Configuring a Profile for the DNS Proxy

Jamf School Documentation

Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US
  1. Download the generic profile from the Umbrella dashboard.
  2. Use the following example to edit the profile.
    Important:

    Do not copy the text below, this is only an example and is not functional. Only use the generic download configuration from your dashboard.

    <?xml version="1.0" encoding="UTF-8"?>
    <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
    <plist version="1.0">
    <dict>
    	<key>PayloadContent</key>
    	<dict>
    		<key>AppBundleIdentifier</key>
    		<string>com.cisco.ciscosecurity.app</string>
    		<key>PayloadDescription</key>
    		<string>Cisco Umbrella</string>
    		<key>PayloadDisplayName</key>
    		<string>Cisco Umbrella</string>
    		<key>PayloadIdentifier</key>
    		<string>com.apple.dnsProxy.managed.{pre-filled in the download}</string>
    		<key>PayloadType</key>
    		<string>com.apple.dnsProxy.managed</string>
    		<key>PayloadUUID</key>
    		<string>{pre-filled in the download}</string>
    		<key>PayloadVersion</key>
    		<integer>1</integer>
    		<key>ProviderBundleIdentifier</key>
    		<string>com.cisco.ciscosecurity.app.CiscoUmbrella</string>
    		<key>ProviderConfiguration</key>
    	</dict>
    	<array>
    		<dict>
    			<key>disabled</key>
    			<false/>
    			<!-- Copy from here to paste into the Jamf School UI to provision a DNS proxy -->
    			 <dict>
    				 <key>disabled</key>
    				 <false/>
    				 <key>internalDomains</key>
    				 <array>
    					 <string>10.in-addr.arpa</string>
    					 <string>16.172.in-addr.arpa</string>
    					 <string>17.172.in-addr.arpa</string>
    					 <string>18.172.in-addr.arpa</string>
    					 <string>19.172.in-addr.arpa</string>
    					 <string>20.172.in-addr.arpa</string>
    					 <string>21.172.in-addr.arpa</string>
    					 <string>22.172.in-addr.arpa</string>
    					 <string>23.172.in-addr.arpa</string>
    					 <string>24.172.in-addr.arpa</string>
    					 <string>25.172.in-addr.arpa</string>
    					 <string>26.172.in-addr.arpa</string>
    					 <string>27.172.in-addr.arpa</string>
    					 <string>28.172.in-addr.arpa</string>
    					 <string>29.172.in-addr.arpa</string>
    					 <string>30.172.in-addr.arpa</string>
    					 <string>31.172.in-addr.arpa</string>
    					 <string>168.192.in-addr.arpa</string>
    					 <string>local</string>
    				 </array>
    				 <key>logLevel</key>
    				 <string>verbose</string>
    				 <key>orgAdminAddress</key>
    				 <string>{pre-filled in the download}</string>
    				 <key>organizationId</key>
    				 <string>{pre-filled in the download}</string>
    				 <key>regToken</key>
    				 <string>{pre-filled in the download}</string>
    				 <key>serialNumber</key>
    				 <string>%SerialNumber%</string>
    			 </dict>
    			<!-- End copy -->
    		</dict>
    	</array>
    	<key>PayloadDisplayName</key>
    	<string>Cisco Security</string>
    	<key>PayloadIdentifier</key>
    	<string>com.cisco.ciscosecurity.app.CiscoUmbrella.{pre-filled in the download}</string>
    	<key>PayloadRemovalDisallowed</key>
    	<false/>
    	<key>PayloadType</key>
    	<string>Configuration</string>
    	<key>PayloadUUID</key>
    	<string>{pre-filled in the download}</string>
    	<key>PayloadVersion</key>
    	<integer>1</integer>
    </dict>
    </plist>
  3. Create a new profile in Jamf School. For more information, see Device Profiles.
  4. Use the DNS Proxy payload to configure the following settings:
    1. Enter com.cisco.ciscosecurity.app in the App Bundle ID field.
    2. Enter com.cisco.ciscosecurity.app.CiscoUmbrella in the Provider Bundle ID field.
  5. Copy and paste the designated section of the Cisco Profile from step 2 into the Provider Configuration window.