Contents

Introduction

Cisco UmbrellaTest Pages

Umbrella/OpenDNS Test URLs

Correctly Configured Result

Incorrectly Configured Result

Test your DNS Resolution

Test Security Settings

Test Content Settings

Testing the Intelligent Proxy

Introduction

This document describes how to verify Cisco Umbrella configuration using various test pages and URLs.

Cisco Umbrella Test Pages

Cisco Umbrella provides multiple URLs that enable users to test and verify successful Umbrella configuration on a network. Some URLs in this list are shared with Umbrella, the free offering for home users. This list provides several test URLs, each corresponding to a different test type. Three primary tests exist.

- The first test to Welcome OpenDNS determines whether a network, computer, or device correctly uses Umbrella for DNS resolution.

- The second test to Internet Bad Guys determines whether identities are correctly configured to block sites based on security settings.

- The third test to Example Adult Site determines whether identities are correctly configured to block sites based on content settings.

This article outlines expected results for each test. An additional category of test page for the Intelligent Proxy is also available.

Umbrella/OpenDNS Test URLs

Correctly Configured Result

Incorrectly Configured Result

Test your DNS Resolution

1. The first stage in using Umbrella is to point your DNS addresses to our anycast IP addresses (208.67.222.222 and 208.67.220.220).

2. Next, test whether you are using Umbrella/OpenDNS for DNS resolution by navigating to Welcome OpenDNS

If you have correctly configured your DNS  settings on your router, computer or  mobile device to use Umbrella, this is the result you see.

Check the settings on your device again to ensure it is correctly configured.

Test Security Settings

To test the Security Settings of your configuration, we recommend using one of the provided test sites, depending on what you want to test. All of the test sites provided are blocked with the default Umbrella Security Settings.

- Test blocking the Security setting for Phishing: Internet Bad Guys

- Test blocking the Security Setting for Malware: Example Malware Domain

- Test blocking the Security Setting for Command and Control Callback: Example BotNet Domain

An Umbrella block page appears if you are correctly configured. With Security Settings, each of the block pages varies based on your settings and could include custom block pages.

If this page appears, check your settings, including the order of policies and which identity you are appearing as in the logs.

Test Content Settings

To test Content Settings for your configuration, we recommend using this test site to test blocking pornography sites.

- Test blocking for pornographic websites: Example Adult Site

Note that not every individual Content Settings has an Umbrella block page for it. Instead, if you have created your own block page (or added one to a policy) and applied it to the policy with a blocked Content Setting, you can see that block page appear.

An Umbrella block page appears if you are correctly configured. With Content Settings, each of the block pages varies based on your settings and could include custom block pages.

If this page appears, check your settings, including the order of policies and which identity you are appearing as in the logs.

If these tests return results other than those described in the table, further troubleshooting might be required. To begin, we suggest to contact your Internet Service Provider (ISP) to ask them if they allow 3rd-party DNS services, such as the Umbrella global DNS or Google DNS.

Testing the Intelligent Proxy

A secondary, but important feature to test is the Intelligent Proxy. One you have enabled the Intelligent Proxy policy to an identity, such as your laptop or mobile device, go to the OpenDNS Proxy test site.

Use the instructions on the page to test to see how we can block an image within an otherwise good website, or block entire websites using the Intelligent Proxy.

If you find that the test site indicates you are not using the Intelligent Proxy, check to make sure the identity you are using has the Intelligent Proxy enabled in the policy that is applicable to it.