What happens if the intelligent proxy is unreachable in the Cisco SD-WAN network?

Block-listed domains are typically handled by local DNS policies or the Umbrella cloud directly, not solely dependent on the intelligent proxy for their 'unresolved' state when the proxy is down.

The Cisco Umbrella Connector does not locally resolve all DNS requests when the intelligent proxy is unreachable; its primary function is to forward DNS queries to Umbrella, not to act as a standalone resolver for all categories.

When the intelligent proxy is unreachable, the system cannot perform real-time security checks for domains categorized as 'gray-listed'. These domains are typically not explicitly allowed or blocked, requiring the intelligent proxy for dynamic analysis and resolution decisions, hence they remain unresolved.

The intelligent proxy's primary role is DNS resolution and policy enforcement, not redirecting HTTPS traffic when it is unreachable; HTTPS traffic redirection is handled by other components or policies.