Why Is Cisco Umbrella Blocking Websites

When you attempt to visit a website, your computer sends a DNS request to resolve the domain name (e.g., example.com ) to an IP address. Cisco Umbrella – Information Guide - IT Help

Sophisticated attackers use DNS queries to exfiltrate data (steal information) out of a network. Since DNS traffic is usually allowed through firewalls, attackers hide stolen data inside DNS requests. Umbrella inspects DNS traffic specifically to detect this tunneling behavior and blocks the domains involved in these exfiltration attempts. why is cisco umbrella blocking websites

When a website is blocked, the user typically sees a Cisco Umbrella block page with a message like: “Access to this site has been blocked.” Often, the page provides a reason code, such as “Security” (malware/phishing), “Category” (e.g., Adult, Social Media), or “Custom.” Some pages even offer an option for the user to request access from their administrator. When you attempt to visit a website, your

If you need to access a website that is currently blocked, you can submit a request to our IT department. We will review the request and determine if the website can be unblocked based on our organization's security policies and procedures. Umbrella inspects DNS traffic specifically to detect this