Enterprise security and networking are facing a significant transformation. Wide-scale adoption of cloud applications, an increase in remote workers, and expansion of branch offices has rendered the centralized, on-premises security model impractical. The convenience, cost savings, and performance benefits of going direct to the internet is driving a new decentralized approach to networking. Yet with change comes risk and a new set of security challenges. Organizations require a broader set of protection that not only improves security, but simplifies management.
Integrated security from the cloud
Cisco Umbrella is a cloud-native platform that delivers the most secure, reliable, and fastest internet experience to more than 100 million users daily. Umbrella unifies firewall, secure web gateway, DNS-layer security, cloud access security broker (CASB), and threat intelligence solutions into a single platform to help businesses of all sizes secure their network. As more organizations embrace direct internet access, Umbrella makes it easy to extend protection to roaming users and branch offices.
Better intelligence drives better security
Leveraging insights from Cisco Talos, one of the world’s largest commercial threat intelligence teams with more than 300 researchers, Umbrella uncovers and blocks a broad spectrum of malicious domains, IPs, URLs, and files that are being used in attacks. We also feed huge volumes of global internet activity into a combination of statistical and machine learning models to identify new attacks being staged on the internet.
Block malware easily
Built into the foundation of the internet, Umbrella processes 180 billion internet requests for more than 18,500 businesses every day. By enforcing security at the DNS and IP layers, Umbrella blocks requests to malware, ransomware, phishing, and botnets before a connection is even established
— before they reach your network or endpoints. The cloud-delivered secure web gateway logs and inspects all web traffic for greater transparency, control, and protection. The cloud-delivered firewall helps to log and block traffic using IP, port, and protocol rules for consistent enforcement throughout your environment.
Speed up and improve incident response
Umbrella categorizes and retains all internet activity to simplify your investigation process and reduce incident response times. And, by using the Umbrella Investigate console and on-demand enrichment API, you have access to insights (historical and contextual) to prioritize incidents and speed up incident response. Plus, it easily integrates with other intelligence sources and security orchestration tools for better management.
Packaging options
Our packages were designed to provide the right fit for all organizations. From small businesses without dedicated security professionals to multinational enterprises with complex environments, Umbrella provides more effective security and internet-wide visibility on and off your network. All packages can be integrated with your Cisco SD-WAN implementation to provide a combination of performance, security, and flexibility that delights both your end users and security team.
The Umbrella DNS Security Essentials package includes core DNSlayer security capabilities, to block requests to malicious domains before they reach your network or endpoints. You gain off-network protection and mobile support in this base package, as well as access to Umbrella’s APIs (policy, reporting and enforcement), log exporting, the multi-org console, integration with Cisco Threat Response, and identity-based policies (virtual appliance + Active Directory connector). Additionally, this package provides discovery and blocking of shadow IT (by domain) with the App Discovery report.
The Umbrella DNS Security Advantage package includes all the capabilities of DNS Security Essentials plus it enables organizations to proxy risky domains for URL blocking and file inspection using AV engines and Cisco AMP. For organizations looking for deeper context during incident investigations, DNS Security Advantage offers unmatched threat intelligence in the Investigate console and on-demand enrichment API.
The Umbrella SIG Essentials package includes all of the capabilities of the DNS Security Advantage package plus access to a secure web gateway (full proxy), cloud-delivered firewall, sandbox file analysis with Cisco Threat Grid, and cloud access security broker (CASB) functionality. With a single, cloud platform, you can combine multiple security services and threat intelligence to secure your network and remote and roaming users with confidence. Simplify management and get visibility to control and manage apps, anywhere.
The Umbrella advantage
Umbrella has a highly resilient cloud infrastructure that boasts 100% uptime since 2006. Using Anycast routing, any of our 30 plus data centers across the globe are available using the same single IP address. As a result, your requests are transparently sent to the nearest, fastest data center and failover is automatic. Umbrella peers with more than 900 of the world’s top internet service providers (ISPs), content delivery networks (CDNs) and SaaS platforms to deliver the fastest route for any request — resulting in superior speed, effective security and the best user satisfaction.