Off-network endpoint security

Your users work from many locations and devices, with a whopping 49% considered remote or roaming. If 85% of your mobile workers skip the VPN, is your perimeter security leaving your employees exposed?

Endpoint security is no longer providing enough protection. When data exfiltration starts minutes after a system is compromised, advanced detection tools may not help your short-staffed security team stop security breaches in time. To help address these challenges, all Cisco Umbrella packages provide effective roaming protection against threats. We protect Windows, MacOS, iOS, Chrome OS, and Android devices outside the network security perimeter — without sacrificing performance.

If you already use Cisco AnyConnect, simply upgrade your existing client to v4.3 or higher and enable roaming security. Unlike using the VPN, there’s absolutely nothing new for end users to do — and no performance sacrifice.

Our endpoint security footprints enforce policies at the DNS layer to prevent system compromise and data exfiltration — over any port or protocol. Whether devices are on or off the corporate network, Cisco Umbrella logs or blocks all internet activity destined to malicious infrastructures — unlike antivirus, sandboxes, or other agents that log or block only some device activity from malicious payloads.

Our endpoint footprint simply forwards DNS requests or tunnels to suspicious IP connections to the nearest data center in our global network. Our simple solution is so powerful because it enables Umbrella to be a virtual “bump-in-the-wire” for every internet connection. We allow good requests. We redirect users to a block page for malicious requests. And we can even proxy connections from risky domains for deeper inspection.

We know everyone promises it. And we know you already have multiple clients on your endpoints. Our endpoint security footprint in memory and on disk is 4 times smaller than antivirus because enforcement happens in the cloud. Our client neither scans the system nor runs in kernel space, so unlike other advanced endpoint security protections, it will not crash, hog memory, or pester the end user.

Deploying the client to thousands of devices is easy using Windows GPO, Apple Remote Desktop, or any agent deployment tool (e.g. BigFix) with our command line interface. And the client updates automatically without manual intervention or reboots as soon as a new version is available.