The SASE security model, simplified
As opposed to traditional data center-oriented security, the SASE security model is placed at the cloud edge and offers security from end-to-end — the data center, remote offices, roaming users, and beyond. SASE provides secure access, whether an employee is logging into a cloud-based collaboration application or an on-premise application located inside the corporate data center.
The SASE security model involves several key components, most of which can be found inside of a single solution: Cisco Umbrella. Cisco Umbrella is at the center of Cisco’s SASE architecture and is a proven cloud-native solution, used by over 24,000 global organizations (and counting).
Cisco Umbrella SASE features
Cisco Umbrella features critical pieces of the SASE security model. Here are those tools and how they work:
DNS-layer security
The best way to block threats is to stop them at the DNS level. Cisco Umbrella DNS-layer security protects against attacks and blocks unwanted domains, cloud applications, and IP addresses before a connection is ever made. Cisco Umbrella’s DNS-layer security can get up-and-running in 30 minutes or less, giving your organization near-instant protection against bad actors.
Secure web gateway
Cisco Umbrella secure web gateway (SWG) reduces risk by using cloud-native capabilities to inspect and control web traffic. Cisco Umbrella SWG includes full visibility into web traffic, anti-virus and advanced malware protection, decryption, sandboxing, granular app activity, and content control — all in one easy-to-use interface.
Cloud-delivered firewall
The new workforce is embracing direct internet access (DIA), which means traditional security appliances are losing effectiveness. Cloud-delivered firewall relocates the traditional firewall appliance from the data center to the cloud. This approach promises the performance of a traditional firewall, while meeting the needs of the hybrid workplace.
Cloud access security broker
Cisco Umbrella cloud-access security broker (CASB) stands between workers and cloud applications, assuring that the right people have access and security policies are enforced. CASB prevents attackers from using all types of apps to enter your corporate network, thus preventing data breaches and devastating cyberattacks.
Data loss prevention
Umbrella data loss prevention (DLP) analyzes sensitive data in-line to provide visibility and control over sensitive data. DLP does more than retroactively alert you of potential leaks and abnormal file transfers. It blocks the transfer of your sensitive data before it even leaves your organization.
Remote browser isolation
Users who need to access potentially risky sites or uncategorized destinations for legitimate purposes require an added layer of protection against browser-based threats. Umbrella remote browser isolation (RBI) isolates web traffic from the user device and the threat in an “air gap,” so that users can safely access those sites without the possibility of malware infections.
