Secure and reliable DNS-layer security
DNS security protects users and networks by blocking access to malicious threats before they reach endpoints.
Operating at the DNS-layer, DNS security remains transparent to your users while accelerating connection requests, blocking malicious traffic, and mitigating data exfiltration.
Cisco offers two DNS security options that provide fast, reliable DNS-layer protection in minutes and block threats on the internet with recursive DNS services: Umbrella DNS and Secure Access – DNS Defense.
Umbrella DNS or Secure Access – DNS Defense, what’s the difference?
Cisco Umbrella’s DNS Security is evolving to Secure Access – DNS Defense. Now you can get all Umbrella DNS features and much more for the same price.
Building on Cisco Umbrella’s proven security with more than 30,000 customers globally, Cisco Secure Access – DNS Defense is a foundational DNS security solution that can also expand to a full Security Service Edge (SSE) solution over time, allowing organizations to evolve and expand their security protection at their own pace.
Key features of Cisco’s DNS Security Essentials packages
- Includes a sophisticated set of DNS-layer security threat-blocking capabilities
- Deploy within minutes for added protection right away
- Boost security and uptime without adding latency
- Filter traffic and block domains carrying malware, botnets, and more
- View activity in real-time using APIs to identify and extract critical events
- Secure Access – DNS Defense only: Expanded capabilities include cloud data loss prevention (DLP) and cloud malware detection
Put an end to security gaps
Improved visibility
Monitoring DNS requests allows organizations to detect compromised systems early, reducing the security team’s alert fatigue.
Proactive threat detection
Leverage threat intelligence from Cisco Talos to proactively identify and block requests to risky domains, IP addresses, URLs, and files used in attacks.
Easy implementation
As a software-as-a-service (SaaS) solution, Cisco’s DNS-layer security is simple to implement and manage.
Enforce content filtering
Cisco uses more than 100 category-based content filters to block malicious and risky domains, allowing you to create customized add/block lists. Gain control over which sites can be accessed by users and easily enforce and comply with acceptable use policies.
Improve performance
Cisco’s highly resilient cloud infrastructure has been operational for nearly two decades. Anycast routing allows global data centers to use the same single IP address, so your requests are transparently sent to the nearest data center and failover is automatic.
Get seamless Meraki deployment
Deploy instantly across a Cisco Meraki wi-fi network. Keep users protected by blocking suspicious or harmful domains associated with phishing, malware, ransomware, C2 callbacks, and more, without increasing latency.
Benefits of Cisco’s Security Essentials packages
Processing 820+ billion internet requests daily, from more than 30,000 businesses globally, Cisco’s DNS security products, Umbrella and Secure Access, deliver unmatched visibility into DNS activity with rich APIs that makes them simple to integrate into your security stack.
On-network deployment: Any network device (e.g. router, DHCP server, firewall) can be used to connect to Umbrella or Secure Access. Simply redirect your DNS to Umbrella’s or Secure Access’s IP address. That’s it. You can also leverage your existing Cisco footprint — Cisco Secure Client, Cisco ISRs, Cisco SD-WAN, Cisco Meraki MR and MX, Cisco Wireless LAN Controllers, Cisco ASA, Cisco Secure Firewall, Catalyst Routing and Switching — to support thousands of devices in minutes.
Off-network deployment: Cisco protects Windows, MacOS, Chrome OS, and unmanaged and managed iOS and Android devices, outside the network security perimeter — without sacrificing performance.
