<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<title>Umbrella on mattdrew.net - Matt&#39;s network blog</title>
		<link>https://mattdrew.net/tags/umbrella/</link>
		<description>Recent content in Umbrella on mattdrew.net - Matt&#39;s network blog</description>
		<generator>Hugo</generator>
		<language>en-US</language>
		
		
		
		
			<lastBuildDate>Mon, 08 Mar 2021 00:00:00 +0000</lastBuildDate>
		
			<atom:link href="https://mattdrew.net/tags/umbrella/index.xml" rel="self" type="application/rss+xml" />
			<item>
				<title>Forcing web traffic to Umbrella proxy tunnel using policy based routing on Cisco ASA</title>
				<link>https://mattdrew.net/posts/pbr-umbrella/</link>
				<pubDate>Mon, 08 Mar 2021 00:00:00 +0000</pubDate>
				<guid>https://mattdrew.net/posts/pbr-umbrella/</guid>
				<description>&lt;p&gt;Network requirement: Stringent control over web traffic, even over clients that are not using the Umbrella roaming security client. Force internal to external web traffic to use the proxy. Exert absolute dominance over your office users!&lt;/p&gt;&#xA;&lt;p&gt;Scratch that last bit, but it DOES feel good, doesn’t it? Let’s get to cracking.&lt;/p&gt;&#xA;&lt;p&gt;&lt;img src=&#34;https://mattdrew.net/images/umbd.png&#34; alt=&#34;umbrella diagram&#34;&gt;&lt;/p&gt;&#xA;&lt;p&gt;Configuring the Umbrella tunnel ‘A side’&lt;/p&gt;&#xA;&lt;p&gt;This guide assumes you have already set up the Umbrella side of the tunnel using the below guide. It is a very simple procedure even without the guide so I’m not going to repeat it here. Your public IP must be configured so that they know to expect the incoming connection. You must also set your tunnel key which must be matched in the config below.&lt;/p&gt;</description>
			</item>
	</channel>
</rss>
