Sites and Internal Networks

In the context of virtual appliances (VAs), Umbrella sites represent the physical location of your network, and specifically the internet egress point—the DNS egress point.

Having separate Umbrella sites is important for identifying the physical location of the VAs, the association of network traffic, and logical automatic updating of the VAs.

Table of Contents

Before You Begin

If you intend to implement Active Directory integration, in addition to Umbrella virtual appliances (VAs), see Connect Multiple Active Directory Domains to Umbrella. Use cases and guidelines differ slightly.

Sites and VAs are only required for DNS-based deployments. When using an Umbrella Cloud-Delivered Firewall (CDFW) deployment alone, sites and VAs are not required.

Manage Umbrella Sites

If you are deploying VAs at multiple locations and if the internal IP space of each site location overlaps or is shared, you must set up multiple Umbrella sites. For each office with VAs, a separate Umbrella site can be added to group VAs together with a label. Note that you must do this when the IP space overlaps.

1. Navigate to Deployments > Configuration > Sites and Active Directory.