Creating a policy

Umbrella uses a policy-based filter. A policy determines what networks are targeted, what websites are blocked and allowed, as well as settings for what appears on a block page. To start, choose or create a policy to edit - to create a new policy, click "Add" in the top-right corner.

Choose the identity or identities that will be affected by the policy

In most cases, this will be the single network for the site. If there are multiple networks, it is possible to choose which of the networks are affected by the policy. Click next.

Edit the policy's settings

On this page, settings such as destination lists, content categories, and applications can be selected. Enforcing SafeSearch can be found under the "Advanced Settings" menu, in addition to settings for allow-only mode and logging. Click "next" when finished.

Choose a content blocking level

Content categories are compiled by Cisco and allow for easy blocking of sites devoted to, for example, drugs, alcohol, or piracy. There are three levels of predefined content category block policies, as well as a custom content block list.

Choose applications to block

In addition to content categories, Umbrella offers the ability to block specific applications from reaching out to the Internet. This can be used to block, for example, gaming applications such as Steam or VPN applications. Applications can be blocked either by category or individually.

Choose destination lists

Destination lists are collections of specific URLs that Umbrella will either allow or block. This screen will display a list of existing destination lists to apply to the new policy, as well as the ability to create new allow or block lists.

Choose block page settings

A block page is what will appear any time a user attempts to access a site that is being blocked by Umbrella. The block page can be configured to allow users to bypass the block with either a code or an account set up for that user, and can also be configured to allow a user to email an Umbrella administrator if they believe the page was blocked in error. If there are no bypass users or codes configured already, they can be configured on this screen.

Review policy settings

Enter a name for the new policy, and ensure that the policy's settings are correct. When finished, click "Save".