Contents

Introduction

Prerequisites

Requirements

Components Used

Overview

Policy Debug Page

Providing a HAR file capture

AnyConnect SWG Logs

Downloading the SWG Diagnostic Tool

Introduction

This document describes how to troubleshoot Umbrella Secure Web Gateway (SWG) with policy debug and diagnostic tests.

Prerequisites

Requirements

There are no specific requirements for this document.

Components Used

The information in this document is based on Umbrella Secure Web Gateway (SWG).

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, ensure that you understand the potential impact of any command.

Overview

The existing version of the Umbrella Diagnostic Tool provides important information for troubleshooting network identities, Virtual Appliances and AD Integration, and some Roaming Client instances (and can be found here: Umbrella Diagnostic Tool: What to Provide Support When Asked. For users wanting to troubleshoot issues with Secure Web Gateway (SWG), you can use the policy-debug page and the new SWG Diagnostic Tool listed in this article.

Policy Debug Page

As a first step to troubleshooting, go topolicy-debug.checkumbrella.com(or SSE: policy.test.sse.cisco.com) while you are using SWG with the expected Web Policy applied:

360058910251

You can expand Diagnostic Info to view your results. Copy and paste these results to your ticket when submitting your question or replying to your case.

Providing a HAR file capture

When asked for a HAR capture, see our guide for How to: Get .HAR files for troubleshooting.

AnyConnect SWG Logs

Capture a DART file. If asked for max logging - see Cisco Anyconnect SWG: How to enable the max debug logging. Once set, reproduce and then capture a DART.

Downloading the SWG Diagnostic Tool

In addition to the above, support can ask for the results of an SWG Diagnostic Tool to provide additional information. The tool is available from software.cisco.com.

360084660592

When you are asked to run the SWG Diagnostic Tool by umbrella support, change the default configuration before proceeding with tests.  Select the Settings icon and select Measure page load time and create HTTP Archive.

360084738691

The SWG diagnostic tool contains these features:

- Overall Diagnostic: Compares page load time for one or more websites.  A number of popular websites are tested by default.  The tool attempts to compare performance with SWG vs Direct Internet Access.

- One URL Diagnostic: Test page load time for a single URL.  The tool attempts to compare performance via SWG vs Direct Internet Access.

- Collection: System configuration information and basic connectivity tests .

- Scheduler: The diagnostic tool can be (optionally) configured to run at a scheduled time.

After running the Diagnostic please gather the Results .zip file from the Archive folder and upload this to your Umbrella technical support ticket.