Configure Umbrella for Migration to Secure Access and Security Cloud Control

Introduction

This document describes how to migrate from Umbrella to Secure Access using Security Cloud Control (SCC).

Background Information

You are encouraged to migrate from Umbrella to Secure Access and required to use Security Cloud Control to manage all their cloud security products as part of these changes. This allows you to have a single pane of glass to manage their cloud security products which includes Cisco Secure Access.

Mutli-org and MSSP migration is out of scope of this article. For multi-org and MSSP migration, please refer to Umbrella Multi-org Console Upgrade to Secure Access Manager Organization.

Prerequisites

• Current DNS or SIG Subscription
• Full Admin Access to Umbrella
• Access to Security Cloud Control

Preparation Stages

1. Prepare for Migration

Ensure you have a DNS or SIG subscription on Umbrella:

1. Navigate to Admin > Licensing to verify. Upgrade to Secure Access must appear at the top of the page:
   
2. Make note of the org ID, in this example 8350166.
3. Select the Request Invitation option on the licensing page.

   Important: The Request Invitation button serves as an invitation to join the Umbrella tenant for SCC. It does not generate a claim code. A claim code is provided to you once your order for Secure Access has been completed. This is part of the migration process to Secure Access.

   Note: Migration is a paid service available only to customers who have purchased a Cisco Secure Access subscription. The invitation can be requested only after purchasing the Secure Access subscription.

   Note: If the Upgrade to Secure Access is not present, ensure that the Umbrella package is DNS or SIG.

4. Assuming you place your order for Secure Access, wait 3–4 business days for an email with your subscription claim code (after initiating the request invitation from your Umbrella Tenant). Example email:

   

2. Log in to SCC using your Existing Cisco Login Credentials

1. Navigate to Security Cloud Control portal and log in with your Cisco login credentials.

   Note: The same Cisco login credentials used to access your Umbrella dashboard.

2. Select Create new organization (if you do not have an existing one).
3. Enter the new organization name in the New Organization name field.
4. Select the appropriate region from the Region deployment drop-down menu.

   Note: This must be the geographical region where your tenant would be deployed to.

   Example:

   

5. Select Continue to complete the org creation.

3. Link Umbrella Org to SCC and Claim Subscription

1. Select Claim subscription button to claim it with the codes provided from step 1 above.
2. Your Umbrella org ID must be seen in the Subscriptions page as well with the invitation to attach it to SCC.

   Note: The Umbrella org ID must be the same as on your Umbrella Dashboard. This is important for the migration and to ensure that both SCC and Umbrella have been linked.

   

   Select Attach product to attach your Umbrella org to SCC.

   When attached, you must see the Cisco Secure Access as a product in the same page as shown on the example here:

   

3. Enter the claim code and select Next:

   

4. Select Attach existing instance from the Create new instance or attach existing drop-down menu:

   

5. Review the settings:
   1. Ensure the (Existing instance) is part of the product name.
   2. Set the region to the existing region of the attached Secure Access instance.
   3. Select Claim move to move to the next page.

      

   4. Confirm the subscription claim.

      

   5. After successful claim and provisioning, watch for a Subscriptions page showing all your activated products:

      

4. Apply the License to Secure Access Instance

1. Select Action required option.

   

2. Select Appy license.

   

Verify Secure Access Link to SCC

Use this section to verify that your Secure Access tenant has been linked to SCC.

1. Product Activation Status in Subscriptions

Verify that the Cisco Secure Access <License Type> product Instance has been activated:

2. Secure Access in Product list

Secure Access must now be listed under Products as well:

Migrate from Umbrella to Secure Access

1. Log back into Umbrella with the same account as above.
2. Navigate to the new menu item Upgrade Manager.

   

3. In the Upgrade Manager page, select Start under Enable Cisco Security Cloud Sign on.

   

4. Select ENABLE SAML under SAML Dashboard User Configuration to link your SCC as SAML provider for dashboard login.

   

5. Test SAML configuration with the TEST CONFIGURATION option.

   

6. The login page of SCC must appear in a different pop-up window (ensure that pop-up blocker is disabled). When prompted, log in with your SCC credentials.

   

   

7. When the login has been verified, look for this confirmation message, at which point the SAML portion is almost complete:

   

8. Return to the SAML Dashboard User Configuration portion. Green bullet shows that the SAML settings have been correctly configured. Select NEXT.

   

9. Save and notify users of the changes.

   

10. SAML configuration completed:

    

11. Upgrade to Secure Access by selecting Upgrade in the Start Upgrade section:

    

12. Allow the upgrade to continue:

    

13. When completed look for this page:

    

14. Redirect traffic to Secure Access:

    

15. Confirmation of the redirection being completed. In the example only the network identity was migrated from Umbrella to Secure Access:

    

16. Complete the upgrade and migration to Secure Access.

    Caution: This completely removes your Umbrella org and is not reversible so be sure all items have been completely migrated before carrying out this step.

    

17. When you select Close Umbrella on this image, you lose access to your umbrella org as it gets deleted.

    

Verify Migration

1. Sign into Secure Access with your login credentials.
2. Navigate to Secure > Access Policy to display the migrated rules, as on the example here. The org ID must be the same as in section Prepare for Migration above.

   

Related Information

• Umbrella Documentation
• Secure Access Documentation
• DNS Defense Upgrade Guide
• Technical Support & Documentation - Cisco Systems