In this video, you and I get to chat
about the topology, and components, and pieces that
allow our clients and customers, like Bob's computer,
to leverage Umbrella and stay safe.
So let's leverage this topology again
and take a look at how we can start using Umbrella
to protect Bob's computer.
Now, we have a couple of IP addresses
that represent the Cisco Umbrella DNS servers up
in the cloud on the internet.
And here are those addresses.
They are 208.67.222.222, and then the same first 16 bits, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
They are 208.67.222.222, and then the same first 16 bits,
and then 220.220.
Now, the key is anybody can point to those IP addresses
for DNS services, and they're immediately
going to get some additional benefits.
So right out of the gate, Bob's computer
pointed to those IP addresses for DNS
is going to make him more secure,
because the default policies on those servers
is if they know that a website's malicious
that we're trying to get name resolution for, they simply
won't forward the real IP address to us.
And they'll give us a little message saying, whoa,
that's a malicious site.
And right out of the gate, we're being protected. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And right out of the gate, we're being protected.
And that part of Umbrella is free.
Now, this used to be a product called OpenDNS
that Cisco purchased that's now part of Cisco Umbrella.
So the basic elements are free.
And then as we continue on, we'll
take a look at some advanced features and policies
and options where we can even lock it down further,
and make it more and more secure.
So one of the challenges here is that
in a corporate environment, it's very unlikely
that we're going to go to every computer
and say, hey, please use this DNS server and so forth.
So what's more likely to happen, if we
have a whole bunch of computers, if they're WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
have a whole bunch of computers, if they're
DHCP clients, Dynamic Host Configuration Protocol clients,
we'll hand out as an option a DNS server.
And we can point to one or both of these DNS servers
as the DNS servers these clients use,
and then bada bing bada boom, they're
automatically going to start using those DNS servers.
Now, some companies have their own internal DNS server.
So if this is acme.com, for example,
and their local internal DNS servers are resolving all that,
we could integrate that with open DNS WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
we could integrate that with open DNS
by using what's called a virtual appliance that knows
what your local domain is.
It knows where the local DNS server is,
and then we can train all the computers
to point to this little virtual appliance.
Then when Bob does a DNS request,
if it's for anything at acme.com,
this virtual appliance from Cisco Umbrella
can go ahead and forward that request
to our real internal DNS server, or if it's
for something external, like www.myfavoritesite.com,
the virtual appliance can then forward that to the DNS servers WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
the virtual appliance can then forward that to the DNS servers
as part of Cisco Umbrella who will then
make the decision about the reputation of the site
we're trying to go to, and decide based on policy or not
whether or not that's an acceptable site for Bob to go
to.
Now, one of the benefits of buying a license for and adding
the additional features for Cisco Umbrella
is that maybe at acme.com we want to filter
17 categories of websites.
Maybe no alcohol websites, or no gaming websites, or no hate
websites, or whatever it is.
And by having a license for Cisco Umbrella, when Umbrella
sees requests coming from our organization, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
sees requests coming from our organization,
it can enforce those policies.
And that's just the tip of the iceberg.
We'll continue to take a look at what else
it can do with the proper license.
But that's just one example is we
can have our own policy about what
will be allowed, or filtered, or denied
based on our policy for our organization.
Now, one thing about Bob is this.
This may be a laptop.
So maybe Bob's using a laptop.
And if his traffic is being sourced
from the internal network at acme.com, one of the subnets
there, it's identified as coming from our company.
But what if Bob takes his laptop and goes home? WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
But what if Bob takes his laptop and goes home?
So let's say Bob went home for the night.
So now this is Bob's computer.
He's connected with a cable modem or DSL
to the internet high speed.
Maybe he has a VPN back to the company,
or maybe this is a company laptop.
We just want to make sure it's protected.
And the answer is we can install a little client.
And check out this magic.
When Bob with this client installed,
the Umbrella client, when it makes
a request, instead of going to the service provider DNS
server or some other DNS server he has configured,
the client forces that DNS request up to Cisco Umbrella.
