Umbrella and Meraki MX Threat Prevention

[GarageLand42]

We currently have 7 remote locations with a Meraki MX.  In our Corporate Office we are using Cisco Umbrella.

Devices at the Remote locations are getting the IP addresses of our Internal Umbrella DNS servers located in our corporate office.

Should I Just add the API Key, and will it just propagate into the Umbrella cloud.Do I need to add the external IP of our remote sites. Do I also need to add the Internal IP address of remote site.

How do I add my remote locations to protect them.   

Should I add the remote IP Networks to the Umbrella side 1st, ? 

Should I Enable remote Protection on the Meraki Side 1st using the API KEYs/Secret.

Do I need additional licensing to protect my remote locations.

[alemabrahao]

Hi, you can check these documents. There’s no additional license fee to get remote user protection.

Manually Integrating Cisco Umbrella with Meraki Networks - Cisco Meraki Documentation

Add External Domains and IPs (umbrella.com)

[alemabrahao]

I also recommend you contact your Meraki sales representative, or even open a support case.

[PhilipDAth]

Because your remote branches are using the Umbrella Virtual Appliances at your HQ for their DNS - they will be protected.

On the Umbrella screen you have shown, you can simply click "Add" in the top right hand corner to add their subnets.  This will make reporting slightly nicer, and you could apply a different policy based on the network.  But either way, they are still protected.