How does Cisco Umbrella differentiate which policy to apply for incoming DNS requests?

Each customer uses a unique set of DNS resolvers, which are configured with a policy specific for the customer.

Cisco Umbrella users must specify which policy to accept or reject in their Cisco Umbrella client.

Cisco Umbrella applies the policy based on the source IP of the DNS request, unless the request comes from the Cisco Umbrella Roaming Client.

The policy is uploaded from the administrative console to the Cisco Umbrella dashboard and includes a list of client$-$to$-$policy binding in CSV format.