DNS-layer security used by hundreds of millions globally
Every day, Cisco’s two DNS security products, Umbrella and Secure Access, power a secure, reliable, and fast internet experience for hundreds of millions of global users. By enforcing security at the DNS-layer, they block requests to malicious domains before a connection is even made, proactively safeguarding your users and your network.
Umbrella DNS or Secure Access – DNS Defense, what’s the difference?
Cisco Umbrella’s DNS Security has evolved to Secure Access – DNS Defense. Now you can get Umbrella DNS features and much more with Secure Access – DNS Defense.
Building on Cisco Umbrella’s proven security with more than 30,000 customers globally, Cisco Secure Access – DNS Defense is a foundational DNS security solution that can also expand to a full Security Service Edge (SSE) solution over time, allowing organizations to evolve and expand their security protection at their pace.
Cisco DNS security resolves pressing issues
Address the most pressing cybersecurity issues instantly with Cisco DNS-layer security. These issues include:
Malware and ransomware
Gaps in visibility and coverage
Complexity of security tools
Limited security resources
Stop threats before they hit your network or endpoints
Most companies leave their DNS resolution up to their ISP. However, a DNS blind spot can be created as more organizations adopt direct-to-Internet connections that bypass VPNs. With Cisco DNS-layer security, DNS requests precede the IP connection, allowing the DNS to log requested domains regardless of the port or protocol. DNS-layer security can then block requests to malware, ransomware, phishing attempts, and botnets before a connection is even established.
Enhanced protection for a remote workforce
Deploy Cisco DNS-layer security and gain a new layer of protection in mere minutes while reducing bandwidth costs and simplifying security management. Cisco APIs allow other security solutions to leverage Cisco’s industry-leading threat intelligence to identify risky destinations and block them. This means you’ll benefit from extended mitigation everywhere, no matter where users log in.
Key features of Cisco’s DNS Security products
- Discover and block shadow IT (based on domains) with the App Discovery report
- Proxy and decrypt risky domains for deeper inspection of URLs and files
- Enable web filtering with 85+ domain content categories
- Create custom allow and block lists
- Protect mobile and roaming users who are off network
- Secure Access – DNS Defense only: Extended capabilities include cloud data loss prevention (DLP) and cloud malware detection.
Put an end to security gaps
Increased transparency
Don’t leave your DNS resolution to your ISP. This can lead to a huge blind spot as more users bypass the VPN and connect directly to the internet. By monitoring DNS requests, Cisco’s DNS-layer security can easily increase visibility and detect systems that have been compromised.
Dynamic threat detection
Cisco DNS-layer security leverages threat intelligence from Cisco Talos to proactively identify and block requests to risky domains, IP addresses, URLs, and files used in attacks. This advanced intelligence allows organizations to better protect critical infrastructure from the newest threats without delay or performance impact.
Quick implementation
Cisco’s DNS-layer security is simple to deploy and maintain. Integrations are a breeze through multiple API’s. And since DNS-layer security stops threats at the earliest possible point, you will notice a dramatic reduction in the number of infections and alerts that you need to remediate.
Benefits of Cisco’s DNS Security products
Processing 820+ billion Internet requests daily, from more than 30,000 businesses globally, Cisco’s DNS security products, Umbrella DNS and Secure Access – DNS Defense, deliver unmatched visibility into DNS activity with rich APIs that make them simple to integrate into your security stack.
On-network deployment: Any network device (e.g. router, DHCP server, firewall) can be used to connect to Umbrella and Secure Access. Simply redirect your DNS to Umbrella’s or Secure Access’s IP address. That’s it. You can also leverage your existing Cisco footprint — Cisco Secure Client, Cisco ISRs, Cisco SD-WAN, Cisco Meraki MR and MX, Cisco Wireless LAN Controllers, Cisco ASA, Cisco Secure Firewall, Catalyst Routing and Switching — to support thousands of devices in minutes.
Off-network deployment: Cisco protects Windows, MacOS, Chrome OS, and unmanaged and managed iOS and Android devices, outside the network security perimeter — without sacrificing performance.
