Question about disable DNS redirection on Umbrella protected Networks

[Chess Norris]

Hello,

I found the option to disable DNS redirection on Umbrella protected Networks a bit confusing.

Does it means the the function is disable when the slider is in off position or set to on?

You would think that pushing the sliders to on position, will enable the function, but when in off position, it says "DNS redirection is currently disable", so it's like a double negative. Does someone know how it works?

Thanks

/Chess

[davidjohn232]

DNS is denial of services. But what does it actually do? I mean does it prevent us from DOS and DDOS attack one piece. Why can't we turn this off?

[Jay Ponce · Accepted solution]

When its off it means the feature is enabled and when you turn it on the feature gets disabled.

This feature is to have a roaming client with the Umbrella module under the Anyconnect (see attached screenshot) turned off forwarding all of the DNS traffic to OpenDNS and it will be able to utilize the network policy you have configured under Umbrella portal for known connections (On-Premises).