<div dir="ltr">are you using an always connected VPN configuration? Like Mike said. in our environment, our umbrella VM's point to the internal DNS servers. Outside our corporation Umbrella uses the external DNS (hosted elsewhere). I don't understand why you are getting the same response both internally and externally.<div><br></div><div>Scott</div><div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Sep 24, 2019 at 6:27 PM Brian Meade <<a href="mailto:bmeade90@vt.edu">bmeade90@vt.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="auto">Issue would be a corporate PC with umbrella going off-site. If you add your internal domains, it would get the _cisco-uds record always rather then _collab-edge.</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Sep 24, 2019, 6:34 PM Norton, Mike <<a href="mailto:mikenorton@pwsd76.ab.ca" target="_blank">mikenorton@pwsd76.ab.ca</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-CA">
<div class="gmail-m_728328805929720384m_-4503680026272563982WordSection1">
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Have never used Umbrella for external clients, but I would be very surprised if it somehow magically exposed your “local” domains to
external clients. Internal clients use the internal Umbrella virtual appliance to resolve names, and if the request is for a domain defined as “local”, the virtual appliance then uses the internal DNS server to resolve the name. External clients would not
have access to the internal virtual appliance nor to the internal DNS server, so it should not be possible for external clients to get internal answers. IIRC the list of “local” domains is per “site” and external clients would not be in scope for the site.<br>
<br>
Defining a local domain is probably what you want.<br>
<br>
I could be wrong though - stopped using Umbrella after Cisco bought it and tried to more than quadruple the pricing on us.<br>
<br>
-mn<br>
<br>
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11pt;font-family:Calibri,sans-serif">From:</span></b><span lang="EN-US" style="font-size:11pt;font-family:Calibri,sans-serif"> cisco-voip <<a href="mailto:cisco-voip-bounces@puck.nether.net" rel="noreferrer" target="_blank">cisco-voip-bounces@puck.nether.net</a>>
<b>On Behalf Of </b>Brian Meade<br>
<b>Sent:</b> September 24, 2019 12:37 PM<br>
<b>To:</b> cisco-voip voyp list <<a href="mailto:cisco-voip@puck.nether.net" rel="noreferrer" target="_blank">cisco-voip@puck.nether.net</a>><br>
<b>Subject:</b> [cisco-voip] Jabber MRA with Cisco Umbrella<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">Has anyone been able to get this to work?<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Umbrella always finds the _collab-edge SRV record even when internally. I imagine if we made the voice services domain a local domain we would have the reverse issue of always seeing _cisco-uds even when external.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Any Umbrella features that could help here?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Thanks,<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Brian Meade<u></u><u></u></p>
</div>
</div>
</div>
</div>
</blockquote></div>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" rel="noreferrer" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
</blockquote></div>