If your MX has Umbrella protection enabled, is it bypassing the MX's Content Filtering rules, relying completely on Umbrella? Or is it still trying to process MX rules first followed by Umbrella rules? After testing it appears it is processing both still, MX first, then Umbrella, but looking for a confirmation. If that is the case, I'm guessing best practice would be to remove all MX rules? Also Umbrella would not be a replacement for AMP or ID&P, and those protections should remain enabled on the MX? Thanks