And because as part of the client profile WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And because as part of the client profile
it's identified that this is Bob, we can enforce our policy,
and also do inspection for DNS tunneling,
or any other DNS mischief.
So let's do something fun before we close this video
and let's take a computer that's not using Umbrella
with its default behavior using a default,
like a Google DNS server, do some actions on it,
see what's allowed and what's not allowed,
and then let's just point without any license
for Umbrella yet.
This is like the free tier.
Let's point that client to use one of the Umbrella DNS servers
and immediately see the difference. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and immediately see the difference.
Let's take a look.
So here's the command prompt on Bob's computer
to do an ipconfig space slash all.
That's because I'm old school.
That works, or you could also do this--
ipconfig dash all.
That also works.
In any event, so here's his IP address, 192.168.1.116.
There's his default gateway, fantastic.
And there is a Google DNS server that we are currently using.
So if we open up a browser and we went to a site
like www.google.com, that would work. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
like www.google.com, that would work.
So just to verify internet connectivity works.
And let's go to www.CBTNuggets.com.
That works.
But if we tried to go to a malicious website--
and they've got a really good test website we can use.
It's www.internetbadguys.com right there.
So if we go to internetbadguys.com,
that's an example of a website that's identified
by Umbrella to be malicious.
So here it's saying it's only a demonstration site.
And then it says, if you were using OpenDNS, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And then it says, if you were using OpenDNS,
these phishing sites would be blocked.
So it's called OpenDNS here because that
was the original product name before Cisco acquired them.
So let me share with you on this local machine
the difference it makes just by changing our DNS server
to point to the free tier of Umbrella,
or what used to be OpenDNS.
So to do that, we'll go to Control Panel.
And click on Network and Internet,
and then click on Network and Sharing Center.
And change adapter settings.
And I'm just going to right-click on my Ethernet0
here.
Click on Properties, and go to Properties of IPv4. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Click on Properties, and go to Properties of IPv4.
And here, instead of using 8.8.8.8,
let's use one of the two DNS servers
that are part of Umbrella.
So that 208.67.222.222, and the other one's 208.67.220.220.
One's going to be good enough for us.
Here we'll click on OK.
Click on Close.
Then go back to the command prompt.
Do an up arrow key.
Make sure it took.
And sure enough, there's our new DNS server.
So now if we try to go to that website again--
I'll click on Refresh here--
now it's showing us Cisco Umbrella saying, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
now it's showing us Cisco Umbrella saying,
"This site is blocked due to a security threat."
And if we went to welcome.umbrella.com right
here, that green background with the check
indicates that we are using Cisco Umbrella.
If we'd gone to welcome.umbrella.com
and we weren't pointing to the Umbrella DNS servers,
It would say, oh, you could be protected right
now if you were using umbrella.
And if you scroll down, it has an option
for setting up a free trial of the Cisco Umbrella
full product, which has some of additional features, which
we will be talking about as we proceed through these videos
together.
So in this video, we've taken a look at three basic ideas. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So in this video, we've taken a look at three basic ideas.
Number one, just by pointing to the DNS servers
on the free tier with Cisco Umbrella, we're more secure.
Number two, if we have a license,
we can not only point to the DNS servers,
but we can also have policies based
on where we're coming from that can be enforced,
like categories.
And the third thing we identified
is that we can verify whether or not
we're using Cisco Umbrella at any level
simply by going to welcome.opendns.com
or welcome.umbrella.com.
And the feedback on that web page
will show us whether or not we are currently WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
will show us whether or not we are currently
using Umbrella DNS services.
So that's a lot of fun, but check this out.
It gets even better.
If we have a paid version of Umbrella,
as we'll walk through in the next video
and start talking about, we can start implementing the policies
that we want to enforce based on customers
who are at our local network who are going out to the internet,
or whether they're home with the roaming client,
and how we can enforce the policy that we want
to keep all those devices safe, regardless of where
they're connecting from.
So we'll continue that story in the next video.
Meanwhile, I hope this has been informative for you.
And I'd like to thank you for viewing. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And I'd like to thank you for viewing.