Cisco Umbrella & Google Classroom: A Guide

TL;DR

Yes, Cisco Umbrella can be used with Google Classroom. It won’t directly integrate *into* Classroom, but you can protect students using devices while they access Classroom through a web browser or managed apps. This guide explains how to set it up and what to expect.

Setting Up Cisco Umbrella for Google Classroom

1. Understand How Umbrella Works: Cisco Umbrella is a cloud-delivered security service that blocks malicious websites, phishing attempts, malware downloads, and command & control traffic. It works by inspecting DNS requests (the process of translating website names into IP addresses).
2. Choose Your Deployment Method: There are several ways to deploy Umbrella:
   • Roaming Client: Install the Umbrella client on student devices (laptops, Chromebooks). This is the most comprehensive option.
   • Browser Extension: Use the Umbrella browser extension for Chrome and other browsers. Good for managed school-owned devices.
   • DNS Forwarding: Configure your school’s network to forward DNS requests through Umbrella. This protects all devices on the network, but doesn’t offer per-device reporting.
3. Install the Roaming Client (if applicable):
   1. Download the appropriate client from the Cisco Umbrella dashboard (https://dashboard.umbrella.com). You’ll need an active Umbrella subscription and administrator access.
   2. Run the installer on each student device. You may need administrative privileges.
   3. Verify the client is running and connected to your Umbrella account.
4. Deploy the Browser Extension (if applicable):
   1. Log in to the Google Admin console (https://admin.google.com).
   2. Navigate to Devices > Chrome > Extensions.
   3. Upload the Umbrella browser extension CRX file (downloadable from the Umbrella dashboard).
   4. Set the installation policy to ‘Force install’ or ‘Allow install’ depending on your school’s requirements. ‘Force install’ is recommended for managed devices.
5. Configure DNS Forwarding (if applicable):
   1. In the Umbrella dashboard, go to Settings > DNS Settings.
   2. Follow the instructions provided by Cisco to configure your school’s DNS servers to forward requests to Umbrella’s DNS resolvers. This typically involves updating settings on your firewall or router.
6. Create Policies: In the Umbrella dashboard, create policies to block categories of websites that are inappropriate for students (e.g., adult content, gambling, social media). You can also create custom blocklists.
   • Go to Policies > New Policy.
   • Give your policy a descriptive name.
   • Select the appropriate sites or categories to block.
   • Apply the policy to the devices or groups you want to protect (e.g., all student laptops).
7. Test Your Configuration: Access Google Classroom from a test device to ensure that Umbrella is blocking unwanted content and allowing legitimate access.
   • Try visiting blocked websites while connected to the internet through your school network or with the client/extension running.
   • Check the Umbrella dashboard for DNS query logs to verify that requests are being processed correctly.

Important Considerations

• False Positives: Occasionally, legitimate websites may be incorrectly blocked (false positives). You can unblock them in the Umbrella dashboard.
• Reporting: The Roaming Client provides detailed reporting on website access and blocked threats. Use this information to refine your policies.
• Managed vs. Unmanaged Devices: Ensure you have a clear policy for protecting both school-owned (managed) and student-owned (unmanaged) devices.
• Google Workspace Integration: Umbrella does not directly integrate with Google Workspace features like Drive or Docs. It protects access to these services through the web browser.