Re: Cisco Umbrella

["Pete, Andrew" <000000d06e28c017-dmarc-request () LISTSERV EDUCAUSE EDU>]

Hi Ryan,

We evaluated Umbrella about a year ago and love it.  The experience has been great thus far and we really haven’t had 
many issues.  We will occasionally run into something legitimate that is blocked but that hasn’t happened too often.  
Chasing URLs to add to an allow list is a challenge and always fun but that’s typical of most DNS/web based filtering 
that I’ve seen.

I tried to keep the number of policies for production users to a minimum.  For now I’ve got a policy for our Guests, 
Students, Employees and the Default policy.  I’ve also got some specialized policies for small segments like our 
eSports Arena and NAC registration/remediation networks.  I’m also trying to keep the settings simple as well.  
Blocking most of the security settings.  The only content/applications I am blocking are P2P and Anonymizing/privacy 
VPN products.

Hope this helps.  Feel free to reach out to me if you want more info.

Andy

Andrew Pete
Information Security Architect

New England Institute of Technology
One New England Tech Boulevard
East Greenwich, RI 02818-1205
401-780-4460 (Direct)
apete () neit edu<mailto:apete () neit edu>

[NEIT_Full_Stack_H_White_BG_PNG1]



From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Ryan Conley
Sent: Tuesday, April 21, 2020 1:48 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Cisco Umbrella


This message originated outside of New England Institute of Technology. Use caution when opening attachments, clicking 
links or responding to requests for information.
Hello Everyone,

We are currently in the process of setting up a Cisco Umbrella POC. I was curious as to who is using Umbrella and what 
your experience has been? Also, how did you go about creating/testing policies for your institution? Any 
information/lessons learned is much appreciated.

Thank you,

--

Ryan Conley

Information Security

University of Rhode Island

Surge Building Room 136

Kingston, RI

Office: 401-874-9511

rconley () uri edu<mailto:rconley () uri edu>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community