Validate Secure Access Domain Bypass on Secure Client

Available Languages

Download Options

PDF (186.2 KB)
View with Adobe Reader on a variety of devices
ePub (279.1 KB)
View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
Mobi (Kindle) (196.8 KB)
View on Kindle device or Kindle app on multiple devices

Updated:April 14, 2026

Document ID:225499

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Issue

Organizations using Cisco Secure Access often configure Bypass domains to allow specific websites, applications, or services to connect directly to the internet without being sent to Secure Access or processed by the Secure Web Gateway. While these bypass rules can appear correctly configured in the Secure Access dashboard, administrators frequently face challenges confirming whether the bypass policies are actually being applied and enforced on the Cisco Secure Client endpoints.

Environment

Cisco Secure Access with Roaming Security Modules along with Domain Bypass.

Resolution

When we configure a Domain with:

Bypass Secure access, the configuration is pushed to the client in the file allowlist.txt under C: > Program Data > Cisco > Cisco Secure Client > Umbrella > Data > Regional Data > Global Folder.

inline_image_0.png

Bypass SWG, the configuration is pushed to the client in the SWGConfig.json file under C: > Program Data > Cisco > Cisco Secure Client > Umbrella > SWG:

inline_image_1.png

Note: Sync Timer between Client and the cloud is approximately 25 min but if you want to override it you can restart the Umbrella Services.

Cause

The root cause of the issue was that the user checked the incorrect file for SWG Bypass.

Validate Secure Access Domain Bypass on Secure Client

Available Languages

Download Options

Bias-Free Language

Issue

Environment

Resolution

Cause

Related Content

Revision History

Contributed by Cisco Engineers

Was this Document Helpful?

Contact Cisco

This Document Applies to These Products