What is required for on-network Cisco Umbrella deployment that requires local IP granularity to enable granular policy control and reporting on a per-network basis?

For on-network Cisco Umbrella deployment that requires local IP granularity to enable granular policy control and reporting on a per-network basis, you would need to deploy Cisco Umbrella Virtual Appliances (VAs). Here's how it works:

1. Deploy Cisco Umbrella Virtual Appliances: The VAs are lightweight virtual machines that you deploy in your network. They act as DNS forwarders that send DNS queries from your network to the Cisco Umbrella cloud infrastructure.

2. Configure Internal Networks: In the Cisco Umbrella dashboard, you need to configure your internal networks. This involves specifying the IP addresses of your internal networks.

3. Assign Policies: You can then assign policies to these internal networks. These policies determine what kind of traffic is allowed or blocked for devices on these networks.

4. Install Cisco Umbrella Roaming Client: For devices that leave the network, you can install the Cisco Umbrella Roaming Client. This ensures that the devices are still protected by Cisco Umbrella even when they're off the network.

5. Configure DNS Settings: The DNS settings on your network devices need to be updated to point to the VAs. This ensures that all DNS queries from your network are routed through the VAs and then to Cisco Umbrella.

By deploying VAs and configuring your internal networks and policies, you can achieve local IP granularity for on-network Cisco Umbrella deployment.