Cisco Umbrella is a cloud security platform that provides the first line of defense against threats on the internet wherever users go.
Cisco Umbrella uses the internet’s infrastructure to block malicious destinations before a connection is ever established. By delivering security from the cloud, not only do you save money, but we also provide more effective security.
Umbrella uses DNS to stop threats over all ports and protocols — even direct-to-IP connections. Stop malware before it reaches your endpoints or network.
Instead of proxying all web traffic, Umbrella routes requests to risky domains for deeper URL and file inspection. Effectively protect without delay or performance impact.
Even if devices become infected in other ways, Umbrella prevents connections to attacker’s servers. Stop data exfiltration and execution of ransomware encryption.
Your users and apps have left the perimeter. Umbrella provides visibility into internet activity across all devices, over all ports, even when users are off your corporate network. You can even retain the logs forever.
Umbrella learns from internet activity to automatically identify attacker infrastructure staged for current and emergent threats. We capture and understand relationships between malware, domains, IPs, and networks across the internet.
Umbrella analyzes data to identify patterns, detect anomalies and create models to predict if a domain or IP is likely malicious. Automatically correlate data and block attacks.
Access our threat intelligence of global DNS requests for a complete view of the relationships between domains, IPs, and malware. Enrich your incident response and SIEM data.
Umbrella uses URL and file reputation scores from Cisco Talos and Cisco AMP to block malicious content. Benefit from daily analysis of millions of malware samples and terabytes of data.
Umbrella is the simplest security you’ll ever deploy. There is no hardware to install or software to manually update, and the browser-based interface provides quick setup and ongoing management.
By changing one setting on your network server, access point or router, you can protect all devices — even those you don’t manage. Implement powerful security without operational complexity.
Protect laptops when the VPN is off with Umbrella’s light weight roaming client or built-in Cisco AnyConnect integration. Easily extend protection beyond the corporate network.
The Umbrella dashboard provides both central and local administration and reporting. Effectively create and manage policies, even for complex organizations.
Umbrella’s API enables you to integrate with your existing solutions to amplify protection. Automatically enrich the data in your SIEM, threat intelligence platform, or incident workflow to speed up investigation and response by security analysts.
Leverage our intelligence about malicious domains, IPs, and file hashes to enhance your security event data. Better prioritize incident response and speed up investigations.