Use Route 53 Feature to Point AWS to Umbrella

Available Languages

Download Options

  • PDF     (6.4 KB)
    View with Adobe Reader on a variety of devices
  • ePub     (79.4 KB)
    View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
  • Mobi (Kindle)     (63.8 KB)
    View on Kindle device or Kindle app on multiple devices
Updated:September 8, 2025
Document ID:224814

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

    Introduction

    This document describes how to point AWS to Umbrella via the new route 53 feature.

    Background Information

    Amazon Route 53 has now provided a new functionality that allows users to forward DNS queries to a specific network. This enables users who have this service to point their DNS traffic to the Umbrella resolvers and apply settings to their Amazon VPC (Virtual Private Cloud).

    Set Up Your Route 53 Resolver

    To forward your DNS requests to the Umbrella resolvers, you need to add a rule to forward all of your DNS queries to your network:

    1. Sign in to the AWS Management Console and open the Route 53 console at https://console.aws.amazon.com/route53/.
    2. Navigate to Rule > Create Rule.
    3. Specify "forward" as the value.
    4. Add the root domain "." (dot) for the domain name.
    5. Associate the rule with all of the VPCs for which you want this to apply to.
    6. Enter 208.67.222.222 and 208.67.220.220 as your Target IP Address.
    note-icon

    Note: The "dot rule" does not apply to some AWS internal domain names and record names in private hosted zones. If you want to forward these inquiries to an external network or to Umbrella for any reason, you need to set up a separate rule using the specific internal domain names. If you run into issues setting up your Route 53 resolver, you can also visit the Amazon Route 53 Developer Guide for more details.

    Once your Route 53 Resolver is configured to forward DNS traffic to Umbrella, you need to create a Network in the Umbrella dashboard with the IP address of the AWS Outbound endpoint you configured.

    Revision History

    Revision Publish Date Comments
    1.0
    08-Sep-2025
    Initial Release
    TAC Authored

    Contributed by Cisco Engineers

    Was this Document Helpful?

    FeedbackFeedback

    Contact Cisco

    This Document Applies to These Products