Manage Internet Security Bypass

You can configure internet security in Cisco Secure Access for end users.

Note: User devices must have the Cisco Secure Client deployed with the Umbrella Roaming Security module or deploy a PAC file on the browsers in the environment.

This guide describes the steps to add domains in Secure Access where DNS requests for these domains bypass the Secure Access Secure Web Gateway (SWG) or the Secure Access DNS resolvers. For more information, see Manage Domains.

Table of Contents

• Prerequisites
• Procedure

Prerequisites

• Full Admin user role. For more information, see Manage Accounts.

Procedure

Add domains to your list of bypass domains. Domains that are added in Secure Access bypass the Secure Access DNS resolvers. Requests for these domains will instead use local DNS resolvers or directly access the Internet without using the Secure Web Gateway (SWG).

Steer Traffic to Secure Access or Bypass Domains

1. Navigate to Connect > End User Connectivity > Internet Security , and then click Add Destination.

   

2. Choose Bypass Secure Access to bypass the Secure Access SWG and DNS servers.
   a. For Destination, enter a domain name.
   b. For Description, enter text that describes this domain. The description is optional.
   c. For Applies To, choose the Secure Access Sites that should bypass the domain.

   

3. Choose Bypass web proxy only to bypass the Secure Web Gateway (SWG).
   a. For Destination, enter a domain name.
   b. For Description, enter text that describes this domain. The description is optional.

   

4. Click Save.

List Bypass Domains in Secure Access

After you add the bypass domains in Secure Access, you can view the details about the domains.

1. Navigate to Connect > End User Connectivity > Internet Security.

2. View the bypass domains that you added in Secure Access.

   • Domain Name—The name of the bypass domain.
   • Description—The text that describes the bypass domain.
   • Intent—The type of bypass domain.
   • Applies to—The name of a Site or the location of the Secure Access Virtual Appliance (VA) deployment where the domain is bypassed.
   • Actions—The actions to manage the domain in Secure Access.

Set Up Internet Security on User Devices < Manage Internet Security Bypass > Configure Cisco Secure Client Settings