Introduction
This document describes how to configure your firewall after updates for Umbrella roaming client and roaming security module for AnyConnect.
Issue
Changes are being made to the hosts that upgrade your Umbrella roaming client and the Roaming security module for AnyConnect. We are in the process of transitioning our clients' upgrade infrastructure to improved hosting, beginning later this week and slowly progressing through the upcoming weeks in stages.
Solution
To continue receiving client upgrades seamlessly, please make sure your firewall allows TCP traffic on port 443 outbound to:
disthost.umbrella.com (146.112.255.101)
in addition to the existing upgrade host:
disthost.opendns.com (67.215.71.201)
Please note that AnyConnect clients with the Roaming security module does not autoupdate unless the setting for cloud update is explicitly enabled in the dashboard. We highly recommend that you turn this feature on, although by default, automatic updates from Cloud Update are disabled.
To enable Cloud Updating for Umbrella Roaming Security and the rest of AnyConnect:
- Log into the Umbrella dashboard.
- Navigate to Identities > Roaming Computers.
- Under the Settings icon (the gear icon) check "Automatically update AnyConnect, including VPN module, whenever new versions are released.
Updates do not occur while VPN is active." For more information about Cloud Updating, see Umbrella Roaming Security: Cisco Secure Client.
For any questions, please contact support at umbrella-support@cisco.com.
Feedback