Introduction
This document describes the known issues and limitations of the SWG Chromebook client.
Known Issues and Limitations
|
Linux, Android and Chrome apps
|
The UCC-SWG provides filtering within the Chrome browser only. Android, Linux and Chrome app traffic is not filtered.
|
|
Incognito Mode
|
Chrome extensions are not enabled by default in the incognito mode and filtering are disabled.
To mitigate this, settings in the Google Admin Console can disallow incognito mode.
For more information, see Google documentation.
|
|
DNS Configuration
|
(Optional) It is recommended that Chromebook DNS traffic is sent to Umbrella DNS resolvers. Using Umbrella for DNS improves the accuracy of detecting the closest Umbrella SWG Data Center.
DNS servers on-premise network must forward their DNS traffic to Cisco Umbrella.
|
|
Time Sync
|
The time and date on Chrome OS must be accurate for the Chromebook to authenticate with the proxy. We strongly recommend ensuring Chromebooks are configured to sync the timezone automatically.
|
|
UCC DNS client
|
The Umbrella SWG client can co-exist with the Umbrella DNS client. However, installing both clients adds a minimal amount of additional latency. Some filtering functions are duplicated and the DNS client initiates additional DNS requests to check reputation.
It is recommend to install only the Umbrella SWG client for optimal performance.
|
|
Umbrella org migration
|
Migration of Chromebooks from one Umbrella organization to another organization is not supported
|
|
OS Support
|
The UCC-SWG Chrome extension shall be configured to run only on ChromeOS. The UCC-SWG extension does not run in Chrome browsers on Mac, Windows, and so on.
The extension can still be installed on those browsers through enterprise policy but it does not have any impact.
|
|
Kiosk / Public Session
|
Chromebooks can be configured to run in kiosk mode or in public session. The UCC-SWG client does not support these deployment types.
|
|
VPN
|
Third-party VPN software might interfere with the working of Chrome extension.
|
|
Network Pre-Requisites
|
The UCC-SWG client uses web port TCP 8888 for proxy communication. This port might not be accessible on all networks and protection is disabled when this pre-requisite is not met. Administrators can choose what happens in this scenario by selecting Fail Open / Fail Closed modes in the Google admin dashboard.
|
|
Remote Browser Isolation
|
Chrome browsers are not supported for use with Umbrella Remote Browser Isolation function (Isolate action). Chrome support for the RBI client is being evaluated
|
|
Trusted Network Detection TND
|
The UCC-SWG client does not support TND and/or Virtual Appliances.
|
Feedback