What is SASE?
Get simple, streamlined cloud security
The increasing need to safeguard remote access, fortify hybrid offices, and protect company data from cybersecurity breaches drove Gartner to coin a new term in late 2019: Secure Access Service Edge (SASE). SASE offers an alternative to traditional data center-oriented security by unifying networking and security services into a single cloud-delivered service.
Cisco Umbrella can be your first step towards a full SASE architecture, delivering flexible, scalable cloud-based security, whenever and wherever you need it.
Gartner created SASE – but what is it?
Gartner’s SASE architecture combines the functions of network security, including zero-trust network access, secure web gateway (SWG), and firewall as a service (FWaaS) with wide area network (WAN) capabilities to support the secure access needs of organizations. SASE delivers speed, agility, and protection via the cloud, optimizing productivity while reducing complexity and cost.
Key benefits of Cisco Umbrella SASE
Cisco Umbrella delivers several essential SASE benefits to manage cloud app access, policy enforcement, and much more. With Cisco Umbrella, you can:
- Deliver access that’s closer to the user and the cloud edge
- Consolidate security into a single cloud solution and framework
- Gain efficiencies using a trusted as-a-service model
- Simplify policy enforcement and deployment
- Deliver fast, secure internet and cloud app access, 24/7
The six essential components of Cisco Umbrella
Cisco Umbrella SASE components combine best-in-class features for modern hybrid workplaces, remote workers, and more. They are:
Secure web gateway
Gain more control and transparency and shield your workers from malware and other dangerous attacks. Umbrella’s secure web gateway (SWG) is a full proxy that logs and inspects your organization’s web traffic to deliver full visibility, URL and application-level controls, and advanced threat protection.
Cloud access security broker
Expose shadow IT quicker and more efficiently. Umbrella’s cloud access security broker (CASB) detects and reports on cloud applications in use across your environment. Insights can help guide cloud adoption, reduce risk, and block the use of offensive or inappropriate cloud applications. CASB secures user identities, prevents accounts from being compromised, and ensures cloud-based data is safe from threats or loss.
Cloud-delivered firewall
The Umbrella cloud-delivered firewall provides visibility and control for all traffic across all ports and protocols. This could include mobile apps, peer-to-peer file sharing, collaboration (for example, WebEx or Zoom), or any non-web or non-DNS traffic. It logs activity and blocks unwanted traffic using IP, port, and protocol rules (layer 3/4 firewall), application rules (layer 7 firewall), and intrusion prevention system (IPS) rules.
DNS-layer security
By enforcing security at the DNS-layer, Umbrella uses the internet’s infrastructure to block requests to malicious and unwanted destinations before a connection is even established, stopping threats over any port or protocol. Organizations can provision Umbrella’s DNS-layer security in minutes, typically while improving performance for users.
Data loss prevention
Umbrella data loss prevention (DLP) analyzes sensitive data in-line to provide visibility and control over sensitive data. DLP does more than retroactively alert you of potential leaks and abnormal file transfers. It blocks the transfer of your sensitive data before it even leaves your organization.
Remote browser isolation
Users who need to access potentially risky sites or uncategorized destinations for legitimate purposes require an added layer of protection against browser-based threats. Umbrella remote browser isolation (RBI) isolates web traffic from the user device and the threat in an “air gap,” so that users can safely access those sites without the possibility of malware infections.
Watch a live demo of Cisco Umbrella
Ready to explore SASE?
Join us for a free live demonstration of Cisco Umbrella, followed by a Q&A with security experts to answer your questions.
