Contents

Introduction

US Ring Fencing in SWG

Introduction

This document describes how Cisco Umbrella Secure Web Gateway provides US Ring Fencing.

US Ring Fencing in SWG

US Ring Fencing in Umbrella’s Secure Web Gateway (SWG) ensures that traffic for US customers stays within the US. This functionality minimizes the possibility of US traffic crossing the Canadian border based on geographic location.

Umbrella's Canadian DCs are configured to do a Geo-IP check when a customer looks up the proxy address: swg-url-proxy-https.sigproxy.qq.opendns.com. If the customer IP is detected to be located in the U.S., the traffic can be redirected to a US data center.

US Ring Fencing currently only applies to Umbrella's Canadian data centers. This means, based on availability, if US customer traffic hits Vancouver, the traffic can be redirected to LAX, DFW, or PAO in order of availability. If US customer traffic hits Toronto, the traffic can be redirected to CHI, NYC, or MIA in order of availability.