And welcome back.
The fun continues.
In this video, we're going to walk
through the process of creating a policy in preparation
for applying that policy and enforcing
the restrictions that we want to have
on our users in the organization.
And when I say restrictions, what I'm really referring to is
we are looking to not only restrict
certain types and categories of traffic,
but all across the board we're also
looking to protect this computer and the user behind it
from even going to malicious websites or sites that
are outside the scope of our policy. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
are outside the scope of our policy.
So let's go to the web interface for Umbrella,
and let's create a policy.
So I have logged in for my free trial for Umbrella.
They give you a 14-day trial just for asking.
And over here on the left-hand side,
there are several options, several tabs here.
And what we're going to click on right now is policies.
So the default policy is a good example of a shopping cart.
And in the shopping cart, we have
all these individual items, such as the destination
list, which is--
I'm going to put arrows here-- which is right there.
So it's got some default destination list, as far as WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So it's got some default destination list, as far as
who can be allowed, and who can be blocked.
And we can modify that list, or create a new list
as we go to that section.
Here we go in content settings.
If we had any categories, like alcohol, or hate sites,
or anything else like that, we could include those.
Now, in the default content settings,
which are controlled right here, the default
is that no categories will be blocked.
And so we either want to modify the default
or create a custom content category, which we could then
put in the default policy, or in a custom policy. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
put in the default policy, or in a custom policy.
But again, these are the ingredients
that go into a policy.
So this is like the shopping cart.
And then these items below are the individual components
that go into that shopping cart, or into the policy.
Regarding application settings and what
applications we want to allow or not,
there's that section right here.
And it appears in this default policy
that we have an enable option.
So it's currently not enabled for application inspection.
So we could tweak the default, or we
could go ahead and create our own element
and put in the policy.
Here we have security settings, which we can modify right here.
And here we have the block page information, which WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And here we have the block page information, which
we could customize right here.
So here's what I propose we do.
Instead of just modifying all the default elements
in the default policy, let's go ahead
and create our own custom elements
for each of those components, and then apply that
to our own custom policy.
That way we'll have our policy with our elements, and then
we can apply that, or associate that with Bob's computer
to verify that it's working.
So let's go ahead and create our policy components first,
and then we'll create a custom policy to apply it to.
Let's just go down as they appear in the interface WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Let's just go down as they appear in the interface
under Policy Components.
So we'll start with Destination Lists right here.
So this is the default. If we wanted
to create a new destination list,
we could just click up here on Add
in the upper right-hand corner.
So we'll click on Add.
And we'll give this a name.
And let's call it Our Custom Destination List.
So when we see it, we'll know exactly what it is.
And let's specify that we want to block www.cisco--
no, that would be bad, because we're probably
going to need some updates from there.
So let's go ahead and block acme.com.
And just before we try that, let's
verify we can get to acme.com.
WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
All right.
It comes up.
Fair enough.
So let's go ahead and block that one.
So we'll click on Add.
And then we'll click on Save.
So now we have a new destination list
that's blocking one domain.
And that is Acme.com.
So if somebody came to us and said, hey,
how exactly do you block this site, or that site,
or that domain?
You'd simply say it's part of the destination lists
inside of Umbrella.
So now we have that created, let's go ahead
and go to our next section, which is content categories.
And here is the default, which is not blocking any categories. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And here is the default, which is not blocking any categories.
And let's create our own.
So we'll click on Add in the upper right-hand corner.
And let's call this Our Custom Content Filtering.
And then Copy From Existing gives us
a good place to start from.
So if we said, you know what?
I want to copy from the default, or let
me copy from the high, that's going
to add a whole bunch of stuff blocked by default
in the high category.
And that's our starting point.
So just as an example, alcohol, adware, chat, classifieds,
all those categories would be blocked or denied
from doing DNS resolution for our customer who had WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
from doing DNS resolution for our customer who had
this policy applied to them.
So that looks good to me.
We have alcohol.
We can easily test that.
And let's go ahead and click on Save.
So as a test, just from Bob's computer,
let's go to alcohol websites.
