Cisco Umbrella

Umbrella is built into the foundation of the internet and delivered from the cloud, it provides complete visibility into internet activity across all locations and users, customers can stop phishing and malware infections earlier, identify already infected devices faster, and prevent data exfiltration or encryption by containing C&C callouts. 

1. The First line of defense -   Cisco Umbrella provides the first line of defense against threats on the internet wherever users go, applying security across the DNS layer. DNS security reduces threats by 70% before they hit the firewall. 

2. The fastest way of protection - No other security product can be deployed faster. Umbrella’s protection can be deployed in minutes, enterprise-wide, and then you can add other security controls over time (secure web gateway, cloud-delivered firewall, etc.) 

3. Block attacks earlier – Blocks malicious requests before they reach a customer’s network or endpoints. Blocks malicious threats before a connection is ever established.  

4. Protects against malware, phishing, ransomware, C2 Callbacks 

5. Block domains associated with malware, phishing, command and control callbacks anywhere 

6. Contain malware if already inside the network 

7. Easily enforce web filtering using content 100+ content categories - uses Talos categories for both content and security (We are also a member of the Internet Watch Foundation (IWF), enabling you to block their list of child sexual abuse sites.)

8. Manage and block cloud apps - Layer 7 protection 

9. Deploy enterprise wide in minutes  

   1. • All office locations 

      • Any device on your network  

      • Roaming laptops and supervised iOS devices 

      • Every port and protocol  

10. Dynamic - realtime cloud updates 

11. Single cloud console - Umbrella combines all of this functionality and reporting along with DNS security and a Cloud Delivered Firewall (CDFW) capabilities in a single cloud console. 

12. Amazing user experience — faster internet access; only proxy risky domains 

Cisco Umbrella DNS Security and Secure Internet Gateway are licensed per seat. A seat is defined as an Internet-connected user who may have access to the service. Seat counts are independent of the number of devices or endpoints protected. 

NOTE: Minimum Qty 1

Recognitions

• Cisco Umbrella Blog  https://umbrella.cisco.com/blog/category/spotlight 

• Frost & Sullivan: Recognizing Leadership in Secure Web Gateway Solutions https://umbrella.cisco.com/blog/frost-sullivan-recognizing-leadership-in-secure-web-gateway-solutions 

• Cisco Umbrella: A Leader in the GigaOm Radar for DNS Security https://umbrella.cisco.com/blog/cisco-umbrella-a-leader-in-the-gigaom-radar-for-dns-security

Prerequisite  for Umbrella Agent Deployment

https://docs.umbrella.com/deployment-msp/docs/prerequisites-for-roaming-client

DLP

• OCR for Data Loss Prevention (DLP) leverages machine learning to extract text from images.

Reference - https://support.umbrella.com/hc/en-us/articles/26221179925524-OCR-for-DLP

Supported File Types - https://docs.umbrella.com/umbrella-user-guide/docs/supported-file-types

Troubleshooting

• https://policy-debug.checkumbrella.com/ Returns the results of the policy debug from the affected computer. 

• https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/Cisco-Secure-Client-5/admin/guide/b-cisco-secure-client-admin-guide-5-0/troubleshoot-anyconnect.html How to collect the DART bundle for Anyconnect

• https://welcome.umbrella.com whether your network, computer or device correctly using Umbrella for DNS resolution

• http://www.internetbadguys.com whether your identities are correctly configured to block sites based on security settings

• http://www.exampleadultsite.com whether your identities are correctly configured to block sites based on content settings.