Prerequisites for Configuring Umbrella SASE Tunnels

You must have a Cisco Umbrella Secure Internet Gateway (SIG) Essentials subscription.

You must enable your Smart License account with the export-controlled features to deploy tunnels on Umbrella from the management center. If this license is not enabled, you can only create a SASE topology. You cannot deploy tunnels on Umbrella.

You must establish an account with Cisco Umbrella at https://umbrella.cisco.com, log into Umbrella at http://login.umbrella.com, and obtain the required information to establish connection to Cisco Umbrella.

You must register Cisco Umbrella with the management center and configure the management key and the management secret in the Cisco Umbrella Connection Settings. The management center requires the management key and management secret to fetch the datacenter details from the Cisco Umbrella cloud. You must also configure the Organization ID, Network Device Key, Network Device Secret, and the Legacy Network Device Token in the Cisco Umbrella Connection Settings.

For more information, see:

• Configure Cisco Umbrella Connection Settings

• Map Management Center Umbrella Parameters and Cisco Umbrella API Keys

Ensure that Umbrella data center is reachable from the threat defense.

You can deploy a tunnel only between Cisco Umbrella and a threat defense version 7.1.0 and later.