Introduction
This document describes which countries restrict VPNs used to connect to Cisco Umbrella.
Prerequisites
Requirements
There are no specific requirements for this document.
Components Used
The information in this document is based on Cisco Umbrella.
The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, ensure that you understand the potential impact of any command.
Overview
Here is a list of countries that Cisco believes restrict VPNs, such as the IPsec tunnels used to connect to Umbrella. This list is provided for guidance only. Restrictions are often dynamic in countries, and can change without warning.
Countries with a complete ban on VPNs:
- Belarus
- Iran
- Iraq
- Kazakhstan
- North Korea
- Pakistan
- Russia
- Syria
- Turkey
- Turkmenistan
Countries with a limited ban on VPNs:
- China1
- Colombia
- Egypt2
- Oman
- Saudi Arabia3
- UAE3
- Uganda
- Venezuela
1 China: The legal/regulatory landscape in China is complex and changing, including in the areas of cybersecurity and data protection. Cisco recommends all customers consult with their legal advisors to ensure an understanding of their legal obligations related to the use of Cisco Umbrella while in China.
2 Egypt: We have reports that connectivity for IPsec tunnels and AnyConnect Umbrella module for Secure Web Gateway only works from business or office locations with business internet connections. Users at home or other non-work locations (such as coffee shops) are not be able to connect to SWG or SIG. Umbrella DNS services appear to work throughout Egypt.
3 Saudi Arabia and UAE: Our testing has shown no issues connecting to Umbrella from these countries.
Feedback