An organization is implementing URL blocking using Cisco Umbrella. The users are able to go to some sites but other sites are not accessible due to an error. Why is the error occurring?

Question

Options

• AClient computers do not have the Cisco Umbrella Root CA certificate installed.
• BIP-Layer Enforcement is not configured.
• CIntelligent proxy and SSL decryption is disabled in the policy.
• DClient computers do not have an SSL certificate deployed from an internal CA server.

• A
  48% (22)
• B
  7% (3)
• C
  17% (8)
• D
  28% (13)

Explanation

Requirements and Implementation Although only SSL sites on our 'grey' list will be proxied, it's required that the root certificate be installed on the computers that are using SSL Decryption for the Intelligent Proxy in their policy. Without the root certificate, when your users go to that service, they will receive errors in the browser and the site will not be accessible. The browser, correctly, will believe the traffic is being intercepted (and proxied!) by a 'man in the middle', which is our service in this case. The traffic won't be decrypted and inspected; instead, the entire website won't be available. https://support.umbrella.com/hc/en-us/articles/115004564126-SSL-Decryption-in-the-Intelligent-

No community discussion yet for this question.