Good morning. In this video, I'll discuss why the root certificate is important. The umbrella root certificate helps businesses by allowing secure HTTPS traffic management.00:07Stopping untrusted server warnings and boosting security protocols.00:20This certificate is utilized for various functions in both Umbrella DNS and Umbrella SIG services. When we talk about DNS protection, the certificate is used for the following two scenarios. As the 1st scenario, we have.00:24The intelligent proxy. The intelligent Proxy is an advanced DNS option that we provide to analyze HTTP or HTTPS connections to identify and mitigate potential risks associated with accessing certain sites. In order to effectively intercept HTTPS traffic without any issues, since HTTPS.00:40Uses SSL and relies on certificates for secure communication, it is essential to have the certificate installed on the machines.01:00This ensures that Umbrella can transparently intercept and inspect the traffic without causing any disruption to the end user's experience. We find the intelligent proxy in the domain name system policies and in the advanced settings section.01:08Point number two, blocked pages. When we configure DNS policies to restrict access to specific user requested destinations, and if the blocked site is secured with HTTPS, Umbrella will intercept the connection and display the block page using the SSL root certificate from Cisco umbrella. Maintain.01:26The encrypted HTTPS protocol. This ensures that the blocking messages delivered securely and consistently across all HTTPS based if the computer does not have the certificate installed, an error message similar to this site is not secure will appear.01:46I wish to continue. While the message is expected, since the computer does not have the certificate installed, it can be confusing for end users, and they would, of course, want to avoid it.02:04The blog page is directly associated with the domain name system policy and can also be configured within the policies and their components. Then we move to the blog page appearance for more customization and settings. Here we can see how we can customize these pages, create several, and assign them to our.02:19DNS policies.02:40It should be noted that there are functionalities that depend on data decryption at the DNS level, which always requires the umbrella root CA certificate. One of the key features includes URL blocking or custom URL blocking capability.02:41When you want to block a specific destination site manually, we utilize a component known as a destination list or block list to restrict access. To make use of this type of blocking towards specific URLs, it is done through the intelligent proxy. According to what has been seen.03:01For the intelligent proxy to function properly, we need the root CA certificate from the installed URL to decrypt the traffic without any issues. Here we find an illustrative example of how to effectively create a comprehensive list of figures to present information in a structured manner while avoiding clutter. Point number two would in.03:18Involve a process called file inspection or file analysis, which aims to examine and assess the contents of a given file.03:38We can see it within the DNS policies. This is an extra feature of the smart proxy that improves its ability to check risky files that could harm your computer, giving better protection against cyber threats.03:47In order to inspect those files that are downloaded from HTTPS pages, we need the root CA certificate from Umbrella installed in our system to decrypt the traffic and analyze the file being downloaded, thereby enabling us to identify any potentially malicious content and take appropriate security measures.04:03These are the important key points to consider regarding the umbrella route certificate at the DNS level. But if we're specifically talking about the umbrella SIG group, what relevance does it hold? To start with, let's examine the web policy, also known as the website policy.04:22When configuring web filtering policies, we are given the choice to activate HTTPS decryption, also referred to as HTTPS inspection for enhanced security and visibility. This is done in order to have absolute visibility into all the websites visited by the client, ensuring access to the complete.04:38URL for comprehensive monitoring.04:58As previously mentioned, the root umbrella certificate plays a crucial role in DNS and web blocking functionalities. It is utilized for both blocking and warning pages, particularly for the warning pages associated with rule number two or when implementing an isolation rule.05:01In all three scenarios, the umbrella certificate will be used. It's also used for advanced SIG options like preventing data loss and for controls within the rules such as file type control and file analysis, all using the umbrella root CA certificate.05:21This certificate ensures secure data transmission and compliance with security protocols, enhancing overall system protection and risk mitigation measures. Now, to obtain or download the root certificate authority certificate for umbrella.05:40You can find it in the deployment section of the platform. When you are there, you will see the option to select the root certificate. Just click on this option to start the download for the certificate. Finally, proceed by clicking on the designated download button to acquire the certificate securely.05:56Now, when talking about how to install the umbrella root CA certificate on computers, there are many options. We can effectively utilize the Microsoft GPO or GPO route policy settings for seamless configuration. We can also leverage Microsoft Intune or utilize the system center configuration manager CCM or SCC.06:15PM from Microsoft for device management and security solutions. We can also choose to manually install it on the computer or use scripts. A straightforward method to confirm the installation of the umbrella certificate on the computers is by utilizing the tool known as Microsoft Management console.06:35MMC. This tool enables seamless verification. We proceed to open the tool, navigate to file, remove snapping the certificate section, access the computer account, then move to the trusted root certificate authority section. Upon inspection, we observe that the umbrella.06:55Certificate has already been installed on this computer.07:16Similarly, it is always the best practice to visit docs.umbrella.com, where comprehensive user guides for configurations and general documentation are available. These resources cover DNS and umbrella SIG, providing detailed instructions and helpful information.07:24In our case today, we are interested in the certificate section where we can find all the details about the session we discussed today. Thank you for watching this video.07:41
