Cisco Umbrella

Enterprise network security

Search

Cisco Umbrella data loss prevention (DLP)

Block sensitive data in outbound web traffic from leaving your organization

Schedule a demo

Cisco Umbrella data loss prevention feature in dashboard

Protect your sensitive data in the cloud, or before it even gets there

Umbrella multimode cloud data loss prevention (DLP) functionality analyzes outbound web traffic inline and out-of-band to provide unified control over sensitive data leaving your organization. It’s easy to deploy and manage with flexible policies incorporating pre-built, customizable data identifiers.

With Umbrella multimode cloud DLP, you can:

  • Mitigate the risks of organizational generative AI application usage
  • Inspect data inline in real time with full SSL inspection via SWG proxy
  • Use SaaS API-based scanning to inspect data out-of-band at rest without SWG proxy but with near real-time enforcement
  • Unify inline and out-of-band policies and reporting in a single interface
  • Create flexible, customizable policies with 80+ pre-built dictionaries
  • Meet compliance requirements

Did you know?
Umbrella SIG has evolved to Secure Access SIA

Building on Cisco Umbrella’s proven security, Cisco Secure Access SIA (Secure Internet Access) delivers even more advanced AI-powered protection and control over your cloud applications. Discover how you can get more advanced security features.

Contact a security expert Learn about the evolution

Cloud app usage can lead to data loss

As more companies move critical enterprise data to cloud-based services, company data becomes more vulnerable to both malicious exfiltration and unintentional misuse by inexperienced users.

58%

of data breaches involve personal data1

64%

of employees have access to 1,000 or more sensitive files2

Data loss prevention using enforcement that works together

The most effective security comes from a layered approach. Umbrella integrates multiple components that were once standalone security services and appliances in a single, cloud-native solution.

First, Umbrella checks for domains associated with malware using DNS-layer security. Next, the cloud-delivered firewall (CDFW) checks for IP, port, protocol, and application rules. Next, the secure web gateway (SWG) checks all web traffic for malware and policy violations. Finally, Umbrella DLP functionality monitors and blocks sensitive data transmission in outbound web traffic.

Learn more

illustration of how data loss prevention works within the Umbrella framework

1. Verizon, 2020 Data Breach Investigation Report, 2020; 2. Varonis, 2021 Global Data Risk Report, 2021

LinkedIn Youtube