Determine Which Policy Is Being Applied in Umbrella

Introduction

This document describes how to determine which policy is being applied in a Cisco Umbrella configuration.

Prerequisites

Requirements

There are no specific requirements for this document.

Components Used

The information in this document is based on Cisco Umbrella.

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, ensure that you understand the potential impact of any command.

Overview

As the Umbrella admin for an organization, there are times when you need to confirm which policy is being applied to a given endpoint. This can aid in debugging or testing when deploying new policies.

Determine Policy Application

Complete these steps to determine which policies are being applied in Umbrella:

1. Collect the debug output from the client machine that you wish to determine the applied policy for. Debug output can be gathered by running these commands from a Command Prompt on Windows,or a Terminal window on OS X:

nslookup -q=txt debug.opendns.com

The output looks similar to this:

For our purpose, the important information here is the OrgID and the Bundle. The OrgID is the identifier of your organization's dashboard, and the Bundle is the identifier of the applied policy within that organization.

2. Log in to your Umbrella dashboard and open a new tab or window in the browser.

3. Add the two variables pulled from the debug output into this URL where "<OrgID" and "<Bundle-ID>" are:

https://dashboard.umbrella.com/o/<OrgID>/#/configuration/policy/<Bundle-ID>

This takes you directly to the policy that was applied to the computer (or user) the debug output was run on, at the time it was run.

Additional Information

For more information, please reference the Policy Troubleshooting video in the Umbrella Learning: DNS Deployment and Policy Playlist section of the Cisco Community.