What is SASE?
Key benefits of Cisco Umbrella SASE
Cisco Umbrella delivers several essential SASE benefits to manage cloud app access, policy enforcement, and much more. With Cisco Umbrella, you can:
- Deliver access that’s closer to the user and the cloud edge
- Consolidate security into a single cloud solution and framework
- Gain efficiencies using a trusted as-a-service model
- Simplify policy enforcement and deployment
- Deliver fast, secure internet and cloud app access, 24/7
The six essential components of Cisco Umbrella
Cisco Umbrella SASE components combine best-in-class features for modern hybrid workplaces, remote workers, and more. They are:
Secure web gateway
Gain more control and transparency and shield your workers from malware and other dangerous attacks. Umbrella’s secure web gateway (SWG) is a full proxy that logs and inspects your organization’s web traffic to deliver full visibility, URL and application-level controls, and advanced threat protection.
Cloud access security broker
Expose shadow IT quicker and more efficiently. Umbrella’s cloud access security broker (CASB) detects and reports on cloud applications in use across your environment. Insights can help guide cloud adoption, reduce risk, and block the use of offensive or inappropriate cloud applications. CASB secures user identities, prevents accounts from being compromised, and ensures cloud-based data is safe from threats or loss.
Cloud-delivered firewall
The Umbrella cloud-delivered firewall provides visibility and control for all traffic across all ports and protocols. This could include mobile apps, peer-to-peer file sharing, collaboration (for example, WebEx or Zoom), or any non-web or non-DNS traffic. It logs activity and blocks unwanted traffic using IP, port, and protocol rules (layer 3/4 firewall), application rules (layer 7 firewall), and intrusion prevention system (IPS) rules.
DNS-layer security
By enforcing security at the DNS-layer, Umbrella uses the internet’s infrastructure to block requests to malicious and unwanted destinations before a connection is even established, stopping threats over any port or protocol. Organizations can provision Umbrella’s DNS-layer security in minutes, typically while improving performance for users.
Data loss prevention
Umbrella data loss prevention (DLP) analyzes sensitive data in-line to provide visibility and control over sensitive data. DLP does more than retroactively alert you of potential leaks and abnormal file transfers. It blocks the transfer of your sensitive data before it even leaves your organization.
Remote browser isolation
Users who need to access potentially risky sites or uncategorized destinations for legitimate purposes require an added layer of protection against browser-based threats. Umbrella remote browser isolation (RBI) isolates web traffic from the user device and the threat in an “air gap,” so that users can safely access those sites without the possibility of malware infections.
