Configure Warn Rule Action

Introduction

This document describes a comprehensive understanding of the Warn rule action feature, its configuration, and associated restrictions within Cisco Umbrella.

Overview

When a user attempts to access a website categorized under the Warn category in Cisco Umbrella, they encounter a Warn page. To proceed, users must click through the Warn page.

Duration of Access

Upon clicking through the Warn page, access to the requested destination is granted for a limited duration of one hour. After this period, the Warn page reappears, requiring users to click through again for continued access.

Activity Report Overview

Warn page interactions are logged within Umbrella's activity reports, providing administrators with insights into user interactions and warnings triggered by the Warn rule action feature.

Destination List Restrictions

Enabling the Warn page feature restricts access to Destination Lists. Users are unable to select the Destination List option for websites categorized under Warn.

Enabling HTTPS Inspection

To enforce the Warn page feature effectively, HTTPS Inspection must be enabled within Cisco Umbrella. HTTPS Inspection decrypts and inspects HTTPS traffic, enabling Umbrella to enforce Warn pages for encrypted connections.

Creating a Custom Warn Page

Administrators have the option to create a custom Warn page with personalized messaging. This custom Warn page can be selected when adding rules to a ruleset, providing users with a tailored warning experience.

For detailed instructions on creating a custom Warn page and further information on Warn rule action configuration, please refer to the official documentation: Create Custom Warn Page.

Note: Any selective decryption list exceptions impact the ability of the proxy to enforce certain policies and features, the warn page is one of them.

Conclusion

Understanding the Warn rule action configuration and associated restrictions is essential for implementing effective security policies within Cisco Umbrella. By leveraging Warn pages and HTTPS Inspection, organizations can enhance their security posture and ensure safe browsing experiences for users.