And let's go to qualityliquorstore.com.
So currently, you'll have to take this decision on your own
if you're under 21.
Anyway, I just wanted to verify that that would go.
Now, the reason that's not being blocked is two reasons.
One is we haven't applied this content category filtering WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
One is we haven't applied this content category filtering
to a policy.
And then, secondly, we haven't applied this policy
to our organization yet.
But we'll get to that.
So there's our custom content filtering.
Next, let's go down to Application Settings
right here.
Here's the default application settings.
We're going to go ahead and add some new ones.
We'll click on Add.
And we'll call this our custom app setting.
And then we could search for an application,
or if we knew exactly where we were going,
we could click it here.
Let's do this.
So let's do this.
Let's type in VPN and see what comes up. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Let's type in VPN and see what comes up.
We have a whole bunch of VPNs that could identify.
How about a drive?
Let's go ahead and do Google Drive, iDrive, and then any
of these that we try to go to, once the policy is applied,
we should not be allowed access.
So let me just grab a few more of these real quick.
Boom, boom, boom.
Fantastic.
In our custom app setting, we'll click on Save.
Now that's saved.
And let's go to Security Settings.
So the default settings here, if we look at the defaults,
by default, it's going to block malware,
meaning if it sees a website that WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
meaning if it sees a website that
has a reputation of having malware,
it's going to not allow that to continue.
It will respond.
It'll say, whoa, this is a malware site.
And then it has command and control callbacks,
which could include through DNS tunneling and phishing attacks.
So let's create our own.
Let's not use the default. So we'll simply click on the Add
up here in the upper right.
We'll call this Our Custom Security Setting.
And then as far as Copy From, let's
just not copy from anything.
Let's turn all these on-- crypto mining,
DNS tunneling, VPNs, potentially harmful WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
DNS tunneling, VPNs, potentially harmful
domains, DNS, dynamic DNS, everything.
We'll just block on everything as far as security settings.
Great.
And that is our custom security setting.
Fantastic.
And we'll click on Save.
So here it's showing us the default settings.
And if we expand our custom one, I just
want to confirm that it took all those settings.
Great.
So we have our custom security settings all in place.
And then the next piece here is block page appearance.
So let's create our own.
Click on Add.
We'll call it Custom Block Page. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
We'll call it Custom Block Page.
And then we can create our own custom message here, saying,
sorry, or what have you.
Or we could use the default message.
We also have an option to redirect users
to a specific URL if we want that to show up.
And then there's an option here whether or not
users who are blocked can contact an admin from the block
page.
So we'll say admin@ogit.com, or whatever the domain is.
And if we want to include a custom logo, we could as well.
So I'll click on Save.
Fantastic.
So now what we've done is we've created custom destination
lists regarding who we want to block or permit. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
lists regarding who we want to block or permit.
We have a custom content category,
identifying certain categories that we want to deny, and--
oh, did I not click Save?
And under Content Categories, our custom content
filtering, it says, content categories blocked zero.
Let me expand that.
I thought-- oh, my gosh.
I must not have clicked Save.
Well, let's do alcohol so we have something to test with.
I'm glad I double-checked.
So we'll say alcohol is not allowed, because we
can test that very easily.
Click on Save.
Now it has one blocked.
I'm going to check all these.
So Destination Lists, we've got one domain. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So Destination Lists, we've got one domain.
Content Categories, we've got one category.
Application Settings, we have 13.
Fantastic.
Security Settings, here they are.
And we're seeing in our Security Settings
that all these are going to be denied.
And then Block Page Appearance, we have our custom Block page.
So I'm glad I checked that list.
Now, the key is we have all these custom ingredients,
but we have this default policy, which doesn't include
by default any of those.
So in the next video, here's what I'd like to do.
Let's create a new policy. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Let's create a new policy.
And as part of that new policy, we'll
integrate or add in all those individual components
that we just configured to have a holistic brand new policy
with all those details as part of it.
So we'll continue that in the next video.
See you there in just a moment.
Meanwhile, I hope this has been informative for you.
And I'd like to thank you for viewing.