The dns server is waiting for active directory domain services to signal that the initial sync

Protected by VA at the DNS Layer-The Umbrella roaming client has detected a VA on the network and is deferring to it (can include both DNS and IP Layers). This can include IP Layer Enforcement, or not, depending on the policy. Protected & Encrypted at the DNS Layer-Same as protected, but the DNS queries are encrypted in transit. Protected-The appropriate policy settings in the Umbrella dashboard are being enforced the computer can communicate with Umbrella's DNS servers. The current state of the Umbrella roaming client. Probes are frequent DNS requests performed by the Umbrella roaming client that acts as a health check and analysis of the networking environment.

The state of the Umbrella roaming client determines: This state determines how the Umbrella roaming client behaves and determines which Cisco Umbrella policy should be applied. The state that the Umbrella roaming client operates in depends on the current networking environment.

For detailed descriptions, see Roaming Computer Information and Tray Icon Status. The status of the Cisco Umbrella roaming client-which displays the current state of the Umbrella roaming client-is shown both in the Umbrella dashboard at Deployments > Core Identities > Roaming Computers and on the local machine through the roaming client's tray icon.

Advanced: How the Umbrella Roaming Client Changes States.

The dns server is waiting for active directory domain services to signal that the initial sync