Contents

Introduction

Overview

Explanation

Introduction

This document describes which Cisco Umbrella sites are always allowed through the Cloud Delivered Firewall Tunnel.

Overview

The purpose of this article is to provide a list of domains and IP addresses that are always allowed in the tunnel and supersedes any user-defined firewall rules in the Umbrella Dashboard's Firewall Policy section

Explanation

When configuring firewall rules in the Umbrella Dashboard's Firewall Policy section, please keep in mind that these sites are always allowed through the Cloud Delivered Firewall:

- dashboard.umbrella.com

- login.umbrella.com

- docs.umbrella.com

- support.umbrella.com

- status.umbrella.com

- umbrella.com

- umbrella.cisco.com

- dashboard2.opendns.com

- api.opendns.com

- login.opendns.com

- opendns.com

- Cisco Umbrella Anycast IPs: 208.67.222.222, 208.67.220.220, 208.67.222.220, and 208.67.220.222

- OpenDNS FamilySheild IPs: 208.67.222.123 and 208.67.220.123