Troubleshoot Umbrella SWG: Policy Debug and Diagnostic Tests

Available Languages

Download Options

  • PDF     (294.2 KB)
    View with Adobe Reader on a variety of devices
  • ePub     (374.7 KB)
    View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
  • Mobi (Kindle)     (319.1 KB)
    View on Kindle device or Kindle app on multiple devices
Updated:August 28, 2025
Document ID:224777

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

    Introduction

    This document describes how to troubleshoot Umbrella Secure Web Gateway (SWG) with policy debug and diagnostic tests.

    Prerequisites

    Requirements

    There are no specific requirements for this document.

    Components Used

    The information in this document is based on Umbrella Secure Web Gateway (SWG).

    The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, ensure that you understand the potential impact of any command.

    Overview

    The existing version of the Umbrella Diagnostic Tool provides important information for troubleshooting network identities, Virtual Appliances and AD Integration, and some Roaming Client instances (and can be found here: Umbrella Diagnostic Tool: What to Provide Support When Asked. For users wanting to troubleshoot issues with Secure Web Gateway (SWG), you can use the policy-debug page and the new SWG Diagnostic Tool listed in this article.

    Policy Debug Page

    As a first step to troubleshooting, go topolicy-debug.checkumbrella.com(or SSE: policy.test.sse.cisco.com) while you are using SWG with the expected Web Policy applied:

    360058910251360058910251

    You can expand Diagnostic Info to view your results. Copy and paste these results to your ticket when submitting your question or replying to your case.

    Providing a HAR file capture

    When asked for a HAR capture, see our guide for How to: Get .HAR files for troubleshooting. 

    AnyConnect SWG Logs

    Capture a DART file. If asked for max logging - see Cisco Anyconnect SWG: How to enable the max debug logging. Once set, reproduce and then capture a DART.

    Downloading the SWG Diagnostic Tool

    In addition to the above, support can ask for the results of an SWG Diagnostic Tool to provide additional information. The tool is available from software.cisco.com.

    360084660592360084660592

    When you are asked to run the SWG Diagnostic Tool by umbrella support, change the default configuration before proceeding with tests.  Select the Settings icon and select Measure page load time and create HTTP Archive.

    360084738691360084738691

    The SWG diagnostic tool contains these features:

    • Overall Diagnostic: Compares page load time for one or more websites.  A number of popular websites are tested by default.  The tool attempts to compare performance with SWG vs Direct Internet Access.
    • One URL Diagnostic: Test page load time for a single URL.  The tool attempts to compare performance via SWG vs Direct Internet Access.
    • Collection: System configuration information and basic connectivity tests .
    • Scheduler: The diagnostic tool can be (optionally) configured to run at a scheduled time.

    After running the Diagnostic please gather the Results .zip file from the Archive folder and upload this to your Umbrella technical support ticket.

    Revision History

    Revision Publish Date Comments
    1.0
    04-Sep-2025
    Initial Release
    TAC Authored

    Contributed by Cisco Engineers

    Was this Document Helpful?

    FeedbackFeedback

    Contact Cisco

    This Document Applies to These Products