(Hide) Chromebook-specific DNS Policy

Add a Chromebook-specific DNS policy to Umbrella and protect all Chromebook devices connected to your network. Once added, place this Chromebook-specific DNS policy at the top of your policies list so that it is evaluated first. This ensures that this Chromebook-specific DNS policy is applied to your Chromebooks before any other DNS policy is evaluated. For more information about adding a DNS policy, see Add a DNS Policy.

Note: To maintain end-user privacy when Chromebooks are connected at remote locations, you can also disable Content Logging and include only security-related events in your reporting.

Table of Contents

• Prerequisites
• Procedure

Prerequisites

• Cisco Security for Chromebook client must be deployed. For more information, see Deploy the Chromebook Client.
• Cisco Secure Access root certificate must be installed. To avoid certificate errors when accessing an Secure Access block page, you must install the Cisco Secure Access root certificate on all Chromebook devices. See Install the Cisco Secure Access Root Certificate.
• You must have full admin access to the Umbrella dashboard. See Manage Accounts.

Procedure

1. Navigate to Secure > Policy > Internet Policies.
2. Click Add.
   The DNS Policy wizard opens.
3. Select the Policy wizard components you'd like enabled and determine how Secure Access will block threats.
   The options you choose here determine the steps of the Policy wizard that become available for configuration and how this policy protects your identities.
4. Select G Suite OUs, G Suite Users, and Chromebooks identities as required:

• G Suite OUs — To apply a DNS policy to one or more G Suite Organizational Units.
• G Suite Users — To apply a DNS policy to one or more Chromebook users.
• Chromebooks — To apply a DNS policy to one or more Chromebook devices.

4. Click Next and continue through the DNS policy wizard until you are prompted to save it. For more information, see Add a DNS Policy.
5. Give your DNS policy a meaningful name and click Save.
   Your policy is automatically applied to Chromebooks.
   Note: Cisco recommends that you place the Chromebook specific DNS policy at the top of the list of policies.

View Protection Status of Chromebook Devices > Chromebook-specific DNS Policy > Chromebook Client FAQs