions and IP Pools
• Manage RADIUS Servers and Groups
• Creating VPN profiles
• Endpoint Posture for VPN

Module 19: Security features in Cisco Secure Access

• Overview of security policies in Cisco Secure Access
• Creating security profiles
• Enabling Intrusion Prevention System (IPS)
• Applying security profiles to access policies

Module 20: Cisco Secure Access Reporting

• Cisco Secure Access Built-in Reports
  • Security activity dashboards
  • Remote Access Logs
  • Total Requests Report
  • Activity Volume Report
  • Top Destinations Report
  • Top Categories Report
  • Report Scheduling

Lab Outline:

Labs are designed to assure learners a whole practical experience, through the following practical activities:

Discovery Lab 0: Accessing the Lab Devices

• Task 1: Understanding your Lab Environment
• Task 2: Lab IP Addressing, Usernames and Passwords
• Task 3: Testing Connectivity between Windows Devices

Discovery Lab 1: Deploying Cisco Umbrella

• Task 1: Log in to the Umbrella Dashboard
• Task 2: Configure your DNS Server Forwarder to Umbrella DNS Servers
• Task 3: Confirm you are Forwarding to Umbrella DNS Servers

Discovery Lab 2: Configuring Umbrella Policy Components

• Task 1: Configuring Destination Lists
• Task 2: Configuring Content Categories
• Task 3: Configuring Content Security
• Task 4: Configuring Application Settings
• Task 5: Configuring Block Page Appearance

Discovery Lab 3: Configuring Umbrella DNS Policy

• Task 1: Configure Umbrella DNS Policy
• Task 2: Test Your Umbrella DNS Policy
• Task 3: Umbrella Policy Tester
• Task 4: Review Umbrella Activities

Discovery Lab 4: SIG Integration

• Task 1: Configure Umbrella Web Policy
• Task 2: Deploy Umbrella Root CA Certificate and PAC file
• Task 3: Verify Umbrella Web Policy
• Task 4: Review Umbrella Proxy Reporting

Discovery Lab 5: Cloud Firewall Integration

• Task 1: Pre-Cloud Firewall Configuration Test
• Task 2: SD-WAN and Umbrella Tunnel Integration
• Task 3: Configure Cloud-Firewall Rules
• Task 4: Validate Cloud-Firewall Policy

Discovery Lab 6: Active Directory Integration using Virtual Appliance

• Task 1: Deploy Umbrella Virtual Appliances
• Task 2: Enable VA Redirect to Umbrella
• Task 3: Installing the Active Directory Script and Connector
• Task 4: Validate Umbrella Active Directory Integration

Discovery Lab 7: Umbrella User Account and Roles Management

• Task 1: Configuring Umbrella User Roles
• Task 2: Configuring Umbrella User Accounts
• Task 3: Validating Umbrella User Roles and Accounts

Discovery Lab 8: Umbrella Reporting

• Task 1: Reviewing Umbrella Core Reports
• Task 2: Reviewing Umbrella Additional Reports
• Task 3: Configuring Umbrella Scheduled Reports

Discovery Lab 9: Leveraging Umbrella Investigate

• Task 1: Investigating a Domain
• Task 2: Investigating a SHA-256 File Hash

Discovery Lab 10: Cisco XDR Integration Walk Through Demo

• Task 1: Login Your Cisco XDR
• Task 2: Integrating Umbrella Within Cisco XDR

Discovery Lab 11: Umbrella Integration with CATC

• Task 1: CATC Umbrella Integration
• Task 2: Modify Umbrella DNS Default Policy
• Task 3: Provision Network device with Cisco Umbrella Policies
• Task 4: Validate Your Switch Securely Connects to Umbrella

Discovery Lab 12: Umbrella-Splunk Integration

• Task 1: Install Splunk
• Task 2: Install Cisco Secure Access App
• Task 3: Perform the Necessary Configuration for the Cisco Secure Access App

Discovery Lab 13: Active Directory User Integration with Cisco Secure Access

• Task 1: Unintegration of Umbrella
• Task 2: Login your Cisco Secure Access
• Task 3: Installing the Active Directory Script and Connector
• Task 4: Validate Cisco Secure Access Active Directory Integration

Discovery Lab 14: Configure AD FS for SAML

 

Discovery Lab 15: Cisco Secure Client with Zero Trust Access

• Task 1: Create Zero Trust (ZT) Posture Profiles
• Task 2: Create Private Resource
• Task 3: Configure and Test Browser-Based ZTA
• Task 4: Configure and Test Client-Based ZTA

Discovery Lab 16: Cisco Secure Client with Virtual Private Networks (VPNs)

• Task 1: Configure a VPN Profile
• Task 2: Create VPN Posture Profile
• Task 3: Create Internet Resources
• Task 4: Create Access Policy Rules
• Task 5: Test VPN Connection

Discovery Lab 17: Configure and Test Security

• Task 1: Create Security Profiles
• Task 2: Assign Security Profile to Access Policy and Enable IPS
• Task 3: Validate Access Policy with Security Settings

Discovery Lab 18: Cisco Secure Access Reporting

• Task 1: Reviewing Security Activity
• Task 2: Reviewing Additional Reports
• Task 3: Configuring Scheduled Reports

Prerequisites

The knowledge and skills that the learner should have before attending this course are as follows:

• Basic understanding of Cisco products and solutions