Umbrella Integration Question

[Willrockhopper]

I'm currently testing Cisco Umbrella integration with a couple of our Meraki networks and want to clarify one thing.

If I use the API key integration to apply the Umbrella policies at the MX and MR levels, do I still need to manually update the MX WAN uplink DNS addresses to the Umbrella ones, or this is only designed for non-Cisco devices which can't be integrated via API.

Basically I'm just not sure if the devices on the network will have their DNS routed through Umbrella if I don't manually change the MX's primary DNS addresses if that makes sense.

[RWelch · Accepted solution]

Without manually updating the MX WAN uplink, Meraki intercepts the DNS query and attaches an identifier to identify which Umbrella policy this request should be checked against.

Ensure that bi-directional UDP 443 traffic is allowed to the Umbrella endpoint of 208.67.220.220/32.

Manually Integrating Cisco Umbrella with Meraki Networks 

[RWelch]

 

[Willrockhopper]

Great, thanks!

I don't suppose there'd be any advantage to doing it the traditional way by specifying the WAN IP and manually adding the Umbrella DNS servers like you would for a non-Cisco router?