| Find the best Umbrella package for your team | DNS Security Essentials | DNS Security Advantage | SIG Essentials | SIG Advantage |
|---|---|---|---|---|
| Security & control | ||||
| Secure web gateway | ||||
| Proxy and inspect web traffic (incl. decryption of SSL (HTTPS) traffic) | Partial | |||
| Enable web filtering by domain or category (SIG filtering by URL) | ||||
| Create custom block/allow lists of domains | ||||
| Create custom block/allow lists of URLs | ||||
| Block files based on AV Engine and malware defense | Partial | |||
| Use malware analytics (sandbox) on suspicious files | 500/day | Unlimited | ||
| Cloud access security broker | ||||
| Cloud app discovery, risk scoring, blocking or activity controls | Partial | Partial | ||
| Scan and remove malware from cloud-based file storage apps | Two apps | |||
| DNS-layer security | ||||
| Block domains with malware, phishing, botnet, or other high risk items | ||||
| Cloud delivered firewall | ||||
| Create layer 3/layer 4 policies to block specific IPs, ports, and protocols | ||||
| Leverage layer 7 protection including an Intrusion Prevention System | Add-on | |||
| Multimode cloud data loss prevention | ||||
| Enable inline and out-of-band data inspection and blocking capabilities to protect sensitive data | Add-on | |||
| Remote browser isolation | ||||
| Provide safe access to risky sites, web apps and all web destinations | Add-on | Add-on | ||
| XDR and threat intelligence | ||||
| Utilize SecureX cross product security data and automated response actions | ||||
| Access Umbrella’s deep domain, IP, and ASN data for rapid investigations | ||||
| Deployment & management | ||||
| Traffic forwarding | ||||
| Forward external DNS for on-network coverage and off-network devices | ||||
| Cisco AnyConnect client to deploy Umbrella module to forward traffic | ||||
| User attribution | ||||
| Create policies and view reports by network, device, and user | ||||
| Create policies and view reports using SAML | ||||
| Management | ||||
| Customize block pages and bypass options | ||||
| Use our multi-org console to centrally manage decentralized orgs | ||||
| Umbrella API to create, read, update, and delete IDs child orgs | ||||
| Reporting & logs | ||||
| Real-time activity search, plus Umbrella API to easily extract key events | ||||
| Choose North America or Europe log storage | ||||
| Use Cisco-managed S3 buckets or customer AWS S3 bucket | ||||
| * This is a condensed listing of features. Refer to the product data sheets for specific package details. | ||||
Talk to a security expert
DNS Security Essentials
Block threats at the DNS layer across your enterprise in minutes without added latency
DNS Security Advantage
Get DNS protection plus additional web security and threat insights to speed up investigations
SIG Essentials
Deploy advanced security functions and simplify management with the most effective security in the industry
SIG Advantage
Unlock the highest levels of protection and control with advanced security functions like layer 7 firewall with IPS, DLP, and